{"vulnerability": "2025-25", "sightings": [{"uuid": "f674138f-471c-4461-a748-480feaa48b66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25110", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhleo5bc3p2d", "content": "", "creation_timestamp": "2025-02-07T10:16:51.787548Z"}, {"uuid": "4507b1dd-d0c5-457d-99a1-2aa5da923a37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25111", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962493470604940", "content": "", "creation_timestamp": "2025-02-07T12:00:49.402380Z"}, {"uuid": "7512b95f-c2bb-4501-9cd8-ad0d3dd55b25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25156", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhlngvds5n2a", "content": "", "creation_timestamp": "2025-02-07T12:53:55.097568Z"}, {"uuid": "2e7d3b36-ae99-4cfc-b4b1-58bb17618d52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25111", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhleoa3ni225", "content": "", "creation_timestamp": "2025-02-07T10:16:54.569394Z"}, {"uuid": "9f0f4f76-8738-435e-a69e-aeedfb7decd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25116", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhleod4vtf2u", "content": "", "creation_timestamp": "2025-02-07T10:16:57.953325Z"}, {"uuid": "ffa532e1-a766-4606-aa50-453aefcd144f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25128", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhleoshpyn2x", "content": "", "creation_timestamp": "2025-02-07T10:17:13.849728Z"}, {"uuid": "dce10398-06fe-449b-b181-9aaf83b386f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25116", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962493484788364", "content": "", "creation_timestamp": "2025-02-07T12:00:49.731737Z"}, {"uuid": "ec191daf-7f5d-4cac-8a43-549c7a283dab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25135", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhleouy2b42a", "content": "", "creation_timestamp": "2025-02-07T10:17:16.538829Z"}, {"uuid": "a4f415a0-fef1-41ef-93f3-bac0a882a03b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25246", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113953250081835624", "content": "", "creation_timestamp": "2025-02-05T20:50:06.470060Z"}, {"uuid": "138cb8b0-d689-4f07-ac0f-26e024c391ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25181", "type": "seen", "source": "https://bsky.app/profile/seifreed.bsky.social/post/3lhhhm4fdyy2y", "content": "", "creation_timestamp": "2025-02-05T20:58:46.755665Z"}, {"uuid": "4b441406-f9c2-411e-b70a-6c3d176e0bf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25039", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lherfv2s7g2p", "content": "", "creation_timestamp": "2025-02-04T19:16:15.062067Z"}, {"uuid": "22f957f6-f60f-47b6-9ec4-db9f63b8ac08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25246", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhg4lw3ons2z", "content": "", "creation_timestamp": "2025-02-05T08:09:09.766346Z"}, {"uuid": "d4fc89ff-16f0-458b-ae46-e8b7f59fed54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25138", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhleozvqgd2v", "content": "", "creation_timestamp": "2025-02-07T10:17:21.797235Z"}, {"uuid": "7a4948dc-ecf2-4322-9aa2-85faaf61a29d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25139", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlep4kjxn2u", "content": "", "creation_timestamp": "2025-02-07T10:17:24.701292Z"}, {"uuid": "1d07e3af-2892-46a9-bb24-18f0b1190ec5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25117", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962493500243898", "content": "", "creation_timestamp": "2025-02-07T12:00:49.930398Z"}, {"uuid": "8caa7424-9bc7-4f16-b283-2a1e66921cb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25151", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhlngvh22k22", "content": "", "creation_timestamp": "2025-02-07T12:53:55.666672Z"}, {"uuid": "9a343044-cf50-4a74-a211-f0bac5842982", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25153", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962788819112018", "content": "", "creation_timestamp": "2025-02-07T13:15:56.825267Z"}, {"uuid": "63dc4e6e-6cc3-4c1f-8f68-5949f3af6183", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25181", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lhhhxtgbhw22", "content": "", "creation_timestamp": "2025-02-05T21:05:19.396372Z"}, {"uuid": "dba0ba79-6f05-4470-91a5-d02887a7f7ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25140", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlep7h2vn2u", "content": "", "creation_timestamp": "2025-02-07T10:17:27.742303Z"}, {"uuid": "964e2df8-6313-4c65-af6a-71f517c68bf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25143", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlepefncw26", "content": "", "creation_timestamp": "2025-02-07T10:17:33.050215Z"}, {"uuid": "9e9dff5a-03b3-4bbf-aec8-394226aab39a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25120", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962493515182350", "content": "", "creation_timestamp": "2025-02-07T12:00:50.165847Z"}, {"uuid": "d6c4dad7-7232-4787-9082-d50381b18efc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25144", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhlngvktqf2a", "content": "", "creation_timestamp": "2025-02-07T12:53:56.264533Z"}, {"uuid": "79309b28-ff08-425d-9f03-bfc04dac6681", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25069", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhloog6c4c2d", "content": "", "creation_timestamp": "2025-02-07T13:15:58.611934Z"}, {"uuid": "233d23d4-49f1-4e6d-9c95-b552cae21f71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25144", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlepgz5xv2u", "content": "", "creation_timestamp": "2025-02-07T10:17:35.459539Z"}, {"uuid": "33954b90-5280-4609-9b1d-d8d95a657725", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25152", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhlngvodxz2w", "content": "", "creation_timestamp": "2025-02-07T12:53:56.855693Z"}, {"uuid": "29b1db6a-bf5e-4ba8-ae06-ba3fc0af5ea6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25154", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962847841773060", "content": "", "creation_timestamp": "2025-02-07T13:30:56.729738Z"}, {"uuid": "6a55d94f-ce35-4b44-b4d5-a7bcf7fd9e6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25145", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlepjdsnf2u", "content": "", "creation_timestamp": "2025-02-07T10:17:37.910419Z"}, {"uuid": "950e4fa2-b34e-4fc4-bacb-268d17eca8ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25123", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962552513932717", "content": "", "creation_timestamp": "2025-02-07T12:15:51.089217Z"}, {"uuid": "1db1d25f-29d8-4f53-afee-16f79f307033", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25125", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962552528481579", "content": "", "creation_timestamp": "2025-02-07T12:15:51.174149Z"}, {"uuid": "221ab77c-bfa8-40da-b3a0-89953174e7af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25064", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113941586596378393", "content": "", "creation_timestamp": "2025-02-03T19:23:55.882480Z"}, {"uuid": "037bffcf-e679-4d9c-919b-70cdacf1c313", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25062", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhaoogmsmt27", "content": "", "creation_timestamp": "2025-02-03T04:16:42.059131Z"}, {"uuid": "8c8e33eb-3e92-4cd5-9855-5fd97128af8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25151", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlepw2obv2x", "content": "", "creation_timestamp": "2025-02-07T10:17:51.218940Z"}, {"uuid": "a12fb24b-8ed2-43e4-a7b4-3ab3ab66df58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25152", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlepy76qw26", "content": "", "creation_timestamp": "2025-02-07T10:17:53.447779Z"}, {"uuid": "d5879f9a-4001-4cf1-875c-6c149d540ec9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25163", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhleqjxgfm24", "content": "", "creation_timestamp": "2025-02-07T10:18:12.151811Z"}, {"uuid": "4583e328-a191-4c9a-9862-48d529c62f41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25166", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhleqmb4v22t", "content": "", "creation_timestamp": "2025-02-07T10:18:15.040722Z"}, {"uuid": "5dd79899-e730-40e7-9a5d-0df218086e18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25126", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962552562595031", "content": "", "creation_timestamp": "2025-02-07T12:15:51.255925Z"}, {"uuid": "421483f0-08ee-4078-93a0-cbbe0c3b662c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25153", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhlngvroxf2p", "content": "", "creation_timestamp": "2025-02-07T12:53:57.464715Z"}, {"uuid": "1f31346a-e884-4359-8a4f-cf23b0caccc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25155", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962847877311880", "content": "", "creation_timestamp": "2025-02-07T13:30:57.274795Z"}, {"uuid": "ee5c7f1e-721f-499d-bdfc-f5d37dddf1d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25063", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhaoojmvt327", "content": "", "creation_timestamp": "2025-02-03T04:16:44.854321Z"}, {"uuid": "838b2851-5735-4cdc-a233-48b8138e3037", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25065", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113941668043446663", "content": "", "creation_timestamp": "2025-02-03T19:44:38.786920Z"}, {"uuid": "155a5a15-0b29-4595-84a5-768b1d57e6f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25181", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113941668057878633", "content": "", "creation_timestamp": "2025-02-03T19:44:38.865927Z"}, {"uuid": "7460bd49-1a59-4793-b286-38e180a33db0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25153", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhleq2mka72q", "content": "", "creation_timestamp": "2025-02-07T10:17:56.192128Z"}, {"uuid": "73cd17d1-98e7-4b8d-a355-e5f9dde79cec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25085", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962257155092667", "content": "", "creation_timestamp": "2025-02-07T11:00:44.117591Z"}, {"uuid": "7d4ea2ac-33b8-4c4e-9fa2-05c6d7a45841", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25128", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962552578828603", "content": "", "creation_timestamp": "2025-02-07T12:15:51.636399Z"}, {"uuid": "58df7006-0263-4b7a-a26a-e5abbd17bc2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25145", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhlngvv5wy23", "content": "", "creation_timestamp": "2025-02-07T12:53:58.017677Z"}, {"uuid": "dc415ad2-9742-438d-bd31-278838ef8b08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25181", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhcedi5u672h", "content": "", "creation_timestamp": "2025-02-03T20:16:56.845476Z"}, {"uuid": "321491a0-fdae-4be0-85b2-8e89b0a51568", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25064", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhceddalcz2e", "content": "", "creation_timestamp": "2025-02-03T20:16:51.714258Z"}, {"uuid": "829d85c5-927d-487f-a323-878a185c558a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25065", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhcedfxdts2c", "content": "", "creation_timestamp": "2025-02-03T20:16:54.725644Z"}, {"uuid": "eb75a97d-863b-4db7-b115-4ec566ea97fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25181", "type": "seen", "source": "https://bsky.app/profile/nicolefishbein.bsky.social/post/3lhcfixgiu22q", "content": "", "creation_timestamp": "2025-02-03T20:37:54.570710Z"}, {"uuid": "452768ac-30c2-498c-95d7-2d5fe2225abd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25155", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhleqabidx2d", "content": "", "creation_timestamp": "2025-02-07T10:18:01.904472Z"}, {"uuid": "bbb13df6-6943-46f1-85e0-8cce816b95a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25088", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962257169996805", "content": "", "creation_timestamp": "2025-02-07T11:00:45.265900Z"}, {"uuid": "8a8e0c4c-870a-40fb-9e65-8b0e44b5d19b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25135", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962611582135838", "content": "", "creation_timestamp": "2025-02-07T12:30:51.671224Z"}, {"uuid": "9d7ab4c1-3379-4946-8e71-32c7bca8081a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25155", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhlngvyjpf2p", "content": "", "creation_timestamp": "2025-02-07T12:53:58.617960Z"}, {"uuid": "c240e69f-ad90-4147-9923-971e67f6d94e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25156", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962847892199892", "content": "", "creation_timestamp": "2025-02-07T13:30:57.523717Z"}, {"uuid": "88726c66-d120-46d7-b356-d856a49964a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25156", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhleqclt6h2q", "content": "", "creation_timestamp": "2025-02-07T10:18:04.394827Z"}, {"uuid": "883629ab-1d97-459c-8465-3b5a77d99c67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25091", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962257185139272", "content": "", "creation_timestamp": "2025-02-07T11:00:45.981704Z"}, {"uuid": "94f40260-371d-4c3e-b73d-e28354c82049", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25136", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962611617273043", "content": "", "creation_timestamp": "2025-02-07T12:30:52.157128Z"}, {"uuid": "e18b037a-dab8-4e2c-85f1-ee48295feda8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25148", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhlngw4ttr2w", "content": "", "creation_timestamp": "2025-02-07T12:53:59.173624Z"}, {"uuid": "855782e5-6362-4ba9-84d8-2369298dd064", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25159", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962847907236989", "content": "", "creation_timestamp": "2025-02-07T13:30:57.870900Z"}, {"uuid": "fced61b9-945a-4b9a-8bbe-80a49ecd702f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25246", "type": "seen", "source": "https://infosec.exchange/users/wdormann/statuses/113951565325340606", "content": "", "creation_timestamp": "2025-02-05T13:41:39.206963Z"}, {"uuid": "3b1a1f1b-1ee0-4552-841e-d8d0efeed9f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25066", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhavd6ux5w2b", "content": "", "creation_timestamp": "2025-02-03T06:15:41.107239Z"}, {"uuid": "7413cc9f-64ee-4543-8a28-c57574fa0078", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25066", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113938615957817888", "content": "", "creation_timestamp": "2025-02-03T06:48:27.813223Z"}, {"uuid": "9b2c3d60-c39b-4e6b-abfe-747905d84c5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25075", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962139048228495", "content": "", "creation_timestamp": "2025-02-07T10:30:41.383891Z"}, {"uuid": "2c5af44f-72ab-4f9a-b85f-1a14c6095bfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25063", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhb3efvnpw25", "content": "", "creation_timestamp": "2025-02-03T08:03:51.117226Z"}, {"uuid": "c42bf45e-d4e5-4bcd-b94e-414740678e09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25062", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhb3efyy4g2y", "content": "", "creation_timestamp": "2025-02-03T08:03:51.689464Z"}, {"uuid": "86eed428-5f5c-4b4e-a0b1-06559a29993f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25066", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhbbj7qfdz2h", "content": "", "creation_timestamp": "2025-02-03T09:53:48.155316Z"}, {"uuid": "56034c21-3426-4027-bbea-ea99c7f41be0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25211", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3llnnhcapat2v", "content": "", "creation_timestamp": "2025-03-31T05:40:11.884700Z"}, {"uuid": "767b6416-8740-4a4b-b04a-8fcd8cb9d13b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25039", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhf3uuucpc2k", "content": "", "creation_timestamp": "2025-02-04T22:23:35.929548Z"}, {"uuid": "ae5d56fd-8bfe-42eb-abda-d8e3c0cad1c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25076", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962139063589074", "content": "", "creation_timestamp": "2025-02-07T10:30:41.609827Z"}, {"uuid": "d7904cb6-92f3-41ca-9843-a6cc99155e2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25181", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhckksyjdl2u", "content": "", "creation_timestamp": "2025-02-03T22:08:33.145187Z"}, {"uuid": "85552b45-b9f0-4100-a0a3-1ef90b4f0712", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25077", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962139077936577", "content": "", "creation_timestamp": "2025-02-07T10:30:41.942857Z"}, {"uuid": "d36156f4-a13c-4a15-940a-6b46dde4f57d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25078", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962139092623182", "content": "", "creation_timestamp": "2025-02-07T10:30:42.145194Z"}, {"uuid": "6a3ac2e9-ff0c-4b4d-8c4b-eb8d65c3e746", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25181", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lhi5s7xhpk2e", "content": "", "creation_timestamp": "2025-02-06T03:35:56.809186Z"}, {"uuid": "24f28cef-82d1-4a4c-8208-37ac2c45c61f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25093", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962257220071985", "content": "", "creation_timestamp": "2025-02-07T11:00:46.061731Z"}, {"uuid": "d22f26b0-1400-4284-b84b-cf11e421f19d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25138", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962611631443997", "content": "", "creation_timestamp": "2025-02-07T12:30:52.559559Z"}, {"uuid": "e170458d-c543-4d30-a3ea-d36b25caeec0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25159", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhlngwbqci27", "content": "", "creation_timestamp": "2025-02-07T12:53:59.793877Z"}, {"uuid": "24e68fe1-3f79-4d4f-bbde-d30889dcc4e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25079", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962198095321727", "content": "", "creation_timestamp": "2025-02-07T10:45:42.399613Z"}, {"uuid": "b45d52dc-4fc0-47d6-97fc-8e049d5ad8a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25579", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114258772073299925", "content": "", "creation_timestamp": "2025-03-31T19:48:22.182267Z"}, {"uuid": "6428295d-ace1-4698-91b0-5213b03b095a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25064", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhckksnvcd2h", "content": "", "creation_timestamp": "2025-02-03T22:08:31.200418Z"}, {"uuid": "6ce1a9a8-bd38-4f01-bccf-069f32b2ebff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25085", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlemsuwqc2t", "content": "", "creation_timestamp": "2025-02-07T10:16:07.328544Z"}, {"uuid": "7c19786e-2e7a-4fbc-b515-579842d50196", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25096", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlend2s5e24", "content": "", "creation_timestamp": "2025-02-07T10:16:24.198991Z"}, {"uuid": "168d6c32-5c8c-416a-bd2f-e6156ab03be3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25105", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlenttewq27", "content": "", "creation_timestamp": "2025-02-07T10:16:41.772436Z"}, {"uuid": "f09c3b36-af44-4703-b474-229fb6dc2673", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25579", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114258772073299925", "content": "", "creation_timestamp": "2025-03-31T19:48:22.191771Z"}, {"uuid": "db312d25-bded-4637-b244-1814b512aea9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25065", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhckksv5ze2k", "content": "", "creation_timestamp": "2025-02-03T22:08:32.530602Z"}, {"uuid": "8ab894d7-f36b-437f-a784-644fdd9e4988", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25095", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlenaposa22", "content": "", "creation_timestamp": "2025-02-07T10:16:21.749195Z"}, {"uuid": "e5db648e-2abb-4b23-8c4f-380ba334f901", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25101", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlenkchvs25", "content": "", "creation_timestamp": "2025-02-07T10:16:31.763237Z"}, {"uuid": "9c3696a3-6d3a-43e9-97aa-9303ba143ca0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25080", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962198129108617", "content": "", "creation_timestamp": "2025-02-07T10:45:43.146261Z"}, {"uuid": "b0cdc2dd-a72d-492c-ad79-2112422c1aa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25139", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962611645583568", "content": "", "creation_timestamp": "2025-02-07T12:30:52.661275Z"}, {"uuid": "bd56a20b-a9f4-42d5-b6c2-20cece981c0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25167", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhlngwfemi2o", "content": "", "creation_timestamp": "2025-02-07T12:54:00.396287Z"}, {"uuid": "025fdc23-3eeb-46ec-af91-0dedf9979e20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25211", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114255941618338091", "content": "", "creation_timestamp": "2025-03-31T07:48:33.145172Z"}, {"uuid": "b442a17b-0ab8-44bb-bd59-d16e45b05dd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25211", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114255941618338091", "content": "", "creation_timestamp": "2025-03-31T07:48:33.142780Z"}, {"uuid": "12fd5ccb-1e2d-43c1-8c63-bfc02461fc08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25081", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962198143273239", "content": "", "creation_timestamp": "2025-02-07T10:45:43.431145Z"}, {"uuid": "e64788ab-38e8-4143-a8ed-12f02186e3b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25166", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhlngwiroj2w", "content": "", "creation_timestamp": "2025-02-07T12:54:01.002891Z"}, {"uuid": "f067ac0c-21f9-4f93-8e2d-b45e66c853d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25160", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962906911436375", "content": "", "creation_timestamp": "2025-02-07T13:45:58.116046Z"}, {"uuid": "8dc9ad0d-c1a3-496b-b5cd-a9b2f2f2e239", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25181", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3lhgzfzmfjc27", "content": "", "creation_timestamp": "2025-02-05T16:44:52.274943Z"}, {"uuid": "e8c49c13-221a-427e-b382-2baff7943606", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25071", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlelue4vn2x", "content": "", "creation_timestamp": "2025-02-07T10:15:35.192966Z"}, {"uuid": "7e13c010-d936-4bc3-b62b-ed58f00d56e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25082", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962198157304777", "content": "", "creation_timestamp": "2025-02-07T10:45:43.677948Z"}, {"uuid": "faf92464-8562-485f-aa0d-cdaf8dd2a6b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25072", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlelwqjbi27", "content": "", "creation_timestamp": "2025-02-07T10:15:37.678461Z"}, {"uuid": "bc4f216f-2785-4aa8-bd96-8468a26bd704", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25104", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlenrfmnc2t", "content": "", "creation_timestamp": "2025-02-07T10:16:39.357902Z"}, {"uuid": "3f87c737-96dc-4883-bb65-4089db3783c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25123", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhleolcdby22", "content": "", "creation_timestamp": "2025-02-07T10:17:06.345857Z"}, {"uuid": "d146bba6-4279-418a-b3e7-5be5f84037b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25211", "type": "seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3llo2l4pvfz2p", "content": "", "creation_timestamp": "2025-03-31T09:34:59.038028Z"}, {"uuid": "f076959c-6bd6-42ed-86c0-07e7a9f46381", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25071", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962079963358647", "content": "", "creation_timestamp": "2025-02-07T10:15:39.781783Z"}, {"uuid": "b1730969-0855-4b40-9b39-7680f50362ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25072", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962079978655860", "content": "", "creation_timestamp": "2025-02-07T10:15:40.041229Z"}, {"uuid": "8a2cf1db-a4c6-4082-9b09-682f78c3b3cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25151", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113962208410533383", "content": "", "creation_timestamp": "2025-02-07T10:48:23.510852Z"}, {"uuid": "4f4f93fe-ffa1-40a9-926b-6758306e50f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25094", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962316217351559", "content": "", "creation_timestamp": "2025-02-07T11:15:46.029832Z"}, {"uuid": "c8be2019-645c-4a0b-ab67-cde4704b759f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25140", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962670647853546", "content": "", "creation_timestamp": "2025-02-07T12:45:52.994091Z"}, {"uuid": "ce78ff2a-cc20-45f0-b542-d30ddd464ec6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25163", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962906925504079", "content": "", "creation_timestamp": "2025-02-07T13:45:58.463055Z"}, {"uuid": "662dc942-c07f-4f6c-9e2e-5c6b3ac24959", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25073", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlelz47dd2v", "content": "", "creation_timestamp": "2025-02-07T10:15:40.329481Z"}, {"uuid": "ce821bc7-c143-4202-9e9d-77c8ca041bd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25073", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962080012117232", "content": "", "creation_timestamp": "2025-02-07T10:15:40.669372Z"}, {"uuid": "94800c12-0cb0-4e18-8c9b-bd7a43e0481d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25136", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhleoxircv2x", "content": "", "creation_timestamp": "2025-02-07T10:17:19.373874Z"}, {"uuid": "5fe2c4aa-68f6-46e8-ae33-aec0b8561f0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25147", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlepojmem2a", "content": "", "creation_timestamp": "2025-02-07T10:17:43.592186Z"}, {"uuid": "1dbbe17a-4f18-4b94-9b94-d33e12b83f1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25101", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113962208280708929", "content": "", "creation_timestamp": "2025-02-07T10:48:20.744963Z"}, {"uuid": "1a35cedf-a122-403e-8246-ddb9bb9408a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25096", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962316267759701", "content": "", "creation_timestamp": "2025-02-07T11:15:46.246786Z"}, {"uuid": "8d56799c-498c-4c9f-a399-ca17efcca258", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25074", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962080047009405", "content": "", "creation_timestamp": "2025-02-07T10:15:41.053446Z"}, {"uuid": "77d89afa-514e-41e3-8ab4-d6696b35f414", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25146", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhleplx6pi2x", "content": "", "creation_timestamp": "2025-02-07T10:17:40.647324Z"}, {"uuid": "13a981fb-f11e-4115-bba8-e71e98fbed9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25148", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlepr2dfp2q", "content": "", "creation_timestamp": "2025-02-07T10:17:45.965188Z"}, {"uuid": "2eefadc6-9034-4b6e-9cc4-e1c85644f814", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25107", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113962208369925037", "content": "", "creation_timestamp": "2025-02-07T10:48:21.212214Z"}, {"uuid": "c7361077-1fb3-48be-9c2f-9e06f1112ba8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25074", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlem3j7sc25", "content": "", "creation_timestamp": "2025-02-07T10:15:42.855486Z"}, {"uuid": "72c58a8a-a145-400a-b302-4cce0c10fa73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25117", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhleog7dgw26", "content": "", "creation_timestamp": "2025-02-07T10:17:01.164928Z"}, {"uuid": "05529954-e72a-4afd-b4bd-048b53252b07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25106", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113962208313823294", "content": "", "creation_timestamp": "2025-02-07T10:48:21.503402Z"}, {"uuid": "7e119179-f621-41c0-a1c4-39b868baf6e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25095", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962316251413992", "content": "", "creation_timestamp": "2025-02-07T11:15:46.421418Z"}, {"uuid": "03221a22-6575-442c-8e3c-909fb638da4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25141", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962670681235122", "content": "", "creation_timestamp": "2025-02-07T12:45:53.495539Z"}, {"uuid": "7fc709ab-5b76-480b-905a-5f92dfb180d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25145", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962729712986246", "content": "", "creation_timestamp": "2025-02-07T13:00:54.174657Z"}, {"uuid": "2ab93417-85da-461f-ae0d-f6ea2d97d508", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25166", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962906944309809", "content": "", "creation_timestamp": "2025-02-07T13:45:58.663916Z"}, {"uuid": "42df35c0-a11e-4ed5-ad4c-81ed9580626b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25075", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlem62vaf2x", "content": "", "creation_timestamp": "2025-02-07T10:15:45.378372Z"}, {"uuid": "163c3c81-d99a-4683-a908-a9a5176a1cf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25088", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlemvzsi22t", "content": "", "creation_timestamp": "2025-02-07T10:16:10.421324Z"}, {"uuid": "8289522b-3861-498a-b6b2-9a579e35276d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25159", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhleqf7c372q", "content": "", "creation_timestamp": "2025-02-07T10:18:07.114219Z"}, {"uuid": "a0235401-e0a1-4b7e-b374-242f58327a9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25167", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113962208465179836", "content": "", "creation_timestamp": "2025-02-07T10:48:21.785357Z"}, {"uuid": "ef04d0a7-93f1-4bb4-a1f4-fde45538fa68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25097", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962316282731942", "content": "", "creation_timestamp": "2025-02-07T11:15:46.512010Z"}, {"uuid": "077fc36e-8f56-41fd-8c73-f24508032765", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25143", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962670695477549", "content": "", "creation_timestamp": "2025-02-07T12:45:53.715504Z"}, {"uuid": "5b24ca86-ce8b-49a6-b24b-e79c725aa865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25146", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962729726906255", "content": "", "creation_timestamp": "2025-02-07T13:00:54.503260Z"}, {"uuid": "9157ffd4-905a-4156-b0e9-3d9524029eb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25167", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962906958439951", "content": "", "creation_timestamp": "2025-02-07T13:45:58.781908Z"}, {"uuid": "d507ca16-e411-4a0d-a337-a5762a6c6a8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25076", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlemblrim2a", "content": "", "creation_timestamp": "2025-02-07T10:15:49.055013Z"}, {"uuid": "d3f57455-10fe-42bc-8471-b6c48f23e976", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25149", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhleptksl42a", "content": "", "creation_timestamp": "2025-02-07T10:17:48.759420Z"}, {"uuid": "7c989dcb-b6db-41b0-848b-2a32bf409b9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25098", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962375305292604", "content": "", "creation_timestamp": "2025-02-07T11:30:46.381376Z"}, {"uuid": "fde950bc-0ede-4ad6-a73d-6b7e5c3fe9fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25077", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhleme22cv2u", "content": "", "creation_timestamp": "2025-02-07T10:15:51.688186Z"}, {"uuid": "700768aa-3eaf-44fa-809d-f990fd151cc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25154", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhleq5vdqy2x", "content": "", "creation_timestamp": "2025-02-07T10:17:59.664331Z"}, {"uuid": "bf7ab040-77e2-47ad-bf53-e6e0729eb9ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25168", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhleqrewt72q", "content": "", "creation_timestamp": "2025-02-07T10:18:20.198691Z"}, {"uuid": "1e06e77e-7438-4b8a-a3c4-21cbf7d6a334", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25101", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962375319270925", "content": "", "creation_timestamp": "2025-02-07T11:30:46.544993Z"}, {"uuid": "dff05ae2-0076-4a2d-a149-33019544f42f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25144", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962670709483823", "content": "", "creation_timestamp": "2025-02-07T12:45:53.983118Z"}, {"uuid": "fe1546b5-af03-4fbb-b7be-313d1a72c43e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25147", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962729741670917", "content": "", "creation_timestamp": "2025-02-07T13:00:54.908186Z"}, {"uuid": "913f4adb-bec8-4602-913c-afb0b63fc0ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25078", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlemgcgxu24", "content": "", "creation_timestamp": "2025-02-07T10:15:54.064499Z"}, {"uuid": "f2adf97c-526d-48c4-9e99-ac10e90cda8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25103", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962375334420121", "content": "", "creation_timestamp": "2025-02-07T11:30:46.964582Z"}, {"uuid": "6f7381dc-c7b3-4874-87ff-7ce662541982", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25104", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962375367780534", "content": "", "creation_timestamp": "2025-02-07T11:30:47.174667Z"}, {"uuid": "ebdb4d4c-497d-4c68-9ea1-981c84f33a53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25154", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhlngujszr2w", "content": "", "creation_timestamp": "2025-02-07T12:53:51.397766Z"}, {"uuid": "9e4f3c4e-5936-49bd-bb62-5f28d993cf13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25148", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962729755467649", "content": "", "creation_timestamp": "2025-02-07T13:00:55.067206Z"}, {"uuid": "7c12293c-8a17-4a34-8979-45de7506dd38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25079", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlemily6s25", "content": "", "creation_timestamp": "2025-02-07T10:15:56.485811Z"}, {"uuid": "083221ef-baea-4894-8abf-74e90c22974b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25143", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhlnguswmj2v", "content": "", "creation_timestamp": "2025-02-07T12:53:52.137062Z"}, {"uuid": "f59dcc30-46e5-425f-9fa6-0cec8694d4ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25168", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962965955626019", "content": "", "creation_timestamp": "2025-02-07T14:00:58.994211Z"}, {"uuid": "3eb40740-849c-4b60-b272-9358ddc9b2ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25080", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhleml3hep2d", "content": "", "creation_timestamp": "2025-02-07T10:15:59.014589Z"}, {"uuid": "94df5c17-7220-4381-a479-692506d79b75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25081", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlemo5ltf2u", "content": "", "creation_timestamp": "2025-02-07T10:16:02.285251Z"}, {"uuid": "f8462f57-0dc9-4ee0-b840-c26d5387f64a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25093", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlen2ujku24", "content": "", "creation_timestamp": "2025-02-07T10:16:15.645556Z"}, {"uuid": "30930fa8-a30c-4fce-9ede-9a03c26c09fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25097", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlenfyi2f2x", "content": "", "creation_timestamp": "2025-02-07T10:16:27.284418Z"}, {"uuid": "79c64a33-420e-4133-a3b3-213feac47fb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25141", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlepbpmjd2v", "content": "", "creation_timestamp": "2025-02-07T10:17:29.972207Z"}, {"uuid": "de2590be-4907-4d0d-a053-25c3bcf1388c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25147", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhlnguwifu26", "content": "", "creation_timestamp": "2025-02-07T12:53:52.692115Z"}, {"uuid": "5889e8b8-1733-48a2-9f3b-c60a54a281a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25181", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lhjybz6f4s2a", "content": "", "creation_timestamp": "2025-02-06T21:02:43.026934Z"}, {"uuid": "e4955e96-b632-4842-ae8e-1fff0fd287ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25082", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlemqi6ut2v", "content": "", "creation_timestamp": "2025-02-07T10:16:04.785292Z"}, {"uuid": "1fa4566f-4231-4241-b5aa-0bcace28b752", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25091", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlemy5p3h2q", "content": "", "creation_timestamp": "2025-02-07T10:16:12.725229Z"}, {"uuid": "ac3bc6f4-8b98-443e-b64e-508e4f79205b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25105", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962434384817299", "content": "", "creation_timestamp": "2025-02-07T11:45:47.888580Z"}, {"uuid": "49c5f3c8-584d-4142-951f-2abda2ce6c2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25141", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhlnguzpsz2w", "content": "", "creation_timestamp": "2025-02-07T12:53:53.319557Z"}, {"uuid": "7686951c-7f1d-4a5a-8b49-2d8a92a200a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25149", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962788755728131", "content": "", "creation_timestamp": "2025-02-07T13:15:56.575541Z"}, {"uuid": "68cc23e3-51fc-4a2c-9e11-cecff50ecbcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25094", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlen6fqik2t", "content": "", "creation_timestamp": "2025-02-07T10:16:19.253365Z"}, {"uuid": "119b0bf5-99b9-4112-b1ca-75b303c003d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25106", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962434419853468", "content": "", "creation_timestamp": "2025-02-07T11:45:48.369763Z"}, {"uuid": "f6eb2213-6133-4d54-a346-8551131589b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25110", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962434468926245", "content": "", "creation_timestamp": "2025-02-07T11:45:49.111617Z"}, {"uuid": "2e5f4a99-e951-49d3-8705-7a6bff991fce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25149", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhlngv53rh2g", "content": "", "creation_timestamp": "2025-02-07T12:53:53.871532Z"}, {"uuid": "ce7d7c64-5d0e-45c3-b33c-cf6a61c99cce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25151", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962788789757041", "content": "", "creation_timestamp": "2025-02-07T13:15:56.650247Z"}, {"uuid": "53ed16bd-0c2a-4a35-885c-ce362b5954f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25098", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhleni5i3q27", "content": "", "creation_timestamp": "2025-02-07T10:16:30.079449Z"}, {"uuid": "7464a8f9-659b-49fe-90a1-539d9b574fed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25181", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lhjqetiesk2n", "content": "", "creation_timestamp": "2025-02-06T18:41:05.837074Z"}, {"uuid": "8f640b4b-f13c-49eb-8270-3c529068b56c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25246", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113949465977567561", "content": "", "creation_timestamp": "2025-02-05T04:47:45.717279Z"}, {"uuid": "da13f3fe-61a1-4ffe-97a7-d430f8e04269", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25246", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhfsvyal5g2p", "content": "", "creation_timestamp": "2025-02-05T05:15:48.952540Z"}, {"uuid": "6fbcee75-941d-4b70-b579-262569472669", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25103", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlennxwym24", "content": "", "creation_timestamp": "2025-02-07T10:16:35.666173Z"}, {"uuid": "cf2bbd69-3ad8-4f8d-882f-f165a5dea4bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25125", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhleonrndw26", "content": "", "creation_timestamp": "2025-02-07T10:17:08.961451Z"}, {"uuid": "44c25230-5d3c-45da-913f-7ee6cb7f27ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25126", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhleoq6n4v2x", "content": "", "creation_timestamp": "2025-02-07T10:17:11.502774Z"}, {"uuid": "7678bada-e6f9-49d1-9eb5-465c84922724", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25107", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962434455117031", "content": "", "creation_timestamp": "2025-02-07T11:45:49.004416Z"}, {"uuid": "d7ac0b76-0443-4a9e-ad2a-ef981e07e0b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25246", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113949941146080790", "content": "", "creation_timestamp": "2025-02-05T06:48:37.584117Z"}, {"uuid": "073a9afa-b365-42f7-bac5-5f8f75d5dca8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25064", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113946638367750447", "content": "", "creation_timestamp": "2025-02-04T16:48:44.529194Z"}, {"uuid": "411e8fca-e42f-40e1-bca7-f3e2f3bf58e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2586", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114257127161548213", "content": "", "creation_timestamp": "2025-03-31T12:50:02.662697Z"}, {"uuid": "33059d43-1248-4a11-9a63-4e7919d8be3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2586", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114257127161548213", "content": "", "creation_timestamp": "2025-03-31T12:50:02.659437Z"}, {"uuid": "dbf3c832-1a24-461f-889f-dd16c9646f30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25181", "type": "seen", "source": "https://bsky.app/profile/anontroyano.bsky.social/post/3lhil3xuhls2a", "content": "", "creation_timestamp": "2025-02-06T07:35:26.365311Z"}, {"uuid": "98001de2-228a-462b-a05a-3403130531ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25106", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlenwmkg52x", "content": "", "creation_timestamp": "2025-02-07T10:16:44.681651Z"}, {"uuid": "6cbfe6d5-8d28-4bf5-8e0d-f093c65c6e61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25120", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhleoiuj2i22", "content": "", "creation_timestamp": "2025-02-07T10:17:03.841955Z"}, {"uuid": "5672ef36-543e-47af-a5cc-c39d78f0dc91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25160", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhleqhlgtl2v", "content": "", "creation_timestamp": "2025-02-07T10:18:09.727069Z"}, {"uuid": "936b4244-f007-4b74-ab5c-653333441e67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25146", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhlngvafqv2a", "content": "", "creation_timestamp": "2025-02-07T12:53:54.525405Z"}, {"uuid": "031fb989-d651-4243-8da9-82539ab3567e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25152", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113962788803491893", "content": "", "creation_timestamp": "2025-02-07T13:15:56.736838Z"}, {"uuid": "d4d878d3-7099-43d8-b481-4ed7f8958d07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25181", "type": "seen", "source": "https://bsky.app/profile/anontroyano.bsky.social/post/3lhil3z7ofs2a", "content": "", "creation_timestamp": "2025-02-06T07:35:26.916535Z"}, {"uuid": "bd5dff62-6481-48c4-9ccf-aed27cdd59d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25064", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lhekj725662z", "content": "", "creation_timestamp": "2025-02-04T17:12:53.620881Z"}, {"uuid": "e89cf3b5-f7c1-4a20-9ef3-5a4c1d143454", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25107", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlenzovxo26", "content": "", "creation_timestamp": "2025-02-07T10:16:47.876503Z"}, {"uuid": "83cf9888-43cb-4bce-9af3-22ffe9e5cd5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25167", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhleqow75z23", "content": "", "creation_timestamp": "2025-02-07T10:18:17.405253Z"}, {"uuid": "2ece9c80-4d47-43fc-b446-1a971bce4209", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25187", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113965018530943298", "content": "", "creation_timestamp": "2025-02-07T22:42:58.768867Z"}, {"uuid": "903a2692-d2f3-4535-a2d9-cc28804c4838", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25187", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhmq6ux3gc2h", "content": "", "creation_timestamp": "2025-02-07T23:15:44.257126Z"}, {"uuid": "2040916b-4006-4253-938c-d85741b3bd8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25183", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhmrjawaz62t", "content": "", "creation_timestamp": "2025-02-07T23:39:28.258492Z"}, {"uuid": "bcf6e962-e23a-4210-9825-6d419111e586", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25246", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lhoqsj2f5v2b", "content": "", "creation_timestamp": "2025-02-08T18:32:03.320394Z"}, {"uuid": "bed56f49-8a0f-425b-9aaa-dc01361ddce1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25181", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/3533541", "content": "", "creation_timestamp": "2025-03-10T20:37:14.559415Z"}, {"uuid": "64143924-7aa1-4457-b00a-53e96624defa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2587", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkvcp5755m2s", "content": "", "creation_timestamp": "2025-03-21T13:23:52.492647Z"}, {"uuid": "50733846-b4f1-4b6f-ba57-88eb1271dbe3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25769", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lix3n4v65s23", "content": "", "creation_timestamp": "2025-02-24T19:32:22.846604Z"}, {"uuid": "d4eede61-a610-4857-a160-034336ed6b66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25598", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkc5tfsjrf26", "content": "", "creation_timestamp": "2025-03-13T22:36:09.919285Z"}, {"uuid": "d34224d2-e3b3-48c5-b1ee-ae193b596aad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/code/cves/2025/CVE-2025-25291.yaml", "content": "", "creation_timestamp": "2025-03-21T12:05:31.000000Z"}, {"uuid": "98941ff2-8941-4ecb-85c4-1aceedfbdda9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25242", "type": "seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3ll5g72me7f26", "content": "", "creation_timestamp": "2025-03-24T18:47:43.397187Z"}, {"uuid": "e5a21625-376c-4150-88bb-15c349f2dce2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25363", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkc5tfxs7224", "content": "", "creation_timestamp": "2025-03-13T22:36:10.473694Z"}, {"uuid": "3bd9b2a8-617b-4861-8846-b951c23f241d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2538", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lktozltwmp2e", "content": "", "creation_timestamp": "2025-03-20T21:59:06.893319Z"}, {"uuid": "2cbd7f45-556d-4d58-b034-ec6a8e399b11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2597", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkvcp5g5wh26", "content": "", "creation_timestamp": "2025-03-21T13:23:53.751550Z"}, {"uuid": "a203122f-2834-45c7-9b7d-0239daae2c46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2542", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll747phg6626", "content": "", "creation_timestamp": "2025-03-25T10:54:28.053087Z"}, {"uuid": "d1ea2357-0d3d-43be-9a71-53b06ff817aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25012", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lk4thnwrnzc2", "content": "", "creation_timestamp": "2025-03-11T19:51:51.610966Z"}, {"uuid": "6440cb71-2b0f-40a2-8c41-ac6a52488e1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25068", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkvcp5jqv72l", "content": "", "creation_timestamp": "2025-03-21T13:23:54.316162Z"}, {"uuid": "580364f7-722d-44fb-afa1-e1313ed2624d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25064", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lhs76fqnsc2y", "content": "", "creation_timestamp": "2025-02-10T03:27:16.767259Z"}, {"uuid": "58988182-3f70-4cb3-aa71-f46e982dbdf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-25064", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lhsbix3thc2f", "content": "", "creation_timestamp": "2025-02-10T04:08:57.928445Z"}, {"uuid": "488b2088-0e2f-473e-a289-05714038989e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25181", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lhsgllfpta2z", "content": "", "creation_timestamp": "2025-02-10T05:39:52.252657Z"}, {"uuid": "00f28b58-a5ef-4f6d-a4a9-94942f3ce337", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25181", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3lhshriip3v2e", "content": "", "creation_timestamp": "2025-02-10T06:01:03.818305Z"}, {"uuid": "beff1da6-903d-43f8-a6cc-c136ef245399", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25515", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114071918265034046", "content": "", "creation_timestamp": "2025-02-26T19:49:00.032840Z"}, {"uuid": "ff547bd3-d417-4a6c-bd82-13bb0a7f018d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25517", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114071918371625168", "content": "", "creation_timestamp": "2025-02-26T19:49:10.692132Z"}, {"uuid": "2464e3b0-27c3-4182-a28c-198540f75f39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25516", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114071918313891694", "content": "", "creation_timestamp": "2025-02-26T19:49:00.468158Z"}, {"uuid": "9e929eac-0efa-418e-ac50-c5b646fcbf40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25520", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114071918468630460", "content": "", "creation_timestamp": "2025-02-26T19:49:10.913253Z"}, {"uuid": "74be0a31-6aa8-44d6-b0a5-f18d2178af51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25769", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114060591507466269", "content": "", "creation_timestamp": "2025-02-24T19:48:26.980489Z"}, {"uuid": "79fe8ccd-4217-4c3f-b643-88f44928da8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25519", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114071918424654623", "content": "", "creation_timestamp": "2025-02-26T19:49:09.940229Z"}, {"uuid": "7c23f649-a37f-4b38-bb4c-6d9e51299afe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25614", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114140336830864693", "content": "", "creation_timestamp": "2025-03-10T21:48:44.678333Z"}, {"uuid": "f8888778-0c51-495b-8c1c-15c1b72944a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25521", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114071918523132034", "content": "", "creation_timestamp": "2025-02-26T19:49:10.383726Z"}, {"uuid": "91a280ca-2711-4619-887e-578d44558593", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25612", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lklpht6no22s", "content": "", "creation_timestamp": "2025-03-17T17:45:45.997989Z"}, {"uuid": "d88a7a16-7f01-439f-a03e-62c095eed14a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2538", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114197194526636726", "content": "", "creation_timestamp": "2025-03-20T22:48:23.539815Z"}, {"uuid": "441dc1d4-2bdb-4c98-a366-fd537b9dbc0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25650", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lklphtodwd26", "content": "", "creation_timestamp": "2025-03-17T17:45:48.078085Z"}, {"uuid": "f8209d30-3059-47ba-abf5-58e848eab0ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2505", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lktsgnupps2q", "content": "", "creation_timestamp": "2025-03-20T23:00:06.407159Z"}, {"uuid": "f512436f-217d-4708-9c0f-2e08f9495be4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25247", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lhskexvqmu2y", "content": "", "creation_timestamp": "2025-02-10T06:47:44.768184Z"}, {"uuid": "a3ad8f52-8db5-40c9-82e4-5457b44b7bb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25064", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lhsvbl7a422k", "content": "", "creation_timestamp": "2025-02-10T10:02:41.914438Z"}, {"uuid": "e5328bb3-ce79-4c0d-975e-8cdebb3eb44f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25065", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lhsvbl7a422k", "content": "", "creation_timestamp": "2025-02-10T10:02:42.005184Z"}, {"uuid": "b8106c84-7362-41ff-8319-3a67c5fee30a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25247", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113979337853157909", "content": "", "creation_timestamp": "2025-02-10T11:24:34.261908Z"}, {"uuid": "0a0a37b1-e33f-4faf-9ad7-b28f13f1c614", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25247", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lht4qhsler22", "content": "", "creation_timestamp": "2025-02-10T12:16:18.324674Z"}, {"uuid": "958eb04d-25c1-44e7-8734-24766a529d69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25247", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhtd3d5do32f", "content": "", "creation_timestamp": "2025-02-10T14:09:45.521716Z"}, {"uuid": "dc716012-829f-490c-a13f-5b9da0224793", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25246", "type": "seen", "source": "https://bsky.app/profile/leekthehack.bsky.social/post/3lhtg3wpxp22o", "content": "", "creation_timestamp": "2025-02-10T15:03:48.353294Z"}, {"uuid": "afd399a8-94f8-4386-8e49-6a75970c16bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25064", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113980202700650905", "content": "", "creation_timestamp": "2025-02-10T15:04:31.105248Z"}, {"uuid": "eff0a893-6f06-4b09-a70c-66261535112e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25186", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhtk6r3fgx2x", "content": "", "creation_timestamp": "2025-02-10T16:16:55.934742Z"}, {"uuid": "5e49311f-237e-459c-b343-e3f7487591c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25064", "type": "seen", "source": "https://thehackernews.com/2025/02/zimbra-releases-security-updates-for.html", "content": "", "creation_timestamp": "2025-02-10T08:09:00.000000Z"}, {"uuid": "74b8f210-e4c0-43a1-9363-f96b801a0718", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25188", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113980818586300320", "content": "", "creation_timestamp": "2025-02-10T17:41:08.465093Z"}, {"uuid": "4785560e-1e1c-4f9b-bf49-4c38481d1679", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-25246", "type": "seen", "source": "https://nvd.nist.gov/vuln/detail/CVE-2025-25246", "content": "", "creation_timestamp": "2025-02-10T18:04:50.373411Z"}, {"uuid": "ea558028-1ac7-4ead-9c0f-668e6f3e8ebb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25188", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhtqtx3wyr2c", "content": "", "creation_timestamp": "2025-02-10T18:16:09.251578Z"}, {"uuid": "47cc140a-2b6d-4da6-8508-7120f4e63940", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25064", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lhtyzxaqzh2u", "content": "", "creation_timestamp": "2025-02-10T20:42:41.590941Z"}, {"uuid": "8076b2e8-bc96-47f6-87ae-20e907f198a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25193", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113981856193211167", "content": "", "creation_timestamp": "2025-02-10T22:05:01.096585Z"}, {"uuid": "da2d773e-4b94-4145-a5b7-d0ca5a9d8ca8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25189", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113981896093771933", "content": "", "creation_timestamp": "2025-02-10T22:15:09.926984Z"}, {"uuid": "4228972f-4554-4677-ac6c-8ad88beb5ba3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25190", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113981896109702786", "content": "", "creation_timestamp": "2025-02-10T22:15:10.279047Z"}, {"uuid": "e703483a-f767-41b5-828f-f489bbfc69cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25189", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhu6ayiqzt2z", "content": "", "creation_timestamp": "2025-02-10T22:16:05.849135Z"}, {"uuid": "1079f65c-e492-4a2a-bca3-f6e95e832731", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25190", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhu6b2x24b27", "content": "", "creation_timestamp": "2025-02-10T22:16:08.143025Z"}, {"uuid": "17f0527e-7a19-4b36-8c58-4b2ea796cc37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25193", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhu6b5ecvd2x", "content": "", "creation_timestamp": "2025-02-10T22:16:10.784346Z"}, {"uuid": "1e0bee74-e017-4c76-82d8-7363444141ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25194", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhublkatf42q", "content": "", "creation_timestamp": "2025-02-10T23:15:40.973811Z"}, {"uuid": "025c5d11-c2b4-471d-a4ae-13ea4006fd2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25190", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhueue5wng2t", "content": "", "creation_timestamp": "2025-02-11T00:14:18.005388Z"}, {"uuid": "86fa5d11-2651-4ea2-afed-a72426cd916c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25189", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhueuf54rm2p", "content": "", "creation_timestamp": "2025-02-11T00:14:21.434085Z"}, {"uuid": "c1ca3e9b-ff28-4d97-8b73-38516459d1df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25193", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhueufbheg2t", "content": "", "creation_timestamp": "2025-02-11T00:14:22.140751Z"}, {"uuid": "139ce866-30b0-425a-be2a-37f0bb91cda9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25194", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhueufj3lm2p", "content": "", "creation_timestamp": "2025-02-11T00:14:22.929487Z"}, {"uuid": "a184b033-fa52-47b1-81c2-60742ae3779d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25064", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lhuifazwf22h", "content": "", "creation_timestamp": "2025-02-11T01:17:32.568637Z"}, {"uuid": "55614da9-8b5c-478b-b34c-8ac69823bccf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25243", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhuidjjek42i", "content": "", "creation_timestamp": "2025-02-11T01:16:28.777696Z"}, {"uuid": "7a3db3c5-1029-4f1c-9d98-100328e62638", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25175", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-130/", "content": "", "creation_timestamp": "2025-03-13T04:00:00.000000Z"}, {"uuid": "c0af25c0-ca41-4697-af39-f06c1b8a8073", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25241", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhuidhelsq2o", "content": "", "creation_timestamp": "2025-02-11T01:16:25.776818Z"}, {"uuid": "fbcbf506-571b-4f15-86f1-836ddc826a3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25065", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lhuifazwf22h", "content": "", "creation_timestamp": "2025-02-11T01:17:32.630561Z"}, {"uuid": "60a10a62-7dc0-41f5-a3ba-bb213d853d05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25064", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lhuigf3u622h", "content": "", "creation_timestamp": "2025-02-11T01:18:08.441383Z"}, {"uuid": "d2475d42-4b2a-4b94-bb2c-e97f6cce64b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25065", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lhuigf3u622h", "content": "", "creation_timestamp": "2025-02-11T01:18:08.595639Z"}, {"uuid": "14244c48-739b-486d-958c-dee81f4cd159", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25241", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113982706822692310", "content": "", "creation_timestamp": "2025-02-11T01:41:20.895190Z"}, {"uuid": "e4b25686-67c3-40c9-be9c-22bd54200613", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25243", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113982765819276646", "content": "", "creation_timestamp": "2025-02-11T01:56:20.908832Z"}, {"uuid": "10dad761-335a-469e-8156-deb4714e4225", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2598", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114200918918881971", "content": "", "creation_timestamp": "2025-03-21T14:35:33.140870Z"}, {"uuid": "bf002f00-250a-42c2-bca1-751389633a65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25825", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj4duu3gi32l", "content": "", "creation_timestamp": "2025-02-26T21:43:10.319344Z"}, {"uuid": "6b7f9a21-a2f4-46cd-a9f0-b3728b9c9799", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25823", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj4duuukzu2y", "content": "", "creation_timestamp": "2025-02-26T21:43:11.298089Z"}, {"uuid": "17c5eee3-a9b0-4770-9f66-bcfccb7dfec9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25003", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0079", "content": "", "creation_timestamp": "2025-03-11T17:44:07.000000Z"}, {"uuid": "d44e0ba9-7c60-4aa2-be61-d31226bb844a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-250037", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0079", "content": "", "creation_timestamp": "2025-03-11T17:44:07.000000Z"}, {"uuid": "7df514ab-6035-4d91-834a-a0700959fc46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25618", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lklphuda262j", "content": "", "creation_timestamp": "2025-03-17T17:45:51.785176Z"}, {"uuid": "bad93a85-e8c3-4550-b582-9c14db524f43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25827", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj4duvd4ec2p", "content": "", "creation_timestamp": "2025-02-26T21:43:12.725099Z"}, {"uuid": "b52deda4-b332-46d8-b5e2-582b0024c473", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25012", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljsdycrz76z2", "content": "", "creation_timestamp": "2025-03-07T16:01:14.379118Z"}, {"uuid": "84cf86b6-79d6-44bb-a15c-4edb07f4b5ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25621", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lklphuidgl2m", "content": "", "creation_timestamp": "2025-03-17T17:45:52.582895Z"}, {"uuid": "3b1df66a-f7b0-4866-8efa-42d8cce4cc7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2559", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll747qfgz62w", "content": "", "creation_timestamp": "2025-03-25T10:54:32.765231Z"}, {"uuid": "bd02e9c9-b271-4312-b4ef-16cd119a4ac8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25813", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj4duvjgw725", "content": "", "creation_timestamp": "2025-02-26T21:43:13.346942Z"}, {"uuid": "0f3af09f-927c-4602-b86c-0ba6ee3d8187", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2557", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lktswtmtas26", "content": "", "creation_timestamp": "2025-03-20T23:09:09.626022Z"}, {"uuid": "e1143446-d64f-4219-919e-1133bcc7b7e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25908", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lk2qml6o6i2n", "content": "", "creation_timestamp": "2025-03-10T23:51:06.042663Z"}, {"uuid": "e2b40d3f-f595-4993-8ab5-5fa10c42563f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2512", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lkrbxryx362r", "content": "", "creation_timestamp": "2025-03-19T23:00:10.936824Z"}, {"uuid": "80038b6e-5bb2-435e-a483-9af1e4878d8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25243", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113982969811104687", "content": "", "creation_timestamp": "2025-02-11T02:48:14.469513Z"}, {"uuid": "5a9d7d44-5983-43e1-8feb-13c1f412b984", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25003", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lk4ujle7gs2h", "content": "", "creation_timestamp": "2025-03-11T20:06:21.016420Z"}, {"uuid": "02a0d3ec-ddca-4a36-a270-855c31237676", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25012", "type": "seen", "source": "https://bsky.app/profile/calebpr.bsky.social/post/3ljwv3hufl72q", "content": "", "creation_timestamp": "2025-03-09T11:00:20.930948Z"}, {"uuid": "e3916bab-b697-4efa-994f-a80fe69b1e70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lknzchpnnd2u", "content": "", "creation_timestamp": "2025-03-18T15:47:03.670043Z"}, {"uuid": "424e47dd-df43-4f97-b3d9-2911b61b29b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25292", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lknzchpnnd2u", "content": "", "creation_timestamp": "2025-03-18T15:47:03.743643Z"}, {"uuid": "347e8be6-345b-422e-b3be-d30e8a22f0bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25685", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114179199208037720", "content": "", "creation_timestamp": "2025-03-17T18:31:56.926690Z"}, {"uuid": "9b1f90ed-e167-417c-bbf5-5d36216bf06d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25015", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0075", "content": "", "creation_timestamp": "2025-03-07T12:51:51.000000Z"}, {"uuid": "476a80f2-6472-4fa7-8837-61c37b1ceb5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25181", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3ljx242rpn32l", "content": "", "creation_timestamp": "2025-03-09T12:30:08.401484Z"}, {"uuid": "515d80bd-58e4-42c8-9734-da90549f8c94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25373", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llalpand2m2h", "content": "", "creation_timestamp": "2025-03-26T01:04:14.384384Z"}, {"uuid": "e5062518-c287-4581-b2db-a4239baa9418", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25374", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llalpaxjfr2x", "content": "", "creation_timestamp": "2025-03-26T01:04:15.174670Z"}, {"uuid": "c7aa6f37-8dc7-4aab-a0ea-549b9b15ae45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25426", "type": "seen", "source": "https://gist.github.com/Catherines77/79e6b69490b085d9c2d96c99e72c3579", "content": "", "creation_timestamp": "2025-02-28T14:20:06.000000Z"}, {"uuid": "74208812-2efe-4487-a651-08dbe44236dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25015", "type": "seen", "source": "https://ioc.exchange/users/83r71n/statuses/114122509909962566", "content": "", "creation_timestamp": "2025-03-07T18:15:10.591600Z"}, {"uuid": "618844ca-7678-435d-9d6e-75ab892f77ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25064", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-7857acd2-07bf4dd25bfb5d6f", "content": "", "creation_timestamp": "2025-02-11T07:19:35.405538Z"}, {"uuid": "cb435482-dc47-4fad-ac46-405a24a05d98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25065", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-7857acd2-07bf4dd25bfb5d6f", "content": "", "creation_timestamp": "2025-02-11T07:19:35.495441Z"}, {"uuid": "12adc7a2-8e9b-4cd7-902e-62bbcd6ff83b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25181", "type": "seen", "source": "https://bsky.app/profile/socprime.com/post/3lhw2usicv72v", "content": "", "creation_timestamp": "2025-02-11T16:20:56.097401Z"}, {"uuid": "692aaef1-448b-4234-b2e1-c84499442322", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25516", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lj4ljpbkqv2x", "content": "", "creation_timestamp": "2025-02-27T00:00:06.593538Z"}, {"uuid": "9963e8b8-20e2-4563-ba7c-eb51cbb56129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25371", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llalpb6hly2k", "content": "", "creation_timestamp": "2025-03-26T01:04:16.357568Z"}, {"uuid": "d77a6b5f-3ce9-49e1-bc71-41d26636125f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25517", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lj4ljpgw6q2g", "content": "", "creation_timestamp": "2025-02-27T00:00:07.828895Z"}, {"uuid": "e18c37bc-40d2-4bd8-8797-657cd40d4b5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25519", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lj4ljpndpg2q", "content": "", "creation_timestamp": "2025-02-27T00:00:09.008264Z"}, {"uuid": "0a494534-163d-41d8-9082-4237d8ce1785", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25520", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lj4ljpsufr2c", "content": "", "creation_timestamp": "2025-02-27T00:00:09.847237Z"}, {"uuid": "2e629cc8-c88b-4383-b3ce-47a5e5f6de5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25521", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lj4ljq242l22", "content": "", "creation_timestamp": "2025-02-27T00:00:10.454986Z"}, {"uuid": "dac9fdc4-d0eb-43db-9075-533fab228d29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25064", "type": "seen", "source": "https://threatintel.cc/2025/02/11/zimbra-releases-security-updates-for.html", "content": "", "creation_timestamp": "2025-02-11T12:06:15.000000Z"}, {"uuid": "e8f3f48b-9545-4f59-b9f1-753129eb82b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25372", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llalpbimi22e", "content": "", "creation_timestamp": "2025-03-26T01:04:18.129210Z"}, {"uuid": "3311a552-401b-4200-920f-4b7564f14079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25202", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwenfmpuu2d", "content": "", "creation_timestamp": "2025-02-11T19:15:44.268170Z"}, {"uuid": "baaef164-329f-471b-89e8-7b96cb9d7ad0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25522", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwenhqzew2a", "content": "", "creation_timestamp": "2025-02-11T19:15:46.283212Z"}, {"uuid": "4f43da0a-1f60-4ed1-8dc0-0cd49a6379a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25523", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwenkk7w42d", "content": "", "creation_timestamp": "2025-02-11T19:15:49.134440Z"}, {"uuid": "eec84815-34c9-4536-adb7-b8b807c66683", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25524", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwenmtjoe2a", "content": "", "creation_timestamp": "2025-02-11T19:15:51.755534Z"}, {"uuid": "ccdb478d-097c-49b6-b79a-043f8b4ca0e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25527", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwi2ww2sw2z", "content": "", "creation_timestamp": "2025-02-11T20:16:59.490957Z"}, {"uuid": "3cb3a0a5-17d0-4e80-ae10-007d69912b53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25529", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwi33fve22a", "content": "", "creation_timestamp": "2025-02-11T20:17:04.214655Z"}, {"uuid": "e2740acb-a731-43ba-9cf3-3240d69d5e1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25525", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwi2rqkw22a", "content": "", "creation_timestamp": "2025-02-11T20:16:54.389834Z"}, {"uuid": "b4dceb64-5cd5-494c-9eea-c4da9699c33e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25526", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwi2uferw2p", "content": "", "creation_timestamp": "2025-02-11T20:16:57.278865Z"}, {"uuid": "d9cd6992-8fed-4c21-a93d-11aceaf67119", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lkemmpsaus2o", "content": "", "creation_timestamp": "2025-03-14T22:06:12.869102Z"}, {"uuid": "febf58d6-84f8-46e4-8b4d-e8b94b1be6d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25293", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lkemmpsaus2o", "content": "", "creation_timestamp": "2025-03-14T22:06:13.034007Z"}, {"uuid": "98ec4ca7-3159-419f-918f-324c7af50c96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2574", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lktznm4tl72s", "content": "", "creation_timestamp": "2025-03-21T01:09:15.533215Z"}, {"uuid": "d7e6395c-b1d2-4906-a6f9-1a61719f2e6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25528", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwi2zblsr2s", "content": "", "creation_timestamp": "2025-02-11T20:17:02.330958Z"}, {"uuid": "d9e37629-a96d-423c-89fe-68aa5e592ed1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25530", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwi35uf322a", "content": "", "creation_timestamp": "2025-02-11T20:17:06.850112Z"}, {"uuid": "b0df5bd3-daa1-483a-adaf-373044fdb236", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25522", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhwovxsxok2t", "content": "", "creation_timestamp": "2025-02-11T22:19:29.399976Z"}, {"uuid": "265793e7-7b79-4b4b-bdb9-5505082b45de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25523", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhwovxwpev2i", "content": "", "creation_timestamp": "2025-02-11T22:19:29.980797Z"}, {"uuid": "ab4d3596-da27-461c-8982-5b5bc1321b29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25524", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhwovy3erq2v", "content": "", "creation_timestamp": "2025-02-11T22:19:30.551359Z"}, {"uuid": "95f3d1be-5b4a-40cc-89c4-1e4f06ba79a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25202", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhwovyajyn26", "content": "", "creation_timestamp": "2025-02-11T22:19:31.167705Z"}, {"uuid": "8429a1b7-49b8-4a0e-8af1-d1e2d92c5ce3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25203", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113987706268933005", "content": "", "creation_timestamp": "2025-02-11T22:52:46.099641Z"}, {"uuid": "9d48e3ec-fbb0-45d5-9f8f-7ab59cbb1c73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25203", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhws2x43zh2a", "content": "", "creation_timestamp": "2025-02-11T23:15:57.528505Z"}, {"uuid": "62e230ee-c09b-4523-b3a1-4a704521107d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25203", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113988162062994542", "content": "", "creation_timestamp": "2025-02-12T00:48:41.321082Z"}, {"uuid": "fb70dbf1-03b6-455a-b47b-40440f0a4780", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25279", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lixkmkmcnr2r", "content": "", "creation_timestamp": "2025-02-25T00:00:30.223223Z"}, {"uuid": "841854be-14c5-407a-8b5f-4b10473bfdc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25292", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lkemmpsaus2o", "content": "", "creation_timestamp": "2025-03-14T22:06:12.948944Z"}, {"uuid": "f7267cc0-e48b-4940-bc87-d82f6d9f7c00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25242", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3lk2ytj7eij2o", "content": "", "creation_timestamp": "2025-03-11T02:18:07.618331Z"}, {"uuid": "0b6ef87a-1770-4cf5-ae8a-90949657ba81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25015", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgzu3gqm2b", "content": "", "creation_timestamp": "2025-03-06T12:00:31.631928Z"}, {"uuid": "0690c01c-371e-4550-9d1c-3aef6cf09a42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25181", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lk4xnhrq6b2x", "content": "", "creation_timestamp": "2025-03-11T21:02:11.299740Z"}, {"uuid": "fb02a704-9e94-4e13-a668-eab67a9d044e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25015", "type": "seen", "source": "https://bsky.app/profile/opsecaaron.bsky.social/post/3lk4za5ezss2i", "content": "", "creation_timestamp": "2025-03-11T21:30:30.056330Z"}, {"uuid": "20aa2695-1c27-40cb-9e21-f112ab35c4f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25497", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ljsvrfqcwa2u", "content": "", "creation_timestamp": "2025-03-07T21:01:56.546870Z"}, {"uuid": "9c4c45d9-dd2e-4993-9dc1-7bb56b033a70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25928", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114150716555157480", "content": "", "creation_timestamp": "2025-03-12T17:48:27.294687Z"}, {"uuid": "52de3bc7-89e2-429e-9211-d454a249e98e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lklwuqfadg2x", "content": "", "creation_timestamp": "2025-03-17T19:58:15.336995Z"}, {"uuid": "1ea9de02-0c7c-4d48-beef-2795c9e8a8be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25012", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3ljpkl2a47c2o", "content": "", "creation_timestamp": "2025-03-06T13:03:32.926403Z"}, {"uuid": "cbcffebe-5ebd-4931-aa2f-6413418e44dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25292", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lklwuqfadg2x", "content": "", "creation_timestamp": "2025-03-17T19:58:15.419997Z"}, {"uuid": "2eaa1360-b2f7-49e8-963f-0c28fa63bd39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25711", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114150717041133927", "content": "", "creation_timestamp": "2025-03-12T17:48:34.116517Z"}, {"uuid": "bf391b38-0096-4384-aeff-fb18b22d5a72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25193", "type": "seen", "source": "https://bsky.app/profile/knaepp.bsky.social/post/3ll7jf2emfq2w", "content": "", "creation_timestamp": "2025-03-25T14:50:05.131923Z"}, {"uuid": "005650a9-8ac2-41b3-8897-4073874cb8f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25279", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lixz7mnfs22v", "content": "", "creation_timestamp": "2025-02-25T04:21:45.381012Z"}, {"uuid": "df4e9225-b12b-449d-96dc-08b5e9cf3c97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25109", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114099285514836470", "content": "", "creation_timestamp": "2025-03-03T15:48:50.679398Z"}, {"uuid": "a8ed1c85-50ab-450f-874b-08923c4ced02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2505", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3llf742chkm2z", "content": "", "creation_timestamp": "2025-03-27T21:02:09.999223Z"}, {"uuid": "09d2ee2c-ae43-40bf-9ea4-9e7179d4480a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25122", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114099285578045325", "content": "", "creation_timestamp": "2025-03-03T15:48:51.425986Z"}, {"uuid": "8a2cce42-2db6-46f1-bfc2-0c946facbe29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25907", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114141752650435125", "content": "", "creation_timestamp": "2025-03-11T03:48:47.579053Z"}, {"uuid": "56d5152c-314e-4845-8fb4-857ab5d9c299", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25150", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114099285625743491", "content": "", "creation_timestamp": "2025-03-03T15:48:52.187583Z"}, {"uuid": "4e09d19e-0942-4717-bea7-de871f76a442", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25361", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114123350572256091", "content": "", "creation_timestamp": "2025-03-07T21:49:00.509385Z"}, {"uuid": "bc58dc60-81fe-4c87-9132-1b8028f8a467", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2585", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkuandhnnp2n", "content": "", "creation_timestamp": "2025-03-21T03:14:24.131542Z"}, {"uuid": "4b9408eb-e05c-4403-b8d4-8678c2bb94f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25497", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114123350624510831", "content": "", "creation_timestamp": "2025-03-07T21:49:01.066694Z"}, {"uuid": "4faf1fde-f449-4ab4-8216-64c427b6967d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-3e39154e-7e52655bd7735e43", "content": "", "creation_timestamp": "2025-03-16T23:34:06.773611Z"}, {"uuid": "6efb7fa9-f238-40f3-9183-ed8efa5b94bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25150", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljkg3rdnv52i", "content": "", "creation_timestamp": "2025-03-04T12:00:07.263381Z"}, {"uuid": "8843394f-bcf6-4968-822f-be05534e2ffa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25763", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114123350693779612", "content": "", "creation_timestamp": "2025-03-07T21:49:02.168322Z"}, {"uuid": "92476218-dd79-4426-a071-fdf2b09afaa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25292", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-3e39154e-7e52655bd7735e43", "content": "", "creation_timestamp": "2025-03-16T23:34:06.856306Z"}, {"uuid": "1ad6d081-af2c-4b7e-addc-9655e83b671d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25914", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114184692845997403", "content": "", "creation_timestamp": "2025-03-18T17:49:03.245298Z"}, {"uuid": "a4d43d44-e9bc-466a-a7c2-c4ff1100ea62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25244", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lk3625v7l52s", "content": "", "creation_timestamp": "2025-03-11T03:51:19.008569Z"}, {"uuid": "926dbc5d-7a76-415a-a911-bcbe27b053d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25306", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lk56ag3gql2d", "content": "", "creation_timestamp": "2025-03-11T23:00:07.797198Z"}, {"uuid": "8716f9c0-612d-4c6e-b4ad-8dce01977df6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25242", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lk3626446q2n", "content": "", "creation_timestamp": "2025-03-11T03:51:20.143368Z"}, {"uuid": "e30def09-83df-4421-bb07-bddbf02dba38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25012", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ljt3lj35rc2q", "content": "", "creation_timestamp": "2025-03-07T22:46:03.703000Z"}, {"uuid": "440fa2a1-b875-4c8c-90c0-1fe3f95fa918", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25065", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lkoabw6otc2i", "content": "", "creation_timestamp": "2025-03-18T17:52:06.929235Z"}, {"uuid": "8a42c3bc-5c50-4a28-9f1d-4fbc016762b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25418", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lhyb5yokoi2j", "content": "", "creation_timestamp": "2025-02-12T13:18:45.630491Z"}, {"uuid": "9a342198-9cb9-4c2e-a03d-d508f86dab27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25279", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3liy4m7iy2x2q", "content": "", "creation_timestamp": "2025-02-25T05:22:25.365491Z"}, {"uuid": "962e17bd-27b4-478a-b97a-65cc9fa2a22e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25064", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lkoabw6otc2i", "content": "", "creation_timestamp": "2025-03-18T17:52:06.844892Z"}, {"uuid": "32bff035-fe5e-4743-ba80-071dfb520965", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25477", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114082772618152385", "content": "", "creation_timestamp": "2025-02-28T17:49:23.673538Z"}, {"uuid": "3929ab01-d382-4cc1-8f70-c108f2c20568", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2585", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114198609324265485", "content": "", "creation_timestamp": "2025-03-21T04:48:11.646284Z"}, {"uuid": "43269a59-ef8f-4b4b-b960-9e5dc0ac5b88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25349", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyl4dedsw2x", "content": "", "creation_timestamp": "2025-02-12T16:16:46.929283Z"}, {"uuid": "f8ddc416-3440-4d71-8c4f-3bd3bd73ed1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25351", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyl4fhqyr2d", "content": "", "creation_timestamp": "2025-02-12T16:16:48.986929Z"}, {"uuid": "0328aa17-383a-4c86-a207-3f1eb57fbe9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25182", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113991847214655450", "content": "", "creation_timestamp": "2025-02-12T16:25:51.964456Z"}, {"uuid": "40f6d712-65e7-4ff0-a99f-1c1696b2d307", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25184", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113991847229088447", "content": "", "creation_timestamp": "2025-02-12T16:25:52.300475Z"}, {"uuid": "2e64b917-62bc-4ced-9ef6-c1df0aa62fd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25742", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113991952099305051", "content": "", "creation_timestamp": "2025-02-12T16:52:33.555664Z"}, {"uuid": "ad80b051-bfdb-4ffa-b3c2-8428717cfbea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25746", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113991952114597008", "content": "", "creation_timestamp": "2025-02-12T16:52:33.628769Z"}, {"uuid": "a5c20d11-c90e-4eef-8564-9b1b047e2f8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25743", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113992006650977422", "content": "", "creation_timestamp": "2025-02-12T17:06:24.659746Z"}, {"uuid": "9cac8b95-c7e2-4b90-b24f-01cd948100e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25744", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113992006664890401", "content": "", "creation_timestamp": "2025-02-12T17:06:25.003724Z"}, {"uuid": "6f84d2ee-92ae-47bc-9c63-d4e4b6ff8b4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25182", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyog2r6be2h", "content": "", "creation_timestamp": "2025-02-12T17:15:54.542513Z"}, {"uuid": "be56a82a-c39d-443e-a7cf-3185c29d4e71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25184", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyog6avlh2x", "content": "", "creation_timestamp": "2025-02-12T17:15:58.351112Z"}, {"uuid": "95b8d95f-40e9-4816-9b6d-100509c3a86c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25742", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyogajtis2d", "content": "", "creation_timestamp": "2025-02-12T17:16:00.641750Z"}, {"uuid": "ccb29d9b-0483-4f37-95ff-3d851ae30e69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25743", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyogcrhn32s", "content": "", "creation_timestamp": "2025-02-12T17:16:03.064222Z"}, {"uuid": "1beac114-0b09-4155-8e5c-f3f9bf89dac7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25744", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyogfeqia2z", "content": "", "creation_timestamp": "2025-02-12T17:16:05.900008Z"}, {"uuid": "d4f80d70-099a-4c5f-a32b-dd41024ab4ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25746", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyoghukec2a", "content": "", "creation_timestamp": "2025-02-12T17:16:08.400021Z"}, {"uuid": "82ab5f0a-4884-4c7b-8f80-80c1901e890e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25741", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113992114751128585", "content": "", "creation_timestamp": "2025-02-12T17:33:54.209731Z"}, {"uuid": "fd32660c-5d36-4941-9a78-8d31b7c9bde1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25198", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113992187494675681", "content": "", "creation_timestamp": "2025-02-12T17:52:24.209054Z"}, {"uuid": "851c3bf1-33b7-4c17-b413-f43606751e84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25199", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113992187510032617", "content": "", "creation_timestamp": "2025-02-12T17:52:24.404695Z"}, {"uuid": "8aa0c8a4-e8ac-4f9e-91b1-122c86b7a610", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25200", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113992250696737741", "content": "", "creation_timestamp": "2025-02-12T18:08:28.753899Z"}, {"uuid": "f599da62-90d5-4f56-b6bd-fb307282dfa4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25198", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyrr7c7jn2s", "content": "", "creation_timestamp": "2025-02-12T18:15:49.640184Z"}, {"uuid": "1b4a8412-f940-400f-9536-44379f134138", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25199", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyrrbreq52s", "content": "", "creation_timestamp": "2025-02-12T18:15:52.445741Z"}, {"uuid": "067a658c-cf3e-47a5-891e-dd199dec459e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25200", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyrreespr2i", "content": "", "creation_timestamp": "2025-02-12T18:15:55.161369Z"}, {"uuid": "b2f04b03-4864-44da-aa30-a43643125132", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25741", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyrrho52e2z", "content": "", "creation_timestamp": "2025-02-12T18:15:58.510321Z"}, {"uuid": "a6fa0d4e-43d8-416f-866e-1e67fdb05aed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25201", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113992291260057149", "content": "", "creation_timestamp": "2025-02-12T18:18:47.525149Z"}, {"uuid": "d14e8727-2c4a-4d29-8edb-bac6eec46dd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25205", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113992291274845967", "content": "", "creation_timestamp": "2025-02-12T18:18:47.772047Z"}, {"uuid": "bf7bedc6-3884-42de-97b5-bd7bfd0da224", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25743", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhyry37t7k2x", "content": "", "creation_timestamp": "2025-02-12T18:19:48.392461Z"}, {"uuid": "8983f6b3-00cb-46de-9e20-d8ca039b45cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25742", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhyry3lbgc27", "content": "", "creation_timestamp": "2025-02-12T18:19:48.853313Z"}, {"uuid": "275aff65-87cb-442c-a3fc-bd6424bcc37d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25744", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhyry3x5ck27", "content": "", "creation_timestamp": "2025-02-12T18:19:50.290755Z"}, {"uuid": "fcac7e32-9f59-4262-81a7-1657d1ee2027", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25746", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhyry46kmc27", "content": "", "creation_timestamp": "2025-02-12T18:19:51.415031Z"}, {"uuid": "7539e7f1-ff32-4a3a-a6ee-020d7e64faf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25349", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhyry4d26227", "content": "", "creation_timestamp": "2025-02-12T18:19:52.002460Z"}, {"uuid": "669b192a-f38f-42ab-913f-3594c69e954a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25184", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhyry4hvgs2w", "content": "", "creation_timestamp": "2025-02-12T18:19:52.457952Z"}, {"uuid": "1b69fcb7-10a1-40d8-b6b4-039871231bc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25351", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhyry4skb227", "content": "", "creation_timestamp": "2025-02-12T18:19:54.043780Z"}, {"uuid": "580e926f-ffaa-443a-9da4-9792d861b4a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25283", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113992340797617356", "content": "", "creation_timestamp": "2025-02-12T18:31:23.474027Z"}, {"uuid": "5523be85-5b28-4b31-9bd1-cce2a350d0cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25343", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113992381212711969", "content": "", "creation_timestamp": "2025-02-12T18:41:40.126165Z"}, {"uuid": "a4b00ad0-9c7b-4062-bc23-bca3ae8d8d18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25182", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113992407417127043", "content": "", "creation_timestamp": "2025-02-12T18:48:20.163699Z"}, {"uuid": "6e753ec8-2a0a-42b1-aefd-0e132f589a98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25201", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyv4kjcns2h", "content": "", "creation_timestamp": "2025-02-12T19:15:51.914436Z"}, {"uuid": "e96ef1a9-36f0-4c27-aa86-73b7a38e84e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25205", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyv4n35zi2a", "content": "", "creation_timestamp": "2025-02-12T19:15:54.465496Z"}, {"uuid": "8eb2dcdd-a75a-4713-bd8e-548b3aa1eab5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25283", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyv4plnzj2g", "content": "", "creation_timestamp": "2025-02-12T19:15:57.014701Z"}, {"uuid": "bbb49b93-0339-43a1-b6c7-8c84864030e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25343", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyv4sonws2h", "content": "", "creation_timestamp": "2025-02-12T19:16:00.500603Z"}, {"uuid": "79882e0b-ac27-44c0-a58b-57ba4efc7dac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25744", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113992683541173396", "content": "", "creation_timestamp": "2025-02-12T19:58:33.256109Z"}, {"uuid": "e916a1b1-6bad-419b-9dc1-6a90a31999a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25205", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113992880737800098", "content": "", "creation_timestamp": "2025-02-12T20:48:42.968088Z"}, {"uuid": "c926282f-9dfd-4d4f-bc89-cb172dc7bf25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25205", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhz3i7ptjq2z", "content": "", "creation_timestamp": "2025-02-12T21:09:45.739893Z"}, {"uuid": "69072f73-9bdb-4474-a624-75fb8f9f2865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25585", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkobid4qef26", "content": "", "creation_timestamp": "2025-03-18T18:13:32.963736Z"}, {"uuid": "69c7b429-4281-4454-b5ab-b9bdf7f92277", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25361", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljt7py5gfq2y", "content": "", "creation_timestamp": "2025-03-08T00:00:06.361957Z"}, {"uuid": "59879316-b33d-4ef3-9eb8-782480151ecf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25763", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljt7pyfk4y2m", "content": "", "creation_timestamp": "2025-03-08T00:00:07.299458Z"}, {"uuid": "914c373e-7f98-4241-b25e-3be326b274fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25570", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114083241335022580", "content": "", "creation_timestamp": "2025-02-28T19:49:12.032242Z"}, {"uuid": "a13720f6-db24-45f0-a02a-48f8148a6b81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25015", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljmvyhvwzq2q", "content": "", "creation_timestamp": "2025-03-05T11:49:56.895758Z"}, {"uuid": "a51d6210-5c40-42ba-b8d3-5ff5c02f1a80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25200", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114195295182774871", "content": "", "creation_timestamp": "2025-03-20T14:45:21.938796Z"}, {"uuid": "f555b59b-ecde-4331-aca0-f80136841d67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25283", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhz7fibjk42z", "content": "", "creation_timestamp": "2025-02-12T22:19:48.720700Z"}, {"uuid": "638d3b90-6366-4e69-b1f2-90ecb27c5097", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25343", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhz7fil6z62e", "content": "", "creation_timestamp": "2025-02-12T22:19:49.554196Z"}, {"uuid": "055fcc4d-f790-4ab6-bacb-dfedb4d41a4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25182", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lhzlt6ugqk2t", "content": "", "creation_timestamp": "2025-02-13T02:02:20.277262Z"}, {"uuid": "ac26be09-4fad-4354-b82b-c08a4ceede6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25286", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113994296257127308", "content": "", "creation_timestamp": "2025-02-13T02:48:41.683575Z"}, {"uuid": "79420f9c-b270-4729-a9f9-5d5fe5f8d473", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25286", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhztsqu3xi2e", "content": "", "creation_timestamp": "2025-02-13T04:25:09.913891Z"}, {"uuid": "5e1a6ba8-c2e8-42ed-a5de-a3ef3a7e463f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25580", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkobidkfze2w", "content": "", "creation_timestamp": "2025-03-18T18:13:34.872433Z"}, {"uuid": "65d7f77a-1961-4c02-8628-dab95cd9fa29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2563", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lldhdf3oje2k", "content": "", "creation_timestamp": "2025-03-27T04:24:00.857639Z"}, {"uuid": "3c93e8f5-42a1-4fad-9852-c4485c19caf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25451", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljptkzlsma2f", "content": "", "creation_timestamp": "2025-03-06T15:44:36.693281Z"}, {"uuid": "a92fda74-94a3-4ede-a451-980d941ba8c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25279", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3liyf74ku3c2i", "content": "", "creation_timestamp": "2025-02-25T07:56:12.047627Z"}, {"uuid": "f5b0cb3d-b759-4bde-8dbf-c29dce3d2d98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25452", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljptl243f32f", "content": "", "creation_timestamp": "2025-03-06T15:44:37.967610Z"}, {"uuid": "58bb7332-1ca5-4a90-85bc-524633437f37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25181", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-03-11T05:26:42.000000Z"}, {"uuid": "53a27ff9-85b2-4d8b-9428-68c605083470", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25901", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113997265784169151", "content": "", "creation_timestamp": "2025-02-13T15:23:52.766846Z"}, {"uuid": "0c3ec42c-efad-4dad-b420-fdb90a59c1e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25774", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lk7cpumghs2k", "content": "", "creation_timestamp": "2025-03-12T19:25:42.327333Z"}, {"uuid": "f6aa61ea-95f2-4ce8-b3e6-53bffced960b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25914", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkmegys3tq2j", "content": "", "creation_timestamp": "2025-03-18T00:01:10.645544Z"}, {"uuid": "520c2f14-b317-402c-aa6f-682604a11321", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25590", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkobieajod2x", "content": "", "creation_timestamp": "2025-03-18T18:13:38.550178Z"}, {"uuid": "449d96c1-f1c0-4167-b92c-def76932483a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25012", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljyzixaehxf2", "content": "", "creation_timestamp": "2025-03-10T07:24:55.982083Z"}, {"uuid": "4c4cc8d8-6e8d-409d-8dcf-f91b4e64b7d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25182", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3li2yp7spci24", "content": "", "creation_timestamp": "2025-02-13T15:25:24.419916Z"}, {"uuid": "f71f04a0-3bcd-4b07-abac-e5275edabbd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2539", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lksxstf3ne2w", "content": "", "creation_timestamp": "2025-03-20T15:03:43.166887Z"}, {"uuid": "624993ad-02d3-491d-a7f4-a2fc01da89f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25286", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3li2ypaz45c2t", "content": "", "creation_timestamp": "2025-02-13T15:25:26.715255Z"}, {"uuid": "84517bc0-2b1c-4dcf-9609-777cd8db2715", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25355", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113997370317784729", "content": "", "creation_timestamp": "2025-02-13T15:50:28.017634Z"}, {"uuid": "d654a39a-d214-461a-82bb-7fb5eba18ede", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25356", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113997370332193583", "content": "", "creation_timestamp": "2025-02-13T15:50:28.244017Z"}, {"uuid": "d0cb0841-78b7-4538-aeb7-57789b27b464", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25352", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113997416224749093", "content": "", "creation_timestamp": "2025-02-13T16:02:08.283524Z"}, {"uuid": "7d6a5a2b-5d2f-4a66-b72c-1552fdc2d161", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25357", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113997416238600584", "content": "", "creation_timestamp": "2025-02-13T16:02:08.407036Z"}, {"uuid": "200583cb-8cb8-4798-ad2b-1e323bd48418", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25287", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li33lv5kz42p", "content": "", "creation_timestamp": "2025-02-13T16:17:08.142453Z"}, {"uuid": "e3db234a-7365-43ee-8195-d5234da72693", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25352", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li33lxkukf2d", "content": "", "creation_timestamp": "2025-02-13T16:17:10.635936Z"}, {"uuid": "11a4fe1f-ddae-414f-8639-004f62aeca06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25354", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li33lzywbx2a", "content": "", "creation_timestamp": "2025-02-13T16:17:13.240311Z"}, {"uuid": "aed788d5-dd0c-42a1-be95-c67ce91adbc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25355", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li33m4djcv2d", "content": "", "creation_timestamp": "2025-02-13T16:17:15.625364Z"}, {"uuid": "9a1a5ca1-354d-4c57-982e-f1af2d193320", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25356", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li33m6n7sm2p", "content": "", "creation_timestamp": "2025-02-13T16:17:18.027115Z"}, {"uuid": "067e46a3-4c45-4514-bb5c-853f403fdd41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25357", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li33mazbca2x", "content": "", "creation_timestamp": "2025-02-13T16:17:20.639808Z"}, {"uuid": "315bf52e-3e59-4ae8-a368-7efa549be645", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25897", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li33mde5xx2x", "content": "", "creation_timestamp": "2025-02-13T16:17:23.120983Z"}, {"uuid": "906118d8-5798-42f1-9542-97408351ba90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25898", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li33mfp3iq2a", "content": "", "creation_timestamp": "2025-02-13T16:17:25.638130Z"}, {"uuid": "a368a56d-6b1a-488c-8b94-7f02a8ddf0df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25899", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li33mi5zt42c", "content": "", "creation_timestamp": "2025-02-13T16:17:28.135462Z"}, {"uuid": "254e02e3-5569-4426-8d47-78948c27944b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25900", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li33ml2kr42c", "content": "", "creation_timestamp": "2025-02-13T16:17:31.043751Z"}, {"uuid": "cfa3a7bb-f023-4542-b77f-c91eb39826d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25901", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li33mncyhg2a", "content": "", "creation_timestamp": "2025-02-13T16:17:33.610347Z"}, {"uuid": "28653eed-9014-41f2-bb93-fe5332a669d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25389", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113997667839106491", "content": "", "creation_timestamp": "2025-02-13T17:06:07.725351Z"}, {"uuid": "3fc19430-8b07-46f6-89ac-fba8d4dc3460", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25387", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113997690740314430", "content": "", "creation_timestamp": "2025-02-13T17:11:57.164405Z"}, {"uuid": "a003d66f-f014-4d31-b7eb-3876370e036b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25387", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li36xv4jcz2a", "content": "", "creation_timestamp": "2025-02-13T17:17:32.311351Z"}, {"uuid": "099d42f8-765c-44a6-aabf-28613f909260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25388", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li36xxj6mv2a", "content": "", "creation_timestamp": "2025-02-13T17:17:34.536366Z"}, {"uuid": "d87f34f6-8ed5-4bd8-a3ef-b07352691e2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25389", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li36xzrstv2a", "content": "", "creation_timestamp": "2025-02-13T17:17:36.916938Z"}, {"uuid": "6ecfc3f9-ec04-45de-a9a3-1b747b102c23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25286", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3li37ptxyop2e", "content": "", "creation_timestamp": "2025-02-13T17:30:57.044202Z"}, {"uuid": "8e34a5c4-3864-4b8d-9a55-a8fd0b269610", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25357", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li3jysrc3v2a", "content": "", "creation_timestamp": "2025-02-13T20:34:54.334553Z"}, {"uuid": "0b5c7c5d-fcbf-4103-adda-91fd996bc69d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25898", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li3jyt2bwq2h", "content": "", "creation_timestamp": "2025-02-13T20:34:54.939481Z"}, {"uuid": "c9ab5824-6d0f-47d0-809c-a803cac7c7f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25387", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li3jyt5gzb2z", "content": "", "creation_timestamp": "2025-02-13T20:34:55.553395Z"}, {"uuid": "faca1193-83c5-43c9-a3e2-080481126a58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25356", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li3jytaoym22", "content": "", "creation_timestamp": "2025-02-13T20:34:56.141384Z"}, {"uuid": "3217a057-02d9-492f-84b8-9d1c6d9116d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25354", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li3jytnjnz2z", "content": "", "creation_timestamp": "2025-02-13T20:34:58.312130Z"}, {"uuid": "0ca414e4-8990-4303-9293-9c03aef5a287", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25897", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li3jytqqo422", "content": "", "creation_timestamp": "2025-02-13T20:34:58.929229Z"}, {"uuid": "5fad7c59-e7c7-4f4a-9cf7-48295d885264", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25389", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li3jyttx2324", "content": "", "creation_timestamp": "2025-02-13T20:34:59.496649Z"}, {"uuid": "3fa10b1d-4491-43f0-b69d-cd25ea29c24f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25899", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li3jytx5z72v", "content": "", "creation_timestamp": "2025-02-13T20:35:00.065875Z"}, {"uuid": "4fa600d6-75ac-4d41-b1bf-9c1a1c6ee47d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25901", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li3jyu2esb2z", "content": "", "creation_timestamp": "2025-02-13T20:35:00.636451Z"}, {"uuid": "7a52ccf9-b9e0-4673-8a52-b2939326c889", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25900", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li3jyu5jrn2c", "content": "", "creation_timestamp": "2025-02-13T20:35:01.268261Z"}, {"uuid": "4db3e293-99de-4d0e-a2ee-0f74d2c4f126", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25388", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li3jyuhh5726", "content": "", "creation_timestamp": "2025-02-13T20:35:02.991886Z"}, {"uuid": "badd7461-3387-4fa5-9a07-169d269d5444", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25355", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li3jyuoegz2z", "content": "", "creation_timestamp": "2025-02-13T20:35:04.195235Z"}, {"uuid": "35549115-c270-4ced-808e-1c452441c335", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25568", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lk7cpudimi2n", "content": "", "creation_timestamp": "2025-03-12T19:25:41.094414Z"}, {"uuid": "5062e271-0d22-43a9-8325-e1ba8d3c5251", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "seen", "source": "https://bsky.app/profile/dimaiosdev.bsky.social/post/3lkdbeyncf22c", "content": "", "creation_timestamp": "2025-03-14T09:12:21.887881Z"}, {"uuid": "d8f3ac88-7878-4dc8-8422-02b07911a553", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25388", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113998541921341098", "content": "", "creation_timestamp": "2025-02-13T20:48:31.150049Z"}, {"uuid": "823789c9-d141-41d3-9f29-37fe619ce7f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25281", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113998670944986174", "content": "", "creation_timestamp": "2025-02-13T21:21:14.071398Z"}, {"uuid": "2118008a-e201-4f69-9726-061cc7d67840", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25067", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113998748157088863", "content": "", "creation_timestamp": "2025-02-13T21:40:52.285539Z"}, {"uuid": "b20b73c5-618a-4336-b1d9-157770be6a00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25195", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113998796668998455", "content": "", "creation_timestamp": "2025-02-13T21:53:12.358681Z"}, {"uuid": "cf824bea-a79e-410c-87ae-c3690bd83713", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25012", "type": "seen", "source": "https://infosec.exchange/users/cert_eu/statuses/114116440673151121", "content": "", "creation_timestamp": "2025-03-06T16:31:38.046443Z"}, {"uuid": "bbcf8e49-5fc5-4a3d-b7f7-5f534d881ff4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25565", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lk7cpuptxu2s", "content": "", "creation_timestamp": "2025-03-12T19:25:42.913942Z"}, {"uuid": "25017d8b-3235-48ee-a50a-1e3d5e1c31ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25292", "type": "seen", "source": "https://bsky.app/profile/dimaiosdev.bsky.social/post/3lkdbeyncf22c", "content": "", "creation_timestamp": "2025-03-14T09:12:21.970246Z"}, {"uuid": "328e7145-4642-4107-b2b5-1a0ebbf6f8e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25195", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li3pny7kot2p", "content": "", "creation_timestamp": "2025-02-13T22:16:13.511593Z"}, {"uuid": "cf6a0f4c-f4cd-4ae7-bfd6-37161d77be67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25012", "type": "seen", "source": "https://thehackernews.com/2025/03/elastic-releases-urgent-fix-for.html", "content": "", "creation_timestamp": "2025-03-06T11:33:00.000000Z"}, {"uuid": "d050d05e-51e5-44fb-94d3-5b5c7081dbfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25683", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lk7cpuykbf2w", "content": "", "creation_timestamp": "2025-03-12T19:25:44.215032Z"}, {"uuid": "3d5f5cdf-9ecc-491a-b2d7-fd7e530ce8b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25067", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li3pnv7ty62d", "content": "", "creation_timestamp": "2025-02-13T22:16:10.180865Z"}, {"uuid": "9ba99946-78c3-47eb-bda0-4e8a48ea4885", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25281", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li3po2qwav2s", "content": "", "creation_timestamp": "2025-02-13T22:16:15.920304Z"}, {"uuid": "f8e53f11-5666-4d65-93bd-06456f90f258", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25067", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113999014908767225", "content": "", "creation_timestamp": "2025-02-13T22:48:42.495524Z"}, {"uuid": "df30b52c-a3cc-40f5-92e8-49635e08e9d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25286", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3li3viecofn2t", "content": "", "creation_timestamp": "2025-02-14T00:00:28.033304Z"}, {"uuid": "a6236cd6-1768-422e-b820-f267857d4848", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25388", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3li3viffc2h2k", "content": "", "creation_timestamp": "2025-02-14T00:00:31.284996Z"}, {"uuid": "b544a4b0-bea7-4d8e-9e8d-1850a6643ed9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25067", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li427rw5i22v", "content": "", "creation_timestamp": "2025-02-14T01:25:08.570204Z"}, {"uuid": "f40f337b-2f8e-4ac4-b562-0e3ad2d9ca3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "seen", "source": "https://bsky.app/profile/saveam.bsky.social/post/3lkfhdaabxl23", "content": "", "creation_timestamp": "2025-03-15T06:09:33.070478Z"}, {"uuid": "9d2cc90e-8fba-465a-844c-d8e61db44e38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25292", "type": "seen", "source": "https://bsky.app/profile/saveam.bsky.social/post/3lkfhdaabxl23", "content": "", "creation_timestamp": "2025-03-15T06:09:33.166085Z"}, {"uuid": "8c9ba27d-181d-455f-985f-89da9e8f9497", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25012", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljz4orx3n7x2", "content": "", "creation_timestamp": "2025-03-10T08:24:46.035552Z"}, {"uuid": "9ebb07bf-e637-472f-882e-9645b796148d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "seen", "source": "https://bsky.app/profile/saveam.bsky.social/post/3lkfhdaaevd23", "content": "", "creation_timestamp": "2025-03-15T06:09:33.676929Z"}, {"uuid": "c9db5584-1cb1-41f3-8c18-b5ab413a3da0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "seen", "source": "https://bsky.app/profile/saveam.bsky.social/post/3lkfhdaaful23", "content": "", "creation_timestamp": "2025-03-15T06:09:34.268284Z"}, {"uuid": "14ac2148-1ef7-4ec2-bec7-f256ccc7231b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "seen", "source": "https://bsky.app/profile/saveam.bsky.social/post/3lkfhdaafum23", "content": "", "creation_timestamp": "2025-03-15T06:09:34.831831Z"}, {"uuid": "55d4620f-d54e-4f09-b414-079be80192d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25292", "type": "seen", "source": "https://bsky.app/profile/saveam.bsky.social/post/3lkfhdaaevd23", "content": "", "creation_timestamp": "2025-03-15T06:09:33.755477Z"}, {"uuid": "e180fcfc-4db3-4665-b80e-50322cf30804", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25292", "type": "seen", "source": "https://bsky.app/profile/saveam.bsky.social/post/3lkfhdaaful23", "content": "", "creation_timestamp": "2025-03-15T06:09:34.350189Z"}, {"uuid": "3f8cbcb7-0d13-468e-b225-0f945375d0cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25292", "type": "seen", "source": "https://bsky.app/profile/saveam.bsky.social/post/3lkfhdaafum23", "content": "", "creation_timestamp": "2025-03-15T06:09:34.911598Z"}, {"uuid": "8978561e-840f-4736-87bc-79c08d11e435", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25362", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114116743799665732", "content": "", "creation_timestamp": "2025-03-06T17:48:43.512968Z"}, {"uuid": "56656c2b-78cf-4272-be75-de49dfb1e29c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25281", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-17", "content": "", "creation_timestamp": "2025-02-13T11:00:00.000000Z"}, {"uuid": "4229bafc-390e-402c-9c26-cdcfb579aa04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25632", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114116743857746801", "content": "", "creation_timestamp": "2025-03-06T17:48:43.837748Z"}, {"uuid": "e2d0a1a2-26c1-43f3-b096-ec8d151c0e37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "seen", "source": "https://bsky.app/profile/saveam.bsky.social/post/3lkfhdaafun23", "content": "", "creation_timestamp": "2025-03-15T06:09:35.423313Z"}, {"uuid": "168c91be-6491-4b06-b15e-194ce07b2643", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25012", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljzacok6guy2", "content": "", "creation_timestamp": "2025-03-10T09:27:19.765671Z"}, {"uuid": "be5c76ee-6802-45a5-8ec0-8140022c8864", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25292", "type": "seen", "source": "https://bsky.app/profile/saveam.bsky.social/post/3lkfhdaafun23", "content": "", "creation_timestamp": "2025-03-15T06:09:35.501231Z"}, {"uuid": "8250a7a8-27dc-4f8b-bcfc-0b47eb7c0e14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25185", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljim7i2vin2a", "content": "", "creation_timestamp": "2025-03-03T18:44:16.320777Z"}, {"uuid": "6da58aa6-3bb3-453e-b89f-0137cd0ec7ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2581", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkuuyowaob2e", "content": "", "creation_timestamp": "2025-03-21T09:18:39.575414Z"}, {"uuid": "14e4f041-657e-46be-9e1b-507d7e52eb4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2576", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llaz4nv6bp2h", "content": "", "creation_timestamp": "2025-03-26T05:04:23.550337Z"}, {"uuid": "e3ab26f4-77b1-466d-b07e-40168ea86000", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "seen", "source": "https://github.blog/security/sign-in-as-anyone-bypassing-saml-sso-authentication-with-parser-differentials/", "content": "", "creation_timestamp": "2025-03-12T20:07:18.000000Z"}, {"uuid": "7f9dcc75-2de9-4d7e-90f4-94dd5aeb81aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25193", "type": "seen", "source": "https://bsky.app/profile/knaepp.bsky.social/post/3ll7sd5r3b72s", "content": "", "creation_timestamp": "2025-03-25T17:30:05.258089Z"}, {"uuid": "88afb6d3-8ff6-45a8-83a9-27301087ebf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2573", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llaz4nyjgm2l", "content": "", "creation_timestamp": "2025-03-26T05:04:24.103406Z"}, {"uuid": "493742b1-7a59-471f-b5fa-659e22aa7770", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25292", "type": "seen", "source": "https://github.blog/security/sign-in-as-anyone-bypassing-saml-sso-authentication-with-parser-differentials/", "content": "", "creation_timestamp": "2025-03-12T20:07:18.000000Z"}, {"uuid": "e24e344f-ce10-4f29-adb6-02562dab7751", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2505", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lkscf7ljn32v", "content": "", "creation_timestamp": "2025-03-20T08:40:17.861827Z"}, {"uuid": "444e03e3-38f6-4a94-b8e0-b293a8399dcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25067", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-16", "content": "", "creation_timestamp": "2025-02-13T11:00:00.000000Z"}, {"uuid": "efef2212-4891-4de4-8d4b-cf2b2491ddb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25388", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3li55ph2hn52c", "content": "", "creation_timestamp": "2025-02-14T12:00:15.519244Z"}, {"uuid": "205a27a3-e353-496e-be8e-e0f71efa9d07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25067", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3li55phskhe24", "content": "", "creation_timestamp": "2025-02-14T12:00:17.837825Z"}, {"uuid": "17069f95-c82c-4e58-b2ee-1bc5848e44c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25003", "type": "seen", "source": "https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review", "content": "", "creation_timestamp": "2025-03-11T16:39:36.000000Z"}, {"uuid": "63315b4a-9cfb-4ad2-9ecc-c8fe2c136321", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25008", "type": "seen", "source": "https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review", "content": "", "creation_timestamp": "2025-03-11T16:39:36.000000Z"}, {"uuid": "73a38f24-e607-4c0e-be3d-86ca84738c9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25740", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li5indbpjn2e", "content": "", "creation_timestamp": "2025-02-14T15:15:54.667587Z"}, {"uuid": "daae1132-ed8a-4672-8ad3-d2ad544d630d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25745", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li5lyyhvgd2e", "content": "", "creation_timestamp": "2025-02-14T16:16:07.206487Z"}, {"uuid": "fb557fd0-2380-4d8c-b3d6-99deaaee479f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25990", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/114003188144224178", "content": "", "creation_timestamp": "2025-02-14T16:30:00.893365Z"}, {"uuid": "1642f363-792b-43f8-ba0b-abfa29e6ce5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25994", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/114003188179713907", "content": "", "creation_timestamp": "2025-02-14T16:30:01.348693Z"}, {"uuid": "deb18eb5-b26a-4bd3-a6a9-e53e81355f79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25745", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114003261336817886", "content": "", "creation_timestamp": "2025-02-14T16:48:40.023243Z"}, {"uuid": "2b6d6ad3-335b-4185-ae0a-dc4631e5ae83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25204", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li5pdo3wah2e", "content": "", "creation_timestamp": "2025-02-14T17:15:47.246992Z"}, {"uuid": "9a038102-9937-4d4d-9a5c-3b8a0d433962", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25206", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li5pdrcbmx2e", "content": "", "creation_timestamp": "2025-02-14T17:15:50.117324Z"}, {"uuid": "b8906c69-c5ad-48fc-be6b-9c183c17d852", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25295", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li5pdu7c5s2c", "content": "", "creation_timestamp": "2025-02-14T17:15:53.291744Z"}, {"uuid": "8e6d39a0-4b68-4281-afce-8b152f97e119", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25988", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li5pdwos4i24", "content": "", "creation_timestamp": "2025-02-14T17:15:56.106602Z"}, {"uuid": "77a5a8a8-dc7e-4ecf-ab65-9f121d7f9fda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25990", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li5pdzfgjf2k", "content": "", "creation_timestamp": "2025-02-14T17:15:58.550516Z"}, {"uuid": "e8fa4a9e-513d-49b6-b257-9ddf98284cfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25991", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li5pe4rz562s", "content": "", "creation_timestamp": "2025-02-14T17:16:02.589505Z"}, {"uuid": "1ef82ba0-72f2-4391-ba55-e20f16cada93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25992", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li5pe6zm5g2e", "content": "", "creation_timestamp": "2025-02-14T17:16:04.551092Z"}, {"uuid": "25cb69a3-c827-4004-ad08-e78b50ebcb21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25993", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li5peb4xg62g", "content": "", "creation_timestamp": "2025-02-14T17:16:06.581346Z"}, {"uuid": "795b8833-4ce5-4ea1-8d11-133c5e1d2356", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25994", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li5pedwufy24", "content": "", "creation_timestamp": "2025-02-14T17:16:09.761258Z"}, {"uuid": "b84c6995-68ec-4717-8f72-9cfe4715a3ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25997", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li5peg3ril2r", "content": "", "creation_timestamp": "2025-02-14T17:16:11.808742Z"}, {"uuid": "31e7e8dd-e365-414d-999e-f2ebc14eedc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25295", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li5ud6ferz2z", "content": "", "creation_timestamp": "2025-02-14T18:44:59.106950Z"}, {"uuid": "8f7afc04-229e-4eed-8eef-ab4e8a91838d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25990", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li5ud6v6yh2v", "content": "", "creation_timestamp": "2025-02-14T18:45:01.142921Z"}, {"uuid": "5a67d66f-d4f1-4f8c-bab2-24a31c47557d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25994", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li5ud6yhpm2p", "content": "", "creation_timestamp": "2025-02-14T18:45:01.771931Z"}, {"uuid": "6ece613b-3155-482a-9a61-6ff31adf3eb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25988", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li5ud7fpwz2z", "content": "", "creation_timestamp": "2025-02-14T18:45:04.228031Z"}, {"uuid": "0f8e1fc2-ed42-4072-8db1-47cc6f70c470", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25993", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li5ud7iviz2z", "content": "", "creation_timestamp": "2025-02-14T18:45:04.832107Z"}, {"uuid": "a3c57233-d8c5-479f-8edd-c6ba024f4261", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25992", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li5ud7mavg2y", "content": "", "creation_timestamp": "2025-02-14T18:45:05.477649Z"}, {"uuid": "639451dd-f4da-48cf-8be4-f6743872f0bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25997", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li5ud7ssgg2v", "content": "", "creation_timestamp": "2025-02-14T18:45:06.647596Z"}, {"uuid": "35275872-1f08-4311-9e22-cd2146aa2934", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25204", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li5ud7we6b2z", "content": "", "creation_timestamp": "2025-02-14T18:45:07.263327Z"}, {"uuid": "97d3b65d-f720-4740-98f9-a83a15c8588e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25991", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li5udaaixg2m", "content": "", "creation_timestamp": "2025-02-14T18:45:09.015917Z"}, {"uuid": "ec0adfd6-7bd3-41f5-a0f7-752fd2cee083", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25206", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li5udaknd222", "content": "", "creation_timestamp": "2025-02-14T18:45:10.928018Z"}, {"uuid": "4b415325-ec18-4c77-9afe-0fbb5ff28a05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25389", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114003734070083765", "content": "", "creation_timestamp": "2025-02-14T18:48:51.417762Z"}, {"uuid": "ccd1711e-6ee0-4f15-a0d7-9abf9a61d5fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25206", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114003734174518298", "content": "", "creation_timestamp": "2025-02-14T18:48:53.259682Z"}, {"uuid": "ca5429f1-443b-4331-9f19-1f62a0509769", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25296", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/114003891448459556", "content": "", "creation_timestamp": "2025-02-14T19:28:52.416277Z"}, {"uuid": "dcaffb42-2992-44ac-8a91-a74c4a3d2e59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25297", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/114003891483235545", "content": "", "creation_timestamp": "2025-02-14T19:28:53.038742Z"}, {"uuid": "6e57f1f4-fa8b-48f6-932f-e71e991c283a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25285", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/114003913812916358", "content": "", "creation_timestamp": "2025-02-14T19:34:33.682410Z"}, {"uuid": "2653102e-33fc-4788-a0bc-9fc524bd3494", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25304", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/114003913828136574", "content": "", "creation_timestamp": "2025-02-14T19:34:33.995126Z"}, {"uuid": "5ef5d4c0-84c9-48f8-9582-eacf67bb75d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25745", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li5x4nbidm2p", "content": "", "creation_timestamp": "2025-02-14T19:35:00.830233Z"}, {"uuid": "4645b313-ef19-4cc7-8756-4761a54fb90e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25288", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/114003936399738557", "content": "", "creation_timestamp": "2025-02-14T19:40:18.280023Z"}, {"uuid": "c976062d-f67d-4acc-9c0c-1875f892be0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25289", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/114003936414922745", "content": "", "creation_timestamp": "2025-02-14T19:40:19.456843Z"}, {"uuid": "bd298f1c-f167-4589-b5da-9f8e69d25d94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25290", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/114003936429038682", "content": "", "creation_timestamp": "2025-02-14T19:40:19.588915Z"}, {"uuid": "b7158c18-4b7f-43e9-b742-5ad440405eea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25285", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li5zfmw52y2n", "content": "", "creation_timestamp": "2025-02-14T20:15:50.082878Z"}, {"uuid": "b1dafeee-3aba-46d5-940c-dd5181ffbfa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25288", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li5zfpufoi2y", "content": "", "creation_timestamp": "2025-02-14T20:15:53.278934Z"}, {"uuid": "6c7c85f9-e35e-496f-b910-e1e5650acd5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25289", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li5zfsd3ay2a", "content": "", "creation_timestamp": "2025-02-14T20:15:55.707510Z"}, {"uuid": "12bf2f94-437b-42e9-bfa4-fe569111989b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25290", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li5zfulgoq2a", "content": "", "creation_timestamp": "2025-02-14T20:15:57.954277Z"}, {"uuid": "572c6bce-ec99-42cc-a78e-ad65d4430cfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25296", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li5zfwrfyt2f", "content": "", "creation_timestamp": "2025-02-14T20:16:00.346858Z"}, {"uuid": "15465d82-4ec0-49f3-a2d9-1bba9b2ebf5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25297", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li5zfzryra2a", "content": "", "creation_timestamp": "2025-02-14T20:16:03.533379Z"}, {"uuid": "5c5624f4-240c-4d1f-b806-ac05d60b9435", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25304", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li5zg4eke72o", "content": "", "creation_timestamp": "2025-02-14T20:16:06.128363Z"}, {"uuid": "6523aa52-3380-4977-9970-aac09df25aa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25297", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114004204891236343", "content": "", "creation_timestamp": "2025-02-14T20:49:10.575921Z"}, {"uuid": "4e2badc8-6ecd-4e4e-896e-9e7c12f6c618", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25285", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li6bzmhnmw2p", "content": "", "creation_timestamp": "2025-02-14T22:50:10.480872Z"}, {"uuid": "2c7d17c3-7f9f-4820-bb59-140967915eb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25288", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li6bzmqmlk2v", "content": "", "creation_timestamp": "2025-02-14T22:50:11.215665Z"}, {"uuid": "38ff4b16-66e4-42f4-aadc-3b6e50ce07ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25290", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li6bzmtubr22", "content": "", "creation_timestamp": "2025-02-14T22:50:11.842762Z"}, {"uuid": "f76368b8-6abd-4cbc-9243-2087ee75bad9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25304", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li6bzmwzoo2e", "content": "", "creation_timestamp": "2025-02-14T22:50:12.426640Z"}, {"uuid": "528532b1-25c7-4c83-a369-b2f0debd9dad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25289", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li6bzn2box2y", "content": "", "creation_timestamp": "2025-02-14T22:50:13.025331Z"}, {"uuid": "a256f290-5a12-42c1-a97b-79618b0a52ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25296", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li6bzn5k6x2y", "content": "", "creation_timestamp": "2025-02-14T22:50:13.601280Z"}, {"uuid": "50e344b0-8f69-41d9-a980-f38461545aa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25297", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li6bznaq7k2v", "content": "", "creation_timestamp": "2025-02-14T22:50:14.182219Z"}, {"uuid": "9a1b99ed-7f7a-4d16-9701-1780e83c43fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25067", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3li6fwvaslg25", "content": "", "creation_timestamp": "2025-02-15T00:00:16.464831Z"}, {"uuid": "3c72f757-857e-4ad4-a01d-ad2b5d993cf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2532", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-175/", "content": "", "creation_timestamp": "2025-03-20T04:00:00.000000Z"}, {"uuid": "7b17f8fb-a354-4222-99fd-069c43acc65c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "seen", "source": "https://infosec.exchange/users/decio/statuses/114154270169549367", "content": "", "creation_timestamp": "2025-03-13T08:52:09.662944Z"}, {"uuid": "2b1607b7-4200-443f-be26-8f8c022058a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25292", "type": "seen", "source": "https://infosec.exchange/users/decio/statuses/114154270169549367", "content": "", "creation_timestamp": "2025-03-13T08:52:09.744909Z"}, {"uuid": "26eaea36-4327-4278-bc49-eb18c666145a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2531", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-174/", "content": "", "creation_timestamp": "2025-03-20T04:00:00.000000Z"}, {"uuid": "e4643da1-d456-40d4-8daf-cee3de7ed2d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25595", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkoihybkfq26", "content": "", "creation_timestamp": "2025-03-18T20:18:34.082154Z"}, {"uuid": "9543432c-d79d-47b8-8582-1b23e897de04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25589", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkoihykwyv26", "content": "", "creation_timestamp": "2025-03-18T20:18:34.795060Z"}, {"uuid": "80d0d55e-9db4-4f1e-8824-4873942fb19a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2530", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-173/", "content": "", "creation_timestamp": "2025-03-20T04:00:00.000000Z"}, {"uuid": "c601a772-0fb2-4622-835f-d1376db4c771", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25279", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3liystifj3r2u", "content": "", "creation_timestamp": "2025-02-25T12:00:12.779780Z"}, {"uuid": "297fd283-51ff-4292-a510-3d59644239da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25939", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljit7alsrr23", "content": "", "creation_timestamp": "2025-03-03T20:49:26.214701Z"}, {"uuid": "72abebb1-fa52-4921-98da-704147923efe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25497", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljqit6khdu2a", "content": "", "creation_timestamp": "2025-03-06T22:04:58.137278Z"}, {"uuid": "75d03000-7fd3-4787-88b5-e9d7045c3af0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2505", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lksdomzswc26", "content": "", "creation_timestamp": "2025-03-20T09:03:33.384249Z"}, {"uuid": "05eaa3ec-20df-4e62-a9eb-32180b6196fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25191", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljqit6peqp2s", "content": "", "creation_timestamp": "2025-03-06T22:04:58.710547Z"}, {"uuid": "0263aaa7-611c-4635-a8e9-a08de3b80f88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25582", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkoihz3ucn2m", "content": "", "creation_timestamp": "2025-03-18T20:18:37.695788Z"}, {"uuid": "91d37a1c-48d0-4333-826a-a899d3f4c99a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25967", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljit7avpne22", "content": "", "creation_timestamp": "2025-03-03T20:49:27.280420Z"}, {"uuid": "a6bc277f-188f-42cf-b74e-e79d1bd80d24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25586", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkoihz7bkh2n", "content": "", "creation_timestamp": "2025-03-18T20:18:38.303991Z"}, {"uuid": "b7b69997-fd03-4093-87d9-79d91e80a3a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25184", "type": "seen", "source": "https://bsky.app/profile/clayton256.bsky.social/post/3ll6z6vj7ft2m", "content": "", "creation_timestamp": "2025-03-25T10:00:18.857297Z"}, {"uuid": "0d454e69-5ac4-4955-95df-feba45482fef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2516", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3llen4racb62g", "content": "", "creation_timestamp": "2025-03-27T15:40:20.677477Z"}, {"uuid": "88c3f854-7d80-4311-b26b-c35543b23eec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25015", "type": "seen", "source": "https://bsky.app/profile/darkwebinformer.bsky.social/post/3ljnrrqdevs2u", "content": "", "creation_timestamp": "2025-03-05T20:07:20.727930Z"}, {"uuid": "1b076b3a-7bd9-4e71-9f2d-98f0cbbe05bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25362", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljqpb3xgca24", "content": "", "creation_timestamp": "2025-03-07T00:00:07.906545Z"}, {"uuid": "9ecf192e-8991-4e4e-9d1c-1c076bfac1cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25632", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljqpb45qtk2t", "content": "", "creation_timestamp": "2025-03-07T00:00:08.629138Z"}, {"uuid": "815e7ad4-4555-4bff-8cbf-d9335a71c4fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25040", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkoihzqn7p2n", "content": "", "creation_timestamp": "2025-03-18T20:18:40.921398Z"}, {"uuid": "83821798-b956-46df-af51-9cc5ea0dc623", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-25364", "type": "seen", "source": "https://infosec.exchange/users/threatcodex/statuses/114217935883108579", "content": "", "creation_timestamp": "2025-03-24T14:43:11.710030Z"}, {"uuid": "2a0c1633-867a-4446-9ccb-454157044d81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25042", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkoihzz5jf26", "content": "", "creation_timestamp": "2025-03-18T20:18:42.226651Z"}, {"uuid": "57f35991-44a4-4607-86e0-b3454466a8be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25246", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lianzgyusy2i", "content": "", "creation_timestamp": "2025-02-15T21:30:09.678951Z"}, {"uuid": "e6038ec5-9137-443d-ad4d-fefcdf2cc16d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25012", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3ljqsrgop2c2o", "content": "", "creation_timestamp": "2025-03-07T01:03:01.172000Z"}, {"uuid": "3151f7e4-b643-40d7-b670-70129e32343e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lkokpweols2m", "content": "", "creation_timestamp": "2025-03-18T20:58:48.105232Z"}, {"uuid": "35274da9-a9d9-4323-abe3-2c35518de588", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25292", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lkokpweols2m", "content": "", "creation_timestamp": "2025-03-18T20:58:48.188575Z"}, {"uuid": "8639c334-66d1-4595-ae9c-cec831328e8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2547", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkt6sl5cq22x", "content": "", "creation_timestamp": "2025-03-20T17:08:54.957296Z"}, {"uuid": "12e2b3d2-88b3-492e-b059-ac3c2f54e776", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lkokqdygp32r", "content": "", "creation_timestamp": "2025-03-18T20:59:06.216653Z"}, {"uuid": "1802f191-28bc-4bb9-a170-4bfaf4e2759f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2548", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkt6slauoo2s", "content": "", "creation_timestamp": "2025-03-20T17:08:55.528568Z"}, {"uuid": "c09423c2-f348-4605-826e-fe2c4d2ee970", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25292", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lkokqdygp32r", "content": "", "creation_timestamp": "2025-03-18T20:59:06.302497Z"}, {"uuid": "e0e8cde5-1260-449d-882e-dd5546785061", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25306", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lk3vyw77ib2z", "content": "", "creation_timestamp": "2025-03-11T11:00:07.101919Z"}, {"uuid": "2d0d4b6f-6b47-4185-ad41-8f1f90c582b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lkokr7tm7l2u", "content": "", "creation_timestamp": "2025-03-18T20:59:31.428749Z"}, {"uuid": "35cc35c6-78ea-4db4-ab9b-b25189e53956", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25292", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lkokuzqx2e2r", "content": "", "creation_timestamp": "2025-03-18T21:01:39.605882Z"}, {"uuid": "719d0c71-5fc3-42c8-af9a-c0b72abc5dbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2546", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkt6slhq6f2h", "content": "", "creation_timestamp": "2025-03-20T17:08:56.713338Z"}, {"uuid": "a0499487-5702-4bd7-a0fd-0d93e31542c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25331", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj6hjfacip2p", "content": "", "creation_timestamp": "2025-02-27T17:53:40.106590Z"}, {"uuid": "ec67837b-d44f-4e61-aaa4-88ea320636c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25015", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3ljo23lw3j223", "content": "", "creation_timestamp": "2025-03-05T22:35:56.598201Z"}, {"uuid": "a9f6788c-c369-49c6-9803-200b648d8b47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25292", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lkokr7tm7l2u", "content": "", "creation_timestamp": "2025-03-18T20:59:31.504117Z"}, {"uuid": "c1f0bf14-795d-4a5d-a895-20dd6fcd6ac0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2512", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lkq7dekjnl2g", "content": "", "creation_timestamp": "2025-03-19T12:40:15.535678Z"}, {"uuid": "558e26f1-dbad-4193-a0b8-0c303f50feca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25323", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj6hjfkeum2c", "content": "", "creation_timestamp": "2025-02-27T17:53:40.768081Z"}, {"uuid": "8c7fab92-6d46-4fa5-b384-4252943e471a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lkokuzqx2e2r", "content": "", "creation_timestamp": "2025-03-18T21:01:39.529975Z"}, {"uuid": "7add79ce-a010-4003-a798-8e3d2aee9337", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25326", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj6hjfnsfr25", "content": "", "creation_timestamp": "2025-02-27T17:53:41.326487Z"}, {"uuid": "80a72ac8-7368-402f-8e10-82d3ec5c5d31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25012", "type": "seen", "source": "https://threatintel.cc/2025/03/06/elastic-releases-urgent-fix-for.html", "content": "", "creation_timestamp": "2025-03-06T20:05:16.000000Z"}, {"uuid": "4f1a7403-7068-4d72-8359-bbaec828187d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25333", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj6hjfrx6c2p", "content": "", "creation_timestamp": "2025-02-27T17:53:41.886085Z"}, {"uuid": "95a147ab-423a-46a9-8640-c32ca1c7c4c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114154846152927799", "content": "", "creation_timestamp": "2025-03-13T11:18:38.895506Z"}, {"uuid": "ff1f92e6-0f7f-40e7-a7b8-1e0d97ee0cbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25292", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114154846152927799", "content": "", "creation_timestamp": "2025-03-13T11:18:39.021082Z"}, {"uuid": "41c83989-7851-42e9-978a-6bfad0bde15d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lkokvurocj2k", "content": "", "creation_timestamp": "2025-03-18T21:02:07.789852Z"}, {"uuid": "293539fc-84d6-4d45-85e5-9bfd19593666", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25325", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj6hjfvia72p", "content": "", "creation_timestamp": "2025-02-27T17:53:42.427107Z"}, {"uuid": "456d86e3-dd3b-47e8-b266-16fbda486e86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114154851252724733", "content": "", "creation_timestamp": "2025-03-13T11:19:56.575543Z"}, {"uuid": "70955c5c-6c72-4a77-b624-caf4fd167175", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25292", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lkokvurocj2k", "content": "", "creation_timestamp": "2025-03-18T21:02:07.870130Z"}, {"uuid": "74967a5e-992d-471e-af51-5ee413d8bf48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25759", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj6hjfzb2b2y", "content": "", "creation_timestamp": "2025-02-27T17:53:43.015769Z"}, {"uuid": "9b240d53-a52e-400c-abb0-9a000956da89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25324", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj6hjg5eaq2y", "content": "", "creation_timestamp": "2025-02-27T17:53:43.566854Z"}, {"uuid": "553630f2-c39f-451c-94fe-73004f0d012f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25760", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj6hjgeobr2y", "content": "", "creation_timestamp": "2025-02-27T17:53:44.680413Z"}, {"uuid": "c596b94d-cd52-4a0b-9068-9249d78f2192", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25292", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114154851252724733", "content": "", "creation_timestamp": "2025-03-13T11:19:56.631399Z"}, {"uuid": "aa968645-7ccd-472f-b9f0-899a2aee0679", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25632", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljo5nkwucg2f", "content": "", "creation_timestamp": "2025-03-05T23:39:39.470771Z"}, {"uuid": "9af34b57-ecda-4a36-a5bd-514896ada847", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lkokxqvjot2k", "content": "", "creation_timestamp": "2025-03-18T21:03:10.942966Z"}, {"uuid": "f5e53a31-716d-4eb8-bc35-bf9a85f9bc0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114154867825552089", "content": "", "creation_timestamp": "2025-03-13T11:24:09.228437Z"}, {"uuid": "67cac3eb-d1e3-41e3-9efa-ff3cb1e740a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25292", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114154867825552089", "content": "", "creation_timestamp": "2025-03-13T11:24:09.298419Z"}, {"uuid": "567888c2-2fb4-425b-9798-02f394c5f159", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25292", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lkokxqvjot2k", "content": "", "creation_timestamp": "2025-03-18T21:03:11.019487Z"}, {"uuid": "946fff54-47f4-4ec8-a1ec-ee53877276ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25362", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljo5nlello2h", "content": "", "creation_timestamp": "2025-03-05T23:39:40.671681Z"}, {"uuid": "db20fc68-38de-492f-a2d5-c0e6dbb13043", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2532", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll7xdpdd552j", "content": "", "creation_timestamp": "2025-03-25T18:59:53.255303Z"}, {"uuid": "7ef72f1f-2502-4609-aa07-e58a14184438", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25634", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljo5nlj3cc2j", "content": "", "creation_timestamp": "2025-03-05T23:39:41.258386Z"}, {"uuid": "58a68ae8-b0f5-48a0-9042-8ef8a7d4ac9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lkokyjc4f22u", "content": "", "creation_timestamp": "2025-03-18T21:03:36.252807Z"}, {"uuid": "fc883dc0-b986-4f1a-b57d-2201bb161378", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25292", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lkokyjc4f22u", "content": "", "creation_timestamp": "2025-03-18T21:03:36.332597Z"}, {"uuid": "561719c2-5fcc-4d2e-8b71-df4083cfd73b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25198", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3liec6nuzqc2y", "content": "", "creation_timestamp": "2025-02-17T08:09:00.771235Z"}, {"uuid": "b292a808-c0d4-45ed-b5f3-ef4f708ae279", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25015", "type": "seen", "source": "https://bsky.app/profile/neroqc.bsky.social/post/3lk3ykdwjs224", "content": "", "creation_timestamp": "2025-03-11T11:45:41.218651Z"}, {"uuid": "d62fc6d8-72c8-4eb1-a593-4d30640f8fe0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2530", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll7xdpgql32s", "content": "", "creation_timestamp": "2025-03-25T18:59:53.868616Z"}, {"uuid": "87f8f92f-af1c-41ef-8dc3-17ffc522b120", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25220", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114182802995800818", "content": "", "creation_timestamp": "2025-03-18T09:48:26.312697Z"}, {"uuid": "fef2cab6-d0d8-46e5-8f83-ded21478c67d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2512", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkqfwt3gxm2n", "content": "", "creation_timestamp": "2025-03-19T14:38:31.182079Z"}, {"uuid": "c80451f8-7080-41f6-b483-cdc43d05ae1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25055", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lifybytrn423", "content": "", "creation_timestamp": "2025-02-18T00:17:12.517933Z"}, {"uuid": "d43ba38f-22f3-4931-a6e9-c713dda0d42f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25221", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lig3klldm32n", "content": "", "creation_timestamp": "2025-02-18T01:15:41.927661Z"}, {"uuid": "5d2556ee-ebc8-4c18-818b-a121a065cd87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25222", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lig3koajni2y", "content": "", "creation_timestamp": "2025-02-18T01:15:44.444001Z"}, {"uuid": "7acfaf4c-2b6a-416f-9d3b-c9f2e920e6d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25223", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lig3kqrvw723", "content": "", "creation_timestamp": "2025-02-18T01:15:47.267821Z"}, {"uuid": "de8e2d53-df66-4b0c-8b8f-a71bea03d135", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25224", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lig3kt5ah72o", "content": "", "creation_timestamp": "2025-02-18T01:15:49.677648Z"}, {"uuid": "59864ef8-47c9-4db9-8627-ecbb2a31c20b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25286", "type": "seen", "source": "https://bsky.app/profile/vulns.bsky.social/post/3ligb6ciuqw2e", "content": "", "creation_timestamp": "2025-02-18T02:56:12.042683Z"}, {"uuid": "d089d537-b64e-48c8-9f90-8dcc6304ebf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25286", "type": "seen", "source": "https://bsky.app/profile/vulns.bsky.social/post/3ligb6ckr2e2z", "content": "", "creation_timestamp": "2025-02-18T02:56:12.609857Z"}, {"uuid": "9474185c-cc26-4386-bdf8-7f04e500cb7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25286", "type": "seen", "source": "https://bsky.app/profile/vulns.bsky.social/post/3ligb6dldfw2g", "content": "", "creation_timestamp": "2025-02-18T02:56:13.836675Z"}, {"uuid": "2034ef1b-e16f-4bdb-9d93-e7ca89909f80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25286", "type": "seen", "source": "https://bsky.app/profile/vulns.bsky.social/post/3ligb6gmskk2g", "content": "", "creation_timestamp": "2025-02-18T02:56:16.241844Z"}, {"uuid": "631589c9-2f3c-43c4-908a-9906f73274cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25055", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ligd4lepzn23", "content": "", "creation_timestamp": "2025-02-18T03:31:01.951512Z"}, {"uuid": "3983d957-1dec-4532-8a06-25aabc7965a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25224", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ligjteppxs2a", "content": "", "creation_timestamp": "2025-02-18T05:31:09.009501Z"}, {"uuid": "906e9376-d89d-476c-a0fd-1620790723eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25223", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ligjtff5ii2a", "content": "", "creation_timestamp": "2025-02-18T05:31:09.975975Z"}, {"uuid": "6e178cef-8dbc-4f24-bb74-f99c6a60306f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25221", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ligjtfkhet23", "content": "", "creation_timestamp": "2025-02-18T05:31:10.553920Z"}, {"uuid": "8a426faf-0179-46ad-a8bd-9448dc9d256e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25222", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ligjtfqty62p", "content": "", "creation_timestamp": "2025-02-18T05:31:11.150273Z"}, {"uuid": "98e22ca8-d69c-4386-987b-5f6ddb70ecf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lkomemcicw2k", "content": "", "creation_timestamp": "2025-03-18T21:28:16.133919Z"}, {"uuid": "5ef02eef-2e0b-425f-bf2c-e11240224a82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2531", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll7xdpnizd2m", "content": "", "creation_timestamp": "2025-03-25T18:59:55.141667Z"}, {"uuid": "bf3a54a6-462b-456c-8247-7678e1f3fea7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25292", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lkomemcicw2k", "content": "", "creation_timestamp": "2025-03-18T21:28:16.210942Z"}, {"uuid": "42ecf852-0fdd-4c81-8504-70c77f2d8690", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2511", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkqfwtfzt42m", "content": "", "creation_timestamp": "2025-03-19T14:38:32.969346Z"}, {"uuid": "23e362e4-ff23-4ee1-a835-7343f7ac51a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25150", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljj5uet6o62d", "content": "", "creation_timestamp": "2025-03-04T00:00:09.541252Z"}, {"uuid": "66e21621-9867-4487-a48a-a0234fd4672e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25012", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljzjrqiciux2", "content": "", "creation_timestamp": "2025-03-10T12:16:06.036616Z"}, {"uuid": "825f2ee6-b6e9-4875-9048-093152fbf977", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25300", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lihull4ful23", "content": "", "creation_timestamp": "2025-02-18T18:16:18.227534Z"}, {"uuid": "3cadeb85-141a-4cb5-b0d0-cb908a5c40d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25284", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lihxwyiw3g2y", "content": "", "creation_timestamp": "2025-02-18T19:16:22.442365Z"}, {"uuid": "5af13b99-6203-4b21-a712-f1823c38d24c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25305", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lihxx2p4ei2k", "content": "", "creation_timestamp": "2025-02-18T19:16:24.642350Z"}, {"uuid": "bbc04e98-1e66-449b-9358-8bd878acf005", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25300", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liiauwqq532c", "content": "", "creation_timestamp": "2025-02-18T21:56:19.343061Z"}, {"uuid": "b69dec7e-2304-47ed-bf0c-a6a46e666ddc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25467", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3liibxj7wx323", "content": "", "creation_timestamp": "2025-02-18T22:15:37.437788Z"}, {"uuid": "99ea5411-604b-47b1-a70b-7069314ca9f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25468", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3liibxldmxl23", "content": "", "creation_timestamp": "2025-02-18T22:15:39.664724Z"}, {"uuid": "501068f4-5402-4c16-98a3-036419b85949", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25469", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3liibxodhz423", "content": "", "creation_timestamp": "2025-02-18T22:15:42.728883Z"}, {"uuid": "099c524f-5363-4c8d-932a-7b745ef395fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25891", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3liibxqwaxx2p", "content": "", "creation_timestamp": "2025-02-18T22:15:45.642008Z"}, {"uuid": "303c5ce1-ca25-4c26-bf73-e06351dcd148", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25892", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3liibxtmotp2t", "content": "", "creation_timestamp": "2025-02-18T22:15:48.262202Z"}, {"uuid": "820db51f-d41d-4c62-96ba-3426de3069fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25893", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3liibxvwcws2y", "content": "", "creation_timestamp": "2025-02-18T22:15:50.667848Z"}, {"uuid": "5f3d59f8-7ddb-42d9-894b-2766d232699b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25894", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3liibxycvgs2o", "content": "", "creation_timestamp": "2025-02-18T22:15:53.407408Z"}, {"uuid": "e8b984be-a8d8-475f-9f91-3faca67a5d53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25895", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3liiby2pq7x2p", "content": "", "creation_timestamp": "2025-02-18T22:15:56.064259Z"}, {"uuid": "76077065-c309-43da-9302-e9c73ee48fb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25896", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3liiby53ght2o", "content": "", "creation_timestamp": "2025-02-18T22:15:58.326238Z"}, {"uuid": "d4d5f4c6-6002-4556-9b6e-9b292eb84408", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25471", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3liifev3u6d2y", "content": "", "creation_timestamp": "2025-02-18T23:16:47.272484Z"}, {"uuid": "e38f2e3b-8470-442f-90b1-7856a5fe1173", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25472", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3liifexbxdl2y", "content": "", "creation_timestamp": "2025-02-18T23:16:49.586310Z"}, {"uuid": "cf471506-6ec8-4bd3-b91a-2552cdcfa81f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25473", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3liifezjmor2h", "content": "", "creation_timestamp": "2025-02-18T23:16:51.934256Z"}, {"uuid": "da8aa783-f31d-4387-84be-c1d3f46d679b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25474", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3liiff3tiwz2t", "content": "", "creation_timestamp": "2025-02-18T23:16:54.495061Z"}, {"uuid": "ae0e9eac-561e-44df-ab8c-9f40a6ee442b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25475", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3liiff6b7e42g", "content": "", "creation_timestamp": "2025-02-18T23:16:56.871563Z"}, {"uuid": "1f7df54b-8583-4ff2-90f7-06a96deee0db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25895", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liip5ejckl2y", "content": "", "creation_timestamp": "2025-02-19T02:11:32.571026Z"}, {"uuid": "cc35b809-1888-452f-b939-4804e8da28a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25896", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liip5eypdw2a", "content": "", "creation_timestamp": "2025-02-19T02:11:33.473653Z"}, {"uuid": "a87fa937-6da4-42d3-9ef2-d35f36181ef0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25894", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liip5fo3wt2m", "content": "", "creation_timestamp": "2025-02-19T02:11:37.003794Z"}, {"uuid": "4e255ce7-79c6-478a-8bd9-b3a4a6b2c5aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-25973", "type": "seen", "source": "https://gist.github.com/coleak2021/512acaa12ba0987499d560967acff1d1", "content": "", "creation_timestamp": "2025-02-19T02:51:41.000000Z"}, {"uuid": "a08e7397-0645-47b0-9fde-58233a2c1eec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25054", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lij4sx76q42o", "content": "", "creation_timestamp": "2025-02-19T06:16:15.416365Z"}, {"uuid": "196619ec-c471-4ce9-b94a-63994271e269", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "seen", "source": "https://infosec.exchange/users/tomcat/statuses/114177286203783922", "content": "", "creation_timestamp": "2025-03-17T10:25:26.408314Z"}, {"uuid": "abf77c9a-5c76-4703-b6c9-bf5bfb9338c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25292", "type": "seen", "source": "https://infosec.exchange/users/tomcat/statuses/114177286203783922", "content": "", "creation_timestamp": "2025-03-17T10:25:26.506754Z"}, {"uuid": "e1d1259f-94cd-4e61-b49e-73d0a73470c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2512", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114189644627211250", "content": "", "creation_timestamp": "2025-03-19T14:48:21.983865Z"}, {"uuid": "2a970559-4360-40e6-9bfd-5e7cf2734fa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2588", "type": "seen", "source": "https://bsky.app/profile/abbra.mastodon.social.ap.brid.gy/post/3llb7h7pxoxh2", "content": "", "creation_timestamp": "2025-03-26T07:10:14.221709Z"}, {"uuid": "89fcd204-c8e3-4018-904b-8a6a78acf10c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25467", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lik6nbpjww2a", "content": "", "creation_timestamp": "2025-02-19T16:21:32.173966Z"}, {"uuid": "b18302b3-34ed-4e89-928a-4e9c0bbf3474", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25467", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114031809900330836", "content": "", "creation_timestamp": "2025-02-19T17:49:01.856004Z"}, {"uuid": "ef52c419-99d0-4c6a-8dce-245d59abedbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25895", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114031810042807904", "content": "", "creation_timestamp": "2025-02-19T17:49:01.915366Z"}, {"uuid": "eb6bfe60-23fe-4c1a-a569-3c266b288817", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25893", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114031809943500311", "content": "", "creation_timestamp": "2025-02-19T17:49:01.975989Z"}, {"uuid": "2432c2f8-727e-411d-9fd4-6209deeb7b27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25894", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114031809995881288", "content": "", "creation_timestamp": "2025-02-19T17:49:02.242328Z"}, {"uuid": "cfc9fd6d-5198-483e-a6d6-1868091ccd11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25012", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljud2rw6avi2", "content": "", "creation_timestamp": "2025-03-08T10:34:18.263021Z"}, {"uuid": "70153c52-94e1-4e91-953f-e8535c4b7d3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2557", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114196328635864824", "content": "", "creation_timestamp": "2025-03-20T19:08:12.544431Z"}, {"uuid": "42d014aa-0f5d-4143-84da-75844ab4f78a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/114166691630661888", "content": "", "creation_timestamp": "2025-03-15T13:31:12.294909Z"}, {"uuid": "210f6e0e-7703-4a0e-9309-11e0ab65a06e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25467", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3likychxk722p", "content": "", "creation_timestamp": "2025-02-20T00:00:49.908602Z"}, {"uuid": "432d1259-c98b-4fa2-bd75-7da2bb0f4376", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25947", "type": "seen", "source": "https://bsky.app/profile/will.willofmiletus.com/post/3lil5654vzc2d", "content": "", "creation_timestamp": "2025-02-20T01:27:51.614583Z"}, {"uuid": "9ae91a99-f12c-4921-abfb-807eb6bb4fb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25946", "type": "seen", "source": "https://bsky.app/profile/will.willofmiletus.com/post/3lil5654vzc2d", "content": "", "creation_timestamp": "2025-02-20T01:27:51.658659Z"}, {"uuid": "61e21798-9cef-4d82-801d-11993e40cbd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25299", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3linfhqq2ds2p", "content": "", "creation_timestamp": "2025-02-20T23:01:42.310781Z"}, {"uuid": "be435544-9038-4e75-880d-1884ff36791b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25958", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3linm6ljga523", "content": "", "creation_timestamp": "2025-02-21T01:01:50.914541Z"}, {"uuid": "4d2a75e8-240e-42c7-815f-8fb09fe53088", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25662", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3linm6lnisq2v", "content": "", "creation_timestamp": "2025-02-21T01:01:51.473690Z"}, {"uuid": "2fa80370-26fd-46bc-9baf-805f0511257e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25663", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3linm6ltttk26", "content": "", "creation_timestamp": "2025-02-21T01:01:52.098790Z"}, {"uuid": "deda5969-db9f-457e-bdf6-623558b1d404", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25679", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3linm6m26py2y", "content": "", "creation_timestamp": "2025-02-21T01:01:52.766531Z"}, {"uuid": "e5bd5bbf-52a3-4078-b5d6-dbdb717b0e53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25960", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3linm6m6mko27", "content": "", "creation_timestamp": "2025-02-21T01:01:53.297969Z"}, {"uuid": "45a15702-f260-493b-8f11-94f7d61b5bc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25664", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3linm6mhsv523", "content": "", "creation_timestamp": "2025-02-21T01:01:54.443798Z"}, {"uuid": "ba73a985-5f67-437d-9336-5fb968029880", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25292", "type": "seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/114166691630661888", "content": "", "creation_timestamp": "2025-03-15T13:31:12.378264Z"}, {"uuid": "0b371b54-865a-4c74-bf5f-edc0dcb3c2ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25211", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-084-04", "content": "", "creation_timestamp": "2025-03-25T11:00:00.000000Z"}, {"uuid": "1b5b0e58-c760-4e23-ba8f-ee5e67c4b0f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25279", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114058233235721938", "content": "", "creation_timestamp": "2025-02-24T09:48:42.457923Z"}, {"uuid": "a40d6bb6-4264-42ea-84a1-5385bd28a79f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25914", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lkoritqmbe2q", "content": "", "creation_timestamp": "2025-03-18T23:00:07.184168Z"}, {"uuid": "ffe5851f-cedb-455b-bfc5-df4fc1d6f930", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25662", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114043605390129623", "content": "", "creation_timestamp": "2025-02-21T19:48:41.617184Z"}, {"uuid": "7cc9c5d5-c3cf-4a22-a98f-900e037346dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25663", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114043605435963762", "content": "", "creation_timestamp": "2025-02-21T19:48:41.864374Z"}, {"uuid": "01482ab1-2322-409e-bb0c-83963d247513", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25664", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114043605527020934", "content": "", "creation_timestamp": "2025-02-21T19:48:42.018725Z"}, {"uuid": "fb5509fc-0da8-4202-a0ff-070d8897efc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25667", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114043605575919955", "content": "", "creation_timestamp": "2025-02-21T19:48:42.558393Z"}, {"uuid": "f940711f-487e-4584-b53d-89e815a5debc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25668", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114043605622614588", "content": "", "creation_timestamp": "2025-02-21T19:48:42.936715Z"}, {"uuid": "835e7fac-b9ac-4b68-97eb-9aa6105d18e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25674", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114043605695675117", "content": "", "creation_timestamp": "2025-02-21T19:48:44.773294Z"}, {"uuid": "cf9f3d7e-295c-4e2f-a2a1-631ecc59a57b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25675", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114043605781963773", "content": "", "creation_timestamp": "2025-02-21T19:48:45.252100Z"}, {"uuid": "ec412569-78cd-4bae-87b7-111005057061", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25676", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114043605835091412", "content": "", "creation_timestamp": "2025-02-21T19:48:45.941660Z"}, {"uuid": "52ed01e0-4dea-4182-b11a-e21307a04c6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25678", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114043605876404756", "content": "", "creation_timestamp": "2025-02-21T19:48:46.910704Z"}, {"uuid": "66d51956-ca11-4f20-8a38-45eb32ce630f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25204", "type": "seen", "source": "https://gist.github.com/EbonJaeger/57b8e1cb7c1dcdeba8a87749135dce96", "content": "", "creation_timestamp": "2025-02-21T19:48:13.000000Z"}, {"uuid": "452ba7bc-cc12-4779-bd0c-7e530ddd50da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25282", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114044550171978219", "content": "", "creation_timestamp": "2025-02-21T23:48:55.407030Z"}, {"uuid": "3533f8ab-513e-4856-af98-cc0928a7da47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25510", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114046754686931911", "content": "", "creation_timestamp": "2025-02-22T09:09:33.485317Z"}, {"uuid": "5ca3069c-4165-4345-8efa-d0c0174ab4df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25012", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3ljoo73xra22j", "content": "", "creation_timestamp": "2025-03-06T04:35:53.117444Z"}, {"uuid": "ba6b1c4b-c097-4232-9ee8-7a7a52216053", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2505", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lksiytoyco2v", "content": "", "creation_timestamp": "2025-03-20T10:38:38.708212Z"}, {"uuid": "eb5943c1-9a1b-431e-9d01-2cce5343c022", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2505", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114194363644596222", "content": "", "creation_timestamp": "2025-03-20T10:48:27.868048Z"}, {"uuid": "c0ad3638-76db-4b2b-8cf5-30d2234a1fa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25012", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljrlfpyt5nz2", "content": "", "creation_timestamp": "2025-03-07T08:23:54.155149Z"}, {"uuid": "2c5798be-824d-43fb-8d0f-815b5afdad73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25266", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-08", "content": "", "creation_timestamp": "2025-03-13T11:00:00.000000Z"}, {"uuid": "12b22698-44cd-48ef-a444-5eae9f63100b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25267", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-08", "content": "", "creation_timestamp": "2025-03-13T11:00:00.000000Z"}, {"uuid": "6a9539cb-e493-4d76-97ac-136fc3638c03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2512", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lksk77qexp2q", "content": "", "creation_timestamp": "2025-03-20T11:00:08.645372Z"}, {"uuid": "63c28a81-c3cd-4f75-af5f-ba5fbef09797", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25175", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-079-03", "content": "", "creation_timestamp": "2025-03-20T11:00:00.000000Z"}, {"uuid": "e21a967b-0bf9-48ae-8132-2e2086037cdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-25012", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3ljotjeyg422l", "content": "", "creation_timestamp": "2025-03-06T06:11:01.588579Z"}, {"uuid": "ac64338a-c6c9-46f2-bc2d-25475657d998", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/114169531613827594", "content": "", "creation_timestamp": "2025-03-16T01:33:24.669168Z"}, {"uuid": "5649cba0-e8f6-405d-9a08-a6e5962c872d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25426", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljlnykqnhs2r", "content": "", "creation_timestamp": "2025-03-04T23:54:08.523518Z"}, {"uuid": "aa9fd3b8-a3f0-4112-9b27-e31d113df25e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25292", "type": "seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/114169531613827594", "content": "", "creation_timestamp": "2025-03-16T01:33:24.731785Z"}, {"uuid": "03c5b3e9-ba93-4e32-a993-24726e89e91f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25279", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liw6d5m4i22k", "content": "", "creation_timestamp": "2025-02-24T10:47:50.370205Z"}, {"uuid": "09cd8ef7-1187-4f5b-8c8f-25c7f7b28124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25730", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114078614203695938", "content": "", "creation_timestamp": "2025-02-28T00:11:51.581634Z"}, {"uuid": "945271c5-5f4e-4d2d-ad15-aae44d7e7417", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25516", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj27672eat2w", "content": "", "creation_timestamp": "2025-02-26T01:13:35.766604Z"}, {"uuid": "0a863fac-ad29-4c27-989d-a24b7d33bb30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25517", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj276afptc2v", "content": "", "creation_timestamp": "2025-02-26T01:13:38.462576Z"}, {"uuid": "32837a26-804c-47fe-a44b-b161448a55a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25193", "type": "seen", "source": "https://bsky.app/profile/knaepp.bsky.social/post/3llbfqbd4ju2w", "content": "", "creation_timestamp": "2025-03-26T08:50:06.140999Z"}, {"uuid": "0dd2598a-2fdd-49fc-a05a-9f0b71f0c7ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2539", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3llcon6ludy2e", "content": "", "creation_timestamp": "2025-03-26T21:02:15.236733Z"}, {"uuid": "270ee0bb-1dcf-4e0b-a181-7a7b9969b917", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25514", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj2767ue4j2l", "content": "", "creation_timestamp": "2025-02-26T01:13:36.947354Z"}, {"uuid": "71da694a-133d-4f0d-8189-2c7ef90fb412", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25614", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljzv7izyk72s", "content": "", "creation_timestamp": "2025-03-10T15:40:34.179080Z"}, {"uuid": "6b12d4d0-ce42-40e5-9288-58b4d6d0e8b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25060", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lla5bjp6is2x", "content": "", "creation_timestamp": "2025-03-25T20:46:02.351769Z"}, {"uuid": "d6b24e65-e319-4257-8ca9-056395fc8fb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25515", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj276a7eun2y", "content": "", "creation_timestamp": "2025-02-26T01:13:37.775446Z"}, {"uuid": "53774e43-362f-4177-bc09-80e77e77468e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25615", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljzv7j5upa2f", "content": "", "creation_timestamp": "2025-03-10T15:40:34.730920Z"}, {"uuid": "4ae19591-5f79-4a6f-a675-cae3e74903e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lkdyyts5z62u", "content": "", "creation_timestamp": "2025-03-14T16:15:03.770890Z"}, {"uuid": "53b3f472-999d-4583-bc5f-d428a58fedca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25616", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljzv7jbtiz2j", "content": "", "creation_timestamp": "2025-03-10T15:40:35.304407Z"}, {"uuid": "84fbea79-b4a0-4396-aa88-ad26e17e2a8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25292", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lkdyyts5z62u", "content": "", "creation_timestamp": "2025-03-14T16:15:03.829500Z"}, {"uuid": "50c82772-8b43-43f8-8e7e-7326211ea7d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25730", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj7ccth7yc2s", "content": "", "creation_timestamp": "2025-02-28T01:53:11.590597Z"}, {"uuid": "f7ab70f4-7448-4c2c-9976-95a26d2c3ed4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25620", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljzv7jlixk26", "content": "", "creation_timestamp": "2025-03-10T15:40:36.483925Z"}, {"uuid": "336f9ab3-c92a-4959-89e6-f33048e9c3af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2505", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lkv2o57b6s2q", "content": "", "creation_timestamp": "2025-03-21T11:00:07.294028Z"}, {"uuid": "f59daf5b-13f3-46ac-952a-7c29473f2b97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2539", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-2539.yaml", "content": "", "creation_timestamp": "2025-03-25T07:01:59.000000Z"}, {"uuid": "bc0b28c1-ed6c-478b-ba70-68dd4d1b08f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25570", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj7ccu2uix2w", "content": "", "creation_timestamp": "2025-02-28T01:53:14.091389Z"}, {"uuid": "3b884cdb-a6df-4dea-8c2b-57b56e079d30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2538", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lkv2o6352u2z", "content": "", "creation_timestamp": "2025-03-21T11:00:10.001477Z"}, {"uuid": "fdc00ab7-f195-40f6-8995-9d9cff04382e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25728", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj7ccupfih2p", "content": "", "creation_timestamp": "2025-02-28T01:53:17.095213Z"}, {"uuid": "e7e2bf01-8f2f-465e-9e8d-1ecfcaaffc09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25727", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj7ccut5un26", "content": "", "creation_timestamp": "2025-02-28T01:53:17.637610Z"}, {"uuid": "50738c1c-75e9-47ac-bdb1-1b42ce9d6d2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25477", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj7ccv5fxx2w", "content": "", "creation_timestamp": "2025-02-28T01:53:19.381570Z"}, {"uuid": "2b02837a-b619-4dbd-846f-f3db50783a30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25729", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj7ccuwm772w", "content": "", "creation_timestamp": "2025-02-28T01:53:18.241105Z"}, {"uuid": "104269db-66d3-423d-ba9d-b54d3672ac3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25873", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lke2qgz43726", "content": "", "creation_timestamp": "2025-03-14T16:46:14.562544Z"}, {"uuid": "db46320a-2cfa-4831-8ebd-8994ec435069", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25726", "type": "seen", "source": "https://gist.github.com/Ekkosun/a83870ce7f3b7813b9b462a395e8ad92", "content": "", "creation_timestamp": "2025-02-28T02:45:47.000000Z"}, {"uuid": "45441242-211e-48a3-9c50-b1da01ca2560", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25279", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114059530289800963", "content": "", "creation_timestamp": "2025-02-24T15:18:33.979256Z"}, {"uuid": "56d11f25-8a91-4d1c-9987-ac23f535556d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25724", "type": "seen", "source": "https://gist.github.com/Ekkosun/a83870ce7f3b7813b9b462a395e8ad92", "content": "", "creation_timestamp": "2025-02-28T02:45:47.000000Z"}, {"uuid": "4b9a7a5a-0e72-40c5-a65e-22f27d0d9e6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25725", "type": "seen", "source": "https://gist.github.com/Ekkosun/a83870ce7f3b7813b9b462a395e8ad92", "content": "", "creation_timestamp": "2025-02-28T02:45:47.000000Z"}, {"uuid": "77fde241-a738-466c-9de0-c7875e105c23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25871", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lke2qha63u24", "content": "", "creation_timestamp": "2025-03-14T16:46:15.777773Z"}, {"uuid": "767f940b-39cc-4a1b-bedc-615212cfd163", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25163", "type": "seen", "source": "https://infosec.exchange/users/random_robbie/statuses/114059631838679660", "content": "", "creation_timestamp": "2025-02-24T15:44:23.039497Z"}, {"uuid": "d4ae4eb4-d9db-4760-9aed-56bb714875cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25872", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lke2qhnyoa2s", "content": "", "creation_timestamp": "2025-03-14T16:46:18.305239Z"}, {"uuid": "7f23f5ef-7e9e-48ce-8fd9-f6cdcbc2fa59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "seen", "source": "https://threatintel.cc/2025/03/14/gitlab-addressed-critical-auth-bypass.html", "content": "", "creation_timestamp": "2025-03-14T10:05:19.000000Z"}, {"uuid": "5e796e5c-0f8c-40b7-90ae-2ab3b6d12f96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2582", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkv3yeszo726", "content": "", "creation_timestamp": "2025-03-21T11:23:43.994488Z"}, {"uuid": "4984eec6-5c77-4f6e-b377-b0fe6c01be4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25292", "type": "seen", "source": "https://threatintel.cc/2025/03/14/gitlab-addressed-critical-auth-bypass.html", "content": "", "creation_timestamp": "2025-03-14T10:05:19.000000Z"}, {"uuid": "efd0f200-9255-4f65-9046-b4db8d80437e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2583", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkv3yew6ty24", "content": "", "creation_timestamp": "2025-03-21T11:23:44.597954Z"}, {"uuid": "cafbe37d-d55a-4ac4-8c09-3c71faeee8e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25181", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-03-10T18:10:04.000000Z"}, {"uuid": "ed0be73d-b931-4e1c-a543-0bf7428e9c80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2552", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lktlx4inni2n", "content": "", "creation_timestamp": "2025-03-20T21:04:01.821808Z"}, {"uuid": "105c1db9-0d17-4964-820f-dd10c87399bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2584", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkv3yf5lk72s", "content": "", "creation_timestamp": "2025-03-21T11:23:45.786705Z"}, {"uuid": "6feb774c-41b7-4472-bafb-f9abb5c7f40c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25181", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lk2ayuynhs2g", "content": "", "creation_timestamp": "2025-03-10T19:11:43.273498Z"}, {"uuid": "67a30ce8-087a-412c-9876-1fbb72ec7e92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25181", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lk2ayuz6322g", "content": "", "creation_timestamp": "2025-03-10T19:11:44.471503Z"}, {"uuid": "6f85e21e-ad0c-4f48-9209-f9c8486e7406", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25012", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lk4nz4f6nlj2", "content": "", "creation_timestamp": "2025-03-11T18:10:00.462654Z"}, {"uuid": "b2583a49-b1b9-46a5-b6fe-e087c5c731f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2553", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lktlxaglqn2h", "content": "", "creation_timestamp": "2025-03-20T21:04:07.449488Z"}, {"uuid": "15ed1363-47d1-404e-afe0-53934590b46e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2555", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lktlxaqdwj26", "content": "", "creation_timestamp": "2025-03-20T21:04:08.809613Z"}, {"uuid": "b4bfc6df-8a79-42a5-a6d4-44e7183cd2a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25220", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lknn34elxy2x", "content": "", "creation_timestamp": "2025-03-18T12:08:12.046075Z"}, {"uuid": "b0476436-73a5-4576-a026-b1de227a636b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2556", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lktlxaxcgc26", "content": "", "creation_timestamp": "2025-03-20T21:04:10.004695Z"}, {"uuid": "3047ecd8-49a4-425a-9f52-0358485e0929", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25306", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lk2cmbftsd2v", "content": "", "creation_timestamp": "2025-03-10T19:40:22.279954Z"}, {"uuid": "9dd61cb8-4eb9-4914-a481-0e01b5016b7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2551", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lktlxb2qgv2s", "content": "", "creation_timestamp": "2025-03-20T21:04:10.560374Z"}, {"uuid": "08dacb99-0efe-4375-ad97-84e06fb4273d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25599", "type": "seen", "source": "https://bsky.app/profile/r1cksec.bsky.social/post/3lkzztd36zs2f", "content": "", "creation_timestamp": "2025-03-23T10:28:26.041135Z"}, {"uuid": "40bb3935-2c8f-4800-b4ee-cc1895e85337", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25382", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lk2cvze45e26", "content": "", "creation_timestamp": "2025-03-10T19:45:47.947635Z"}, {"uuid": "b73ae6d5-bc47-48f7-9090-20337989b1df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2549", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lktlxb64hj2e", "content": "", "creation_timestamp": "2025-03-20T21:04:11.316094Z"}, {"uuid": "b5ca162a-66be-4aa9-804e-53bc0e75c35e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25977", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lk2cvzo7f726", "content": "", "creation_timestamp": "2025-03-10T19:45:48.764178Z"}, {"uuid": "8d914645-6e88-4163-a881-c427ae1070fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2550", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lktlxblteq2l", "content": "", "creation_timestamp": "2025-03-20T21:04:13.581004Z"}, {"uuid": "1f8e2983-cce2-45dc-aeb5-0b945f0666f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25274", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkvcp4hvrj2m", "content": "", "creation_timestamp": "2025-03-21T13:23:49.225470Z"}, {"uuid": "723df9d6-1922-4881-8a2b-0b57ad00dd90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25940", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lk2cvzz2ma2x", "content": "", "creation_timestamp": "2025-03-10T19:45:50.588590Z"}, {"uuid": "c58222b0-bf06-4a7f-98ec-026826e2f527", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2538", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114196847021806320", "content": "", "creation_timestamp": "2025-03-20T21:20:00.806820Z"}, {"uuid": "2d6a6990-4f17-41d3-b6c8-01edebac1628", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25306", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114139864871772564", "content": "", "creation_timestamp": "2025-03-10T19:48:42.308308Z"}, {"uuid": "118b2972-8880-41fb-99bf-d54905448943", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2577", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkxtz7yv5b2h", "content": "", "creation_timestamp": "2025-03-22T13:39:04.442452Z"}, {"uuid": "95359f2f-927f-45e7-840d-7cd5f82596b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25181", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lk2e6kjbxk24", "content": "", "creation_timestamp": "2025-03-10T20:08:29.916108Z"}, {"uuid": "15e7c191-b953-4a1d-80b4-73a2f60eb9a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2510", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll747p2pqt2s", "content": "", "creation_timestamp": "2025-03-25T10:54:26.780247Z"}, {"uuid": "a7b2b9fe-cb94-4ba9-9dd6-5d2fb2caee41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25012", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljrrpj7woys2", "content": "", "creation_timestamp": "2025-03-07T10:17:14.248706Z"}, {"uuid": "61b50a05-18b0-4d84-b300-580403a93275", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2536", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkr2mygvvg2n", "content": "", "creation_timestamp": "2025-03-19T20:48:51.528790Z"}, {"uuid": "8d2c4b17-4599-4893-9822-7f169ab1e9e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2538", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lktny4lwwd2s", "content": "", "creation_timestamp": "2025-03-20T21:40:23.072778Z"}, {"uuid": "38da9263-bd0b-49af-9382-8e28fe252db3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2588", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkvcp53ktt2j", "content": "", "creation_timestamp": "2025-03-21T13:23:51.928419Z"}, {"uuid": "5af89f2c-0f9c-4e68-9cbc-4093a6816cdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25060", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llssnkujsx2n", "content": "", "creation_timestamp": "2025-04-02T06:56:29.761270Z"}, {"uuid": "57fb285e-da69-45c8-b138-3dd95e7f0fd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25060", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114266794161102237", "content": "", "creation_timestamp": "2025-04-02T05:48:29.785574Z"}, {"uuid": "8fc4ccec-efde-4812-b984-02c16b37d360", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25060", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114266794161102237", "content": "", "creation_timestamp": "2025-04-02T05:48:29.782597Z"}, {"uuid": "da7d80a6-d312-46db-add2-5da96dde3a8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2578", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114242700397855015", "content": "", "creation_timestamp": "2025-03-28T23:41:08.805453Z"}, {"uuid": "15aab970-a222-487c-b913-49f5ed14908d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2578", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114242700397855015", "content": "", "creation_timestamp": "2025-03-28T23:41:08.810936Z"}, {"uuid": "968cc98b-ad94-456b-95a0-f64dcc2dfd28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25686", "type": "seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3llhzvvzg6k2h", "content": "", "creation_timestamp": "2025-03-29T00:07:08.669100Z"}, {"uuid": "dd486545-9909-472a-b054-3a2fc0ec93ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3ltr7gqqzpm2y", "content": "", "creation_timestamp": "2025-07-12T11:01:33.538395Z"}, {"uuid": "4937da5c-c5d5-440e-9363-880fe6278ae7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25060", "type": "seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3llt7r5mfx522", "content": "", "creation_timestamp": "2025-04-02T10:51:08.426586Z"}, {"uuid": "675d5dcc-a9bb-45f1-9eb4-82ec108f22e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/samilaiho.com/post/3ltr7ytk3m22g", "content": "", "creation_timestamp": "2025-07-12T11:11:41.776322Z"}, {"uuid": "31c89dfa-8e93-4bc7-9ff1-c56a5ec5b0d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2500", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqfd7tlambv2", "content": "", "creation_timestamp": "2025-05-30T13:22:21.314974Z"}, {"uuid": "68ad8edf-f191-49f4-8845-a53d94d72521", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25050", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrjjzizmg62r", "content": "", "creation_timestamp": "2025-06-13T22:59:18.566498Z"}, {"uuid": "0e403291-1945-42b9-85d0-57e5e08a143f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/guardian360.bsky.social/post/3ltrfiqax3s2u", "content": "", "creation_timestamp": "2025-07-12T12:50:02.134060Z"}, {"uuid": "54b03688-6dd7-4f7b-ad65-fac6a1b11495", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://infosec.exchange/users/timb_machine/statuses/114839675307602251", "content": "", "creation_timestamp": "2025-07-12T13:21:33.790435Z"}, {"uuid": "5fdde7e2-d706-42b5-8c0e-715ec9b15724", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25215", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrjkchgzdj2k", "content": "", "creation_timestamp": "2025-06-13T23:04:18.888146Z"}, {"uuid": "4ab74f7b-78a4-4b1b-9a60-4fa7f26ab2d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25032", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lreebrdies2s", "content": "", "creation_timestamp": "2025-06-11T21:33:14.735448Z"}, {"uuid": "10a2c16b-75a4-4a8e-9d96-5d25c4dcbe87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25000", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114277646538523666", "content": "", "creation_timestamp": "2025-04-04T03:48:24.352906Z"}, {"uuid": "cd71ff65-d342-4502-ad04-11625ad23361", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25000", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114277646538523666", "content": "", "creation_timestamp": "2025-04-04T03:48:24.386410Z"}, {"uuid": "8a322d14-a50d-4832-96a3-20ca5bbbeea8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25000", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llxjt27xwm2c", "content": "", "creation_timestamp": "2025-04-04T04:01:48.450169Z"}, {"uuid": "63cb2e61-459d-41d5-a6ad-dd3be54dc21b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25001", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llxnhemd5g2i", "content": "", "creation_timestamp": "2025-04-04T05:06:51.790265Z"}, {"uuid": "a095432c-648c-4f82-9bdf-6c4ee8d8fd8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25061", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llxnhfyzb42c", "content": "", "creation_timestamp": "2025-04-04T05:06:58.667659Z"}, {"uuid": "54a71d36-4639-4d30-8ac0-3ab8d33225dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2594", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lq433mdyp72e", "content": "", "creation_timestamp": "2025-05-26T21:02:16.407735Z"}, {"uuid": "d168b5e9-3dbc-4faf-aab7-26c0c522c45e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2571", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqfkewl7lmc2", "content": "", "creation_timestamp": "2025-05-30T15:31:21.820458Z"}, {"uuid": "ae4795e7-f755-41bd-82cb-6858fc34e8a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2504", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ltb3hekfpm2s", "content": "", "creation_timestamp": "2025-07-06T01:07:42.920485Z"}, {"uuid": "b2a449d9-a724-439c-ab40-45de109a14d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-14)", "content": "", "creation_timestamp": "2025-07-14T00:00:00.000000Z"}, {"uuid": "0386e9de-9164-4c6c-a63a-245e32717719", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lts4u4inrs2a", "content": "", "creation_timestamp": "2025-07-12T19:48:00.029145Z"}, {"uuid": "22945d8e-eadf-4459-a17d-4f4e86868c87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2571", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqfmibtbg52p", "content": "", "creation_timestamp": "2025-05-30T16:07:31.498816Z"}, {"uuid": "4bb492aa-ec15-463f-a1a6-3fa78dec3c42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2563", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-2563.yaml", "content": "", "creation_timestamp": "2025-04-05T06:37:30.000000Z"}, {"uuid": "a5f2b59b-8d6b-4db1-be7d-bc8f8c16b088", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2525", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114300295167355636", "content": "", "creation_timestamp": "2025-04-08T03:48:15.283712Z"}, {"uuid": "0ab6e826-319d-4718-ad7e-0dc27afc6285", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2526", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114300295196424023", "content": "", "creation_timestamp": "2025-04-08T03:48:15.439936Z"}, {"uuid": "b8a59ddc-8531-4924-9f06-e67d1a17cd75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2526", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmbmccktqw26", "content": "", "creation_timestamp": "2025-04-08T04:12:45.501250Z"}, {"uuid": "5c6a3824-e4c4-4cb2-9f3e-d3103b9ab90d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2525", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmbmccu2vd2f", "content": "", "creation_timestamp": "2025-04-08T04:12:46.137990Z"}, {"uuid": "bd9ae93c-ecab-4ce4-9a86-4c0eee6580ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25000", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmc56glitk2h", "content": "", "creation_timestamp": "2025-04-08T09:14:49.681093Z"}, {"uuid": "7795213f-6e4c-44ac-af27-a8e8bd3a73dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3ltst6l2nkk2m", "content": "", "creation_timestamp": "2025-07-13T02:27:33.674445Z"}, {"uuid": "32395651-78d5-4811-a066-9c391b4c191b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://infosec.exchange/users/patrickcmiller/statuses/114843970915990317", "content": "", "creation_timestamp": "2025-07-13T04:12:08.205018Z"}, {"uuid": "0b24e212-6635-4169-aad3-46141a43d1fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2568", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmckyu7ksv2h", "content": "", "creation_timestamp": "2025-04-08T13:22:15.096840Z"}, {"uuid": "006a00bc-fa8a-4542-a9bd-0d8acef233f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25254", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmcygf6igu2v", "content": "", "creation_timestamp": "2025-04-08T17:22:31.016795Z"}, {"uuid": "29ca2cc1-d10e-4993-b1ad-609480928c34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-25257", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114830839747623839", "content": "", "creation_timestamp": "2025-07-10T20:32:42.251928Z"}, {"uuid": "a13b9c6d-6111-48af-8eb1-bd30bf6dca54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3ltsyzlmmvl2z", "content": "", "creation_timestamp": "2025-07-13T04:12:08.793686Z"}, {"uuid": "0df4f6d0-83b1-4fbd-8b2b-6873c013f11c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-250026", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0109", "content": "", "creation_timestamp": "2025-04-08T16:53:20.000000Z"}, {"uuid": "72e092f4-a582-4e97-9df2-f2db6e718809", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25001", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "cc520e16-86ba-43ca-a918-8bdb845cb879", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25002", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "fcd4fc79-aa4c-45fb-9673-679269e6d0d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25013", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmdtbgzqqm2b", "content": "", "creation_timestamp": "2025-04-09T01:22:53.041354Z"}, {"uuid": "34f66395-0ec9-4ba4-b1f3-cc522b4b069d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25053", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114307846619733355", "content": "", "creation_timestamp": "2025-04-09T11:48:40.410987Z"}, {"uuid": "1af6e57a-e899-4ad8-96a7-1eec2ac5efd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/brianhaddock.bsky.social/post/3ltk2rlcsy626", "content": "", "creation_timestamp": "2025-07-09T14:49:29.419003Z"}, {"uuid": "27d40f19-a1c5-4a63-879d-15b4cde58723", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-25257", "type": "seen", "source": "https://bsky.app/profile/ichinin.bsky.social/post/3lu35ufiwb22r", "content": "", "creation_timestamp": "2025-07-16T09:59:58.959647Z"}, {"uuid": "aed5abb7-ec68-4bdc-b40f-54c59ed40998", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-25257", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lttgv2vicl2u", "content": "", "creation_timestamp": "2025-07-13T08:20:09.874739Z"}, {"uuid": "0ecda1d8-a42c-4455-a502-ca0a58a1c934", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lttln7kzwh2l", "content": "", "creation_timestamp": "2025-07-13T09:45:14.764789Z"}, {"uuid": "9decbd90-a9b5-4c94-b149-fc34dd009413", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25197", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmhta57qbq2r", "content": "", "creation_timestamp": "2025-04-10T15:32:54.685316Z"}, {"uuid": "fe273341-3935-4ecf-8ff7-51eb902f4fd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25226", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3lmjek4bewb2j", "content": "", "creation_timestamp": "2025-04-11T06:15:15.472515Z"}, {"uuid": "76053d3a-2977-42ed-a656-f4dc23efc722", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2503", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqg25k5cxjp2", "content": "", "creation_timestamp": "2025-05-30T20:15:26.658766Z"}, {"uuid": "467c3ec0-e6f0-4f3b-8b8b-19a0ae8d99e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2575", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmkdybqlrg2g", "content": "", "creation_timestamp": "2025-04-11T15:37:56.845986Z"}, {"uuid": "28360959-e745-485b-bd9d-fb1acc698ee6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2541", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmkdybxf432c", "content": "", "creation_timestamp": "2025-04-11T15:37:57.936220Z"}, {"uuid": "941e1ac0-02ef-407c-89d3-a20d39b94a18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ltyzj7xr422x", "content": "", "creation_timestamp": "2025-07-15T13:36:52.436883Z"}, {"uuid": "673dd537-7df0-47c4-861c-6d19d771fb99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25226", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmp227v4vc2q", "content": "", "creation_timestamp": "2025-04-13T12:23:25.880478Z"}, {"uuid": "23cf4caa-cca8-47c2-b80e-fe9817278cbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25227", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmp227v4vc2q", "content": "", "creation_timestamp": "2025-04-13T12:23:25.974383Z"}, {"uuid": "f89bc42f-f5c1-47e4-bc34-c8d4b6384b2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25226", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmp22c2wc22q", "content": "", "creation_timestamp": "2025-04-13T12:23:27.070350Z"}, {"uuid": "3a6c95dd-a7fd-45d6-8717-7fa649f2167d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25227", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmp22c2wc22q", "content": "", "creation_timestamp": "2025-04-13T12:23:27.153752Z"}, {"uuid": "9a92d927-9cab-4dde-aaef-0cb93451995b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3ltkdgtrfxx2z", "content": "", "creation_timestamp": "2025-07-09T17:24:33.513244Z"}, {"uuid": "8b315a7a-0574-4fd6-b9db-e0be0ffd73f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3ltz4yibi3c2a", "content": "", "creation_timestamp": "2025-07-15T14:39:05.028728Z"}, {"uuid": "4ea9f67c-a808-42f0-b975-071853330d14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2563", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmreed5kya24", "content": "", "creation_timestamp": "2025-04-14T10:33:21.725578Z"}, {"uuid": "70a8383b-ff37-4fb9-879e-a550bea46173", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2572", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114337304886684246", "content": "", "creation_timestamp": "2025-04-14T16:40:17.890164Z"}, {"uuid": "7a683b71-4b7c-45f5-bfbe-665f491944bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2563", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114337336622665561", "content": "", "creation_timestamp": "2025-04-14T16:48:22.302994Z"}, {"uuid": "298b6947-f519-4ce0-ae7e-efb940dbd190", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2572", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lmunx6edds2y", "content": "", "creation_timestamp": "2025-04-15T18:02:56.909126Z"}, {"uuid": "756cfe1e-8391-47aa-9e37-71fded745f44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25276", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-04", "content": "", "creation_timestamp": "2025-04-15T10:00:00.000000Z"}, {"uuid": "1ee4f7c4-c04a-407b-99a1-1447f164ec6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2503", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqgcedvgnz2q", "content": "", "creation_timestamp": "2025-05-30T22:39:01.570403Z"}, {"uuid": "4ddb2968-ac5e-431d-8e7f-ba0faccf91e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2567", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-05", "content": "", "creation_timestamp": "2025-04-15T10:00:00.000000Z"}, {"uuid": "67bbd8f3-0cd9-4e8a-ab5b-219b20041b2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2501", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqgcncmsxr2q", "content": "", "creation_timestamp": "2025-05-30T22:44:02.286994Z"}, {"uuid": "3da796f4-bc25-472a-8c4f-df4deada2dc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25217", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lr46gkzc522p", "content": "", "creation_timestamp": "2025-06-08T15:27:15.667584Z"}, {"uuid": "7cb17678-0ab8-449c-9ef3-0e59a8922312", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25012", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsgzm3wltx2v", "content": "", "creation_timestamp": "2025-06-25T16:25:21.016157Z"}, {"uuid": "7cd0361c-e601-4ae8-b58a-ed6dd51f02b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25456", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114344414695060035", "content": "", "creation_timestamp": "2025-04-15T22:48:39.263920Z"}, {"uuid": "cd086f01-d34c-4dcf-9664-d63b8d365361", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2567", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114344414733612454", "content": "", "creation_timestamp": "2025-04-15T22:48:41.115675Z"}, {"uuid": "022c0590-b92d-453c-9532-16a9778dd426", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25456", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmvd774zid2v", "content": "", "creation_timestamp": "2025-04-16T00:23:12.079057Z"}, {"uuid": "eb86cfef-451a-4a96-a0ef-6954e870fe14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2567", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmvd77xoen2c", "content": "", "creation_timestamp": "2025-04-16T00:23:16.081342Z"}, {"uuid": "e6321845-4bae-404d-ba91-4f3f803d550a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25458", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmvkzquepg2a", "content": "", "creation_timestamp": "2025-04-16T02:43:19.689181Z"}, {"uuid": "d86566d2-ec3a-4783-ab64-33d9fe6619dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25453", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmvkzqxy6m2v", "content": "", "creation_timestamp": "2025-04-16T02:43:20.266514Z"}, {"uuid": "2312f001-24a0-4b64-aae1-b7be760eb99f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25034", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lsbofib5d22b", "content": "", "creation_timestamp": "2025-06-23T13:21:30.360499Z"}, {"uuid": "99173f7f-5db5-41f1-9cd2-eae6d40bd387", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25230", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmxo3lfldo2q", "content": "", "creation_timestamp": "2025-04-16T22:43:26.259266Z"}, {"uuid": "5e5d6306-e3ad-47e1-8946-46b39106693f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25014", "type": "seen", "source": "https://bsky.app/profile/lirantal.com/post/3lsbtxahxrl2g", "content": "", "creation_timestamp": "2025-06-23T15:00:54.181069Z"}, {"uuid": "84f69c73-4bed-4b4e-996a-2f2275383b50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25230", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmy5fa7s622l", "content": "", "creation_timestamp": "2025-04-17T03:17:12.770372Z"}, {"uuid": "a67b820a-d87c-4678-8a36-95cc5d09eff4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25457", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114354393757857085", "content": "", "creation_timestamp": "2025-04-17T17:06:13.272232Z"}, {"uuid": "69dbcbb2-81d8-454d-967c-53da6b324284", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25455", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmzrqxopnf2q", "content": "", "creation_timestamp": "2025-04-17T18:54:19.692582Z"}, {"uuid": "30ef81d7-c235-467a-9761-88711d33e50d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25454", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmzrqyljt42g", "content": "", "creation_timestamp": "2025-04-17T18:54:23.382930Z"}, {"uuid": "b2012783-f17e-402d-89f5-57fa3d8f4808", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25427", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ln2mk6hd7c2u", "content": "", "creation_timestamp": "2025-04-18T02:53:43.375354Z"}, {"uuid": "01ad1e29-f88f-4460-ad32-08d12d8d4fbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://social.circl.lu/users/circl/statuses/114833514896628643", "content": "", "creation_timestamp": "2025-07-11T07:53:02.023430Z"}, {"uuid": "8a78801f-73ba-432c-bbac-e7167e299bdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25427", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114359113293487655", "content": "", "creation_timestamp": "2025-04-18T13:06:28.859941Z"}, {"uuid": "2d3dc36b-109d-4ff4-abb5-d289ee91cf12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25364", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3ln4arcbktd2z", "content": "", "creation_timestamp": "2025-04-18T18:28:17.084922Z"}, {"uuid": "2124ce4c-73dd-41c8-8f2f-9d1761ef6e33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25724", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3ln4gbfhjbx2q", "content": "", "creation_timestamp": "2025-04-18T20:06:45.589954Z"}, {"uuid": "cbd545ce-965b-4b2b-85e2-1255af64d96f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25364", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3ln4hb7anxx2q", "content": "", "creation_timestamp": "2025-04-18T20:24:32.596870Z"}, {"uuid": "dc70222d-f4d4-4257-95ca-15ef6f0a5749", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25984", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ln4hrfloto2r", "content": "", "creation_timestamp": "2025-04-18T20:33:37.977165Z"}, {"uuid": "6ff45e59-0082-4ccc-b52e-5f23fcf238ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25983", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ln4hrg4wbm2g", "content": "", "creation_timestamp": "2025-04-18T20:33:41.020897Z"}, {"uuid": "4dd4ff72-3c4c-411f-8e7c-b29480a1fc7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25985", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ln4hrgkrn42g", "content": "", "creation_timestamp": "2025-04-18T20:33:43.672020Z"}, {"uuid": "9f8669a7-bf80-4295-8994-4d957cb53f9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25427", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln4rydvvt672", "content": "", "creation_timestamp": "2025-04-18T23:36:35.387714Z"}, {"uuid": "cea0f03e-403e-464b-8cfd-c3048312155c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25427", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln4ryettfdx2", "content": "", "creation_timestamp": "2025-04-18T23:36:35.952709Z"}, {"uuid": "cca8eb2c-5e69-4b86-a17b-772b9c89ef35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25983", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln4rylbhy372", "content": "", "creation_timestamp": "2025-04-18T23:36:38.602685Z"}, {"uuid": "8c996c0b-4013-4124-9a17-357a97a3f690", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25427", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln4zfmh4sto2", "content": "", "creation_timestamp": "2025-04-19T01:49:20.352504Z"}, {"uuid": "e5c14d78-817f-41a8-822e-ef8ac76bbc0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25364", "type": "seen", "source": "https://infosec.exchange/users/dragonjar/statuses/114364291565132421", "content": "", "creation_timestamp": "2025-04-19T11:03:22.578372Z"}, {"uuid": "954b3d37-edd6-44bf-b4e3-f83546d611d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25234", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ln6ckbooo225", "content": "", "creation_timestamp": "2025-04-19T14:05:28.782952Z"}, {"uuid": "e4001b37-9161-453a-8c28-42528eac9760", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ltogikw2tk23", "content": "", "creation_timestamp": "2025-07-11T08:29:54.372732Z"}, {"uuid": "2bc3825d-ff5f-4dd9-a2cb-e62543be5947", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-22e12766-f638fa9f8a9c4800", "content": "", "creation_timestamp": "2025-07-13T10:33:25.647340Z"}, {"uuid": "68239afb-0800-4ef5-a5de-05f9fae32e90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/campuscodi.risky.biz/post/3lttup52pwc25", "content": "", "creation_timestamp": "2025-07-13T12:27:24.492140Z"}, {"uuid": "0966b2eb-22e3-4f65-9242-b4b21ce18f98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25207", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lr5t2hazkg2a", "content": "", "creation_timestamp": "2025-06-09T07:08:57.223483Z"}, {"uuid": "e59cc1ec-1524-4a3c-b6f0-627d178a2052", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25270", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114816355954472736", "content": "", "creation_timestamp": "2025-07-08T07:09:16.917412Z"}, {"uuid": "93d72109-6465-480b-9349-aee356fb0e55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25268", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114816355954472736", "content": "", "creation_timestamp": "2025-07-08T07:09:17.029852Z"}, {"uuid": "7d5c2793-cbda-44d4-936e-f0588f6fd2d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25271", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114816355954472736", "content": "", "creation_timestamp": "2025-07-08T07:09:17.135826Z"}, {"uuid": "c9da864c-c042-4649-8e0c-7a94b8f867f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25269", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114816355954472736", "content": "", "creation_timestamp": "2025-07-08T07:09:17.239323Z"}, {"uuid": "ef2536d0-e381-4c4e-b619-2f62c9a11f7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2572", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lnc7lnbmec2p", "content": "", "creation_timestamp": "2025-04-21T03:23:11.763713Z"}, {"uuid": "da25dbc7-dfa5-4a71-a3e8-2f1249e30a6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25373", "type": "seen", "source": "https://bsky.app/profile/vermij.org/post/3lprfoj7ixs2l", "content": "", "creation_timestamp": "2025-05-22T15:12:30.019576Z"}, {"uuid": "8dd2e4ee-a937-4c22-90fc-c44281692fb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25208", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lr5tme4bfr2m", "content": "", "creation_timestamp": "2025-06-09T07:18:57.948237Z"}, {"uuid": "b42f04b5-0db0-474f-9ca4-2354789f0486", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25270", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3ltgqm2dg2r72", "content": "", "creation_timestamp": "2025-07-08T07:10:35.369526Z"}, {"uuid": "1840e679-10cc-4f44-a2f0-a5b01c049cf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25268", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3ltgqm2dg2r72", "content": "", "creation_timestamp": "2025-07-08T07:10:35.497662Z"}, {"uuid": "176a715d-f12a-4805-ac6f-955462c06ce8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25271", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3ltgqm2dg2r72", "content": "", "creation_timestamp": "2025-07-08T07:10:35.606245Z"}, {"uuid": "4b4d910d-732c-42dd-9b26-03ff85f9fdbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25269", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3ltgqm2dg2r72", "content": "", "creation_timestamp": "2025-07-08T07:10:35.708669Z"}, {"uuid": "9ff63c1a-d296-4394-ade4-ce5f86e6d81f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-25364", "type": "seen", "source": "https://bsky.app/profile/calebpr.bsky.social/post/3lncwvajcmt26", "content": "", "creation_timestamp": "2025-04-21T10:20:09.440949Z"}, {"uuid": "2b496d8b-3c99-4e6c-9712-5f6985a10080", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25228", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lncyswznp72d", "content": "", "creation_timestamp": "2025-04-21T10:54:40.244324Z"}, {"uuid": "cc74ac4a-455c-4d82-9291-49aa3a2ece7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2517", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lndtv72wvt2v", "content": "", "creation_timestamp": "2025-04-21T18:59:07.682138Z"}, {"uuid": "c79c275f-6f74-456e-9f78-d553206a4ea8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2594", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3lnf42pfg562f", "content": "", "creation_timestamp": "2025-04-22T06:58:01.265580Z"}, {"uuid": "43694d20-98c1-4acc-b2c9-4943f911dd90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2594", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnf4gmj7kf2r", "content": "", "creation_timestamp": "2025-04-22T07:04:43.397041Z"}, {"uuid": "8b764761-03ac-4e06-81b1-ceab34be5acc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3ltucddzafr2h", "content": "", "creation_timestamp": "2025-07-13T16:31:19.981213Z"}, {"uuid": "37dba68e-1278-498c-8362-067808c1f4ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lu3pdcbgao2t", "content": "", "creation_timestamp": "2025-07-16T15:12:35.347525Z"}, {"uuid": "df3a7be1-9f53-4b0c-b0b0-aac49b49924c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ltzs3tkp2s2c", "content": "", "creation_timestamp": "2025-07-15T20:56:46.692761Z"}, {"uuid": "eff60d70-800d-489c-881a-6161c3107cd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3ltkzoekdjk2y", "content": "", "creation_timestamp": "2025-07-10T00:02:32.670438Z"}, {"uuid": "db7a2f91-1a83-4f6a-813b-7febbbda1002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ltkzt46bak2h", "content": "", "creation_timestamp": "2025-07-10T00:05:07.970226Z"}, {"uuid": "c04cecd0-2df2-4776-ac71-422782839b17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2594", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114382874038312394", "content": "", "creation_timestamp": "2025-04-22T17:49:08.171633Z"}, {"uuid": "ba1a5877-06f0-4106-b247-4fec07679ad3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25269", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ltgxwxmk6m2o", "content": "", "creation_timestamp": "2025-07-08T09:20:49.936732Z"}, {"uuid": "8c2d167a-f403-4f1b-98b8-f27e3bbe8b07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25215", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114683935956926904", "content": "", "creation_timestamp": "2025-06-14T21:53:08.212486Z"}, {"uuid": "34b5119f-c6cc-43b3-a65b-9a413abf5297", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25427", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lnhfrtskaw2h", "content": "", "creation_timestamp": "2025-04-23T04:57:21.071413Z"}, {"uuid": "9c595c44-baed-4f8c-9c4c-4eafb4bdd663", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2595", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnhuhjc5y32b", "content": "", "creation_timestamp": "2025-04-23T09:20:01.362244Z"}, {"uuid": "a45363ec-eea5-4be8-9fe3-c1d10022c885", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25271", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ltgygz72d32o", "content": "", "creation_timestamp": "2025-07-08T09:29:48.212241Z"}, {"uuid": "8cfc0655-5955-4f32-9b48-cee975de4261", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25270", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ltgyxatds62o", "content": "", "creation_timestamp": "2025-07-08T09:38:53.012110Z"}, {"uuid": "fbdc77c5-802b-488e-b26f-9d8f387795c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3ltujdjnnjh2y", "content": "", "creation_timestamp": "2025-07-13T18:36:41.414545Z"}, {"uuid": "1624b839-85a0-4ae6-9714-854e8e1b22ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ltzsfqqpj62x", "content": "", "creation_timestamp": "2025-07-15T21:02:18.354721Z"}, {"uuid": "7b1cdc62-8e48-47ce-8bd4-8d3bbaa6c6e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25014", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lsczysvuvw22", "content": "", "creation_timestamp": "2025-06-24T02:21:49.116165Z"}, {"uuid": "3788c1b5-0ea9-4afc-99b4-ba264d42ec05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3ltukyrcfbb26", "content": "", "creation_timestamp": "2025-07-13T19:06:28.602839Z"}, {"uuid": "ac79382b-bb9f-4833-8f9d-d861e2c0ea43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25268", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ltgzolppdr27", "content": "", "creation_timestamp": "2025-07-08T09:51:56.412467Z"}, {"uuid": "373e70be-643b-447d-8cd9-0b53e366aa43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ltummksdsxp2", "content": "", "creation_timestamp": "2025-07-13T19:36:37.786097Z"}, {"uuid": "2d34d4da-69f3-4d99-abae-a786d7ad4602", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3ltunm2y32i2y", "content": "", "creation_timestamp": "2025-07-13T19:53:03.245941Z"}, {"uuid": "40732828-4bfd-4f78-bd91-6b8e955ac78d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25427", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3lni6ztyb3c23", "content": "", "creation_timestamp": "2025-04-23T12:29:14.557403Z"}, {"uuid": "ff736537-3c49-4298-88c3-6714520dfda1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2595", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114387332269516059", "content": "", "creation_timestamp": "2025-04-23T12:42:55.120944Z"}, {"uuid": "c8202f38-c0b7-4ff8-b77e-b921695f5a9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25045", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnjjsscbai2h", "content": "", "creation_timestamp": "2025-04-24T01:14:47.892637Z"}, {"uuid": "5f3e9d7a-9ccf-4731-9e33-726830eec6a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25046", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnjjssojuq2d", "content": "", "creation_timestamp": "2025-04-24T01:14:49.229304Z"}, {"uuid": "aa079301-41ca-4d99-9a27-01352977c100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2558", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnkenucnex2r", "content": "", "creation_timestamp": "2025-04-24T09:15:13.020591Z"}, {"uuid": "74ccf4d9-3487-4253-8a99-73fb4f7dd1c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-25257", "type": "seen", "source": "https://infosec.exchange/users/patrickcmiller/statuses/114848218252667256", "content": "", "creation_timestamp": "2025-07-13T22:12:17.251244Z"}, {"uuid": "6994bae2-6d89-41ff-9866-dd366d447d08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3ltuvf35rvn2f", "content": "", "creation_timestamp": "2025-07-13T22:12:18.763090Z"}, {"uuid": "8f1e3e8b-25b6-441b-a8f7-0a7da39c40d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-25257", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3ltuwfhqljnk2", "content": "", "creation_timestamp": "2025-07-13T22:30:34.885414Z"}, {"uuid": "9e2736c0-1ffd-4533-a66f-601c31025a79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-25257", "type": "seen", "source": "https://infosec.exchange/users/patrickcmiller/statuses/114848335583174187", "content": "", "creation_timestamp": "2025-07-13T22:42:07.573345Z"}, {"uuid": "1919d28a-f7ab-4370-87fd-6fa94c78beda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2579", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnkvntxwh72h", "content": "", "creation_timestamp": "2025-04-24T14:19:27.203311Z"}, {"uuid": "bf58099b-0d2d-45da-b33c-b8ff00a2a513", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2543", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnkvnu3mu724", "content": "", "creation_timestamp": "2025-04-24T14:19:27.818903Z"}, {"uuid": "2e6254db-01d7-44f6-ac38-5e47b5c3c678", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2558", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114394194900112274", "content": "", "creation_timestamp": "2025-04-24T17:48:11.895543Z"}, {"uuid": "706d171b-c3f8-4731-8d94-e41b19489a5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25777", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnlv7psxpg2d", "content": "", "creation_timestamp": "2025-04-24T23:44:11.576650Z"}, {"uuid": "9e35ff3b-0894-4248-b01e-801fac48deff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25000", "type": "seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3lnm3seokhu2n", "content": "", "creation_timestamp": "2025-04-25T01:41:59.524010Z"}, {"uuid": "26c21fe5-8cb3-4f0c-bed0-3c65695dd15e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2580", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnmiywtc5wb2", "content": "", "creation_timestamp": "2025-04-25T05:42:33.819747Z"}, {"uuid": "cd7c876b-8481-41c8-b4d5-2cc7a8fbe6c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3ltux2gaims2f", "content": "", "creation_timestamp": "2025-07-13T22:42:08.695892Z"}, {"uuid": "ee2ef411-b815-44e3-b4c0-daea6ae4647e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25184", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lnnq2hje5s2y", "content": "", "creation_timestamp": "2025-04-25T17:17:07.034855Z"}, {"uuid": "5bdf270f-d088-4ef5-b31e-6f9e3b0df3a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25777", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114400329765897087", "content": "", "creation_timestamp": "2025-04-25T19:48:21.400588Z"}, {"uuid": "581faf6c-cf69-4ceb-92ee-8796588a629d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25775", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114400329847987378", "content": "", "creation_timestamp": "2025-04-25T19:48:22.713938Z"}, {"uuid": "871776e7-9ef8-4a06-bba9-c78046cd6180", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25775", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lno5mnpoj62b", "content": "", "creation_timestamp": "2025-04-25T21:19:55.366954Z"}, {"uuid": "10b3b5a6-597c-40b4-adad-6fee681bdcc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-25184", "type": "seen", "source": "https://bsky.app/profile/Sempf.infosec.exchange.ap.brid.gy/post/3lnou335z54t2", "content": "", "creation_timestamp": "2025-04-26T04:39:27.904035Z"}, {"uuid": "d4a22af9-c378-436e-b7d4-78d5a5de9129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3ltv2axeyga2n", "content": "", "creation_timestamp": "2025-07-13T23:39:29.338085Z"}, {"uuid": "1a0249c0-f011-4a9a-8219-c0da4bbdcf9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3ltvdmnlkzp2h", "content": "", "creation_timestamp": "2025-07-14T02:27:05.968929Z"}, {"uuid": "66b53994-437f-41a1-b429-21ecbbab261b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/mwyr.es/post/3ltvf5xuwyl2m", "content": "", "creation_timestamp": "2025-07-14T02:54:40.318858Z"}, {"uuid": "3bc79190-8c85-4f33-a4e0-9a7074f2b1d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2500", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-196-01", "content": "", "creation_timestamp": "2025-07-15T10:00:00.000000Z"}, {"uuid": "a7d36fb6-f154-4b18-9bc2-9f84bc76e659", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://aus.social/users/mwyres/statuses/114849328771705334", "content": "", "creation_timestamp": "2025-07-14T02:54:43.038599Z"}, {"uuid": "8d2b01e6-cffb-4cdb-96a7-a64b96fc3c41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/dtpnews.bsky.social/post/3ltvgquglqu22", "content": "", "creation_timestamp": "2025-07-14T03:23:07.496485Z"}, {"uuid": "2742ac50-f727-4f26-9774-2f183ffc3731", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/oknews.bsky.social/post/3ltvgr246od2o", "content": "", "creation_timestamp": "2025-07-14T03:23:14.261290Z"}, {"uuid": "caefd932-e952-4b5c-a31a-b650b022aa7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lton4ayg462l", "content": "", "creation_timestamp": "2025-07-11T10:28:14.930566Z"}, {"uuid": "180fb02f-c895-473b-b147-f340b09789ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-25257", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3ltvj3wkylkg2", "content": "", "creation_timestamp": "2025-07-14T04:05:17.749395Z"}, {"uuid": "0c596ec0-e41e-42ec-a625-d674a49991ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3ltonqijicf24", "content": "", "creation_timestamp": "2025-07-11T10:39:33.118851Z"}, {"uuid": "c050659a-d031-4e4a-ad3d-c1d4bf61dbf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-25257", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3ltvjwuh5y32o", "content": "", "creation_timestamp": "2025-07-14T04:20:10.363050Z"}, {"uuid": "e00e087d-bf25-4d01-b03e-49e507245a53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3lu2alqw6jk2z", "content": "", "creation_timestamp": "2025-07-16T01:16:15.580062Z"}, {"uuid": "d8b2611d-3736-454c-995e-5f18639b8f3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lu2eh7flgy2j", "content": "", "creation_timestamp": "2025-07-16T02:25:15.116518Z"}, {"uuid": "5cdd31b8-deff-4ede-8065-8b8e479df38a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25776", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnvczm75i42s", "content": "", "creation_timestamp": "2025-04-28T17:45:16.149310Z"}, {"uuid": "b5d1eb16-fe6c-46d2-8256-74ad1c8da0da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ltotghtlpec2", "content": "", "creation_timestamp": "2025-07-11T12:24:19.309996Z"}, {"uuid": "0d9c268b-91fd-48a4-bc9c-49faa5148310", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-25257", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114834585559841732", "content": "", "creation_timestamp": "2025-07-11T12:25:18.678031Z"}, {"uuid": "949cd4a7-1e00-46a5-9f45-d994bf5a66f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2594", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lpyhsi2neq2d", "content": "", "creation_timestamp": "2025-05-25T10:39:08.761480Z"}, {"uuid": "8053ec2d-9f8d-4b80-a940-e3c351e44eb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2518", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqdjbon62ow2", "content": "", "creation_timestamp": "2025-05-29T20:04:58.935395Z"}, {"uuid": "afbac79b-1f7f-4836-a205-878d624909fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25034", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ls2zk7zhpo2q", "content": "", "creation_timestamp": "2025-06-20T21:52:21.288997Z"}, {"uuid": "8d962d99-4518-40c4-9f5a-a34e1b712916", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25037", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ls324ddez72m", "content": "", "creation_timestamp": "2025-06-20T22:02:28.760436Z"}, {"uuid": "acf0eafa-5e31-4ba3-bf9a-3b76f46a0078", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3ltox66mdiu2v", "content": "", "creation_timestamp": "2025-07-11T13:28:16.699097Z"}, {"uuid": "cb12d5df-fd45-434d-b12e-8b2e23a9d9e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3ltoxsdscru2c", "content": "", "creation_timestamp": "2025-07-11T13:39:32.513792Z"}, {"uuid": "bbd9cc9a-c670-42f8-bf5a-9e195dcec0d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25038", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ls32l37jep23", "content": "", "creation_timestamp": "2025-06-20T22:10:43.740957Z"}, {"uuid": "dfe33d7a-bb97-4fbf-8d6f-6cd3dfbdc5fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/ransomnews.online/post/3ltozpyisbs2r", "content": "", "creation_timestamp": "2025-07-11T14:14:01.997787Z"}, {"uuid": "52a1ff18-6dcf-43cb-a3f9-8d935aa1a1e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/leekthehack.bsky.social/post/3ltp3btvbxs23", "content": "", "creation_timestamp": "2025-07-11T14:42:01.158251Z"}, {"uuid": "c8b069c2-cd59-4fc2-be72-c13b00227bd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25029", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq746fwypp62", "content": "", "creation_timestamp": "2025-05-28T02:00:03.488459Z"}, {"uuid": "4886660f-bf1d-476f-b5cb-91c9246156c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25026", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq746gw6fm52", "content": "", "creation_timestamp": "2025-05-28T02:00:04.033153Z"}, {"uuid": "3788dd75-3f6e-4f83-89e8-6a3875096027", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/leekthehack.bsky.social/post/3ltp3bzdgac23", "content": "", "creation_timestamp": "2025-07-11T14:42:01.677107Z"}, {"uuid": "9a33e075-0afb-4bdb-879d-e2e42070dde2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25025", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq746hd4r552", "content": "", "creation_timestamp": "2025-05-28T02:00:04.581119Z"}, {"uuid": "b3b1c8e3-1254-479b-9f39-51b1db77123b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25025", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lq7bum4yql2m", "content": "", "creation_timestamp": "2025-05-28T03:41:35.321820Z"}, {"uuid": "ce19a448-4401-4442-a9fa-f66a6073034b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3ltp55g3k5f2o", "content": "", "creation_timestamp": "2025-07-11T15:15:12.823590Z"}, {"uuid": "d8f4cd7c-c59b-4468-8ddc-8ed040a4001e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3ltp5pgxsuft2", "content": "", "creation_timestamp": "2025-07-11T15:25:24.831120Z"}, {"uuid": "658f0661-763c-474e-a897-e2da75b5d551", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3ltp5pmltsoh2", "content": "", "creation_timestamp": "2025-07-11T15:25:36.413876Z"}, {"uuid": "25bfafe6-4c99-4d71-be73-8addf2beb6d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3ltp5tkmqlg24", "content": "", "creation_timestamp": "2025-07-11T15:27:35.836169Z"}, {"uuid": "ed669ad4-70aa-4862-8050-eeac598f389d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3ltp6cvyfjk2e", "content": "", "creation_timestamp": "2025-07-11T15:36:14.506365Z"}, {"uuid": "04f87df6-5608-46f0-8e4e-c9bc8143fbac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3ltp7pq5g6g2y", "content": "", "creation_timestamp": "2025-07-11T16:01:15.612854Z"}, {"uuid": "2d2f76e5-c371-4fcd-839c-dc185b889375", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25251", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq7rdcdlwbc2", "content": "", "creation_timestamp": "2025-05-28T08:19:10.303946Z"}, {"uuid": "6b3c1c0d-bcd0-45a2-a352-6e81ce0d8060", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25044", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqkbkua5whz2", "content": "", "creation_timestamp": "2025-06-01T12:35:35.014690Z"}, {"uuid": "1b13b1e6-f6b1-4107-b12d-a0dc4c81592a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2545", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3logrd7hbf72w", "content": "", "creation_timestamp": "2025-05-05T16:16:26.407990Z"}, {"uuid": "412c5608-2c83-47a2-b33d-0f8b7a0b97a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2509", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lohzjx3cb22h", "content": "", "creation_timestamp": "2025-05-06T04:16:05.331276Z"}, {"uuid": "d2aae652-ede1-4f28-afbf-d4d072897208", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2595", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3loibmmcds4n2", "content": "", "creation_timestamp": "2025-05-06T06:41:39.251843Z"}, {"uuid": "b1267e07-5171-44ba-8a70-548184aaeec4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ltpcju74hka2", "content": "", "creation_timestamp": "2025-07-11T16:54:49.649896Z"}, {"uuid": "d972b452-2a87-400d-a410-9205e2b76401", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ltpcymgxenm2", "content": "", "creation_timestamp": "2025-07-11T17:04:11.977091Z"}, {"uuid": "fb3a48e1-9944-4263-88a3-a32c79edb06f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25218", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3loinx5hqb72h", "content": "", "creation_timestamp": "2025-05-06T10:21:21.360428Z"}, {"uuid": "6a3a4cb4-a8f8-4b47-a84b-28ef31e61203", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25052", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3loinx6en6l24", "content": "", "creation_timestamp": "2025-05-06T10:21:26.058635Z"}, {"uuid": "48f98570-4ede-4840-a51d-eb5473d32b69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25014", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114462250539100046", "content": "", "creation_timestamp": "2025-05-06T18:15:37.228612Z"}, {"uuid": "067cdb4c-b715-4f08-92be-92d93bb24ca4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25014", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lojjmyf4ot2t", "content": "", "creation_timestamp": "2025-05-06T18:36:44.218154Z"}, {"uuid": "14efbb74-92ad-4f24-ab06-c4b7ffe6f8c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25014", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lojlqkidhvo2", "content": "", "creation_timestamp": "2025-05-06T19:20:00.715760Z"}, {"uuid": "55bf4506-3712-4849-9b2f-13f5e805a73d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25014", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3loke7zxup22a", "content": "", "creation_timestamp": "2025-05-07T02:32:46.549006Z"}, {"uuid": "25658843-2f65-4eb4-9190-7196e81d133e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25044", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqknxxxd6z2m", "content": "", "creation_timestamp": "2025-06-01T16:17:30.272720Z"}, {"uuid": "c2446575-44c4-4b1e-9679-ccc9762040a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-2539", "type": "seen", "source": "https://bsky.app/profile/securitycipher.bsky.social/post/3lq7u7qkyiy2j", "content": "", "creation_timestamp": "2025-05-28T09:09:56.420579Z"}, {"uuid": "3384344b-72c5-427d-806b-8c0deb860a3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25022", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lqtfggrook2d", "content": "", "creation_timestamp": "2025-06-05T03:38:31.002188Z"}, {"uuid": "1bcb4c8e-8daa-4c52-bbb7-a88cc634453e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/raptor.infosec.exchange.ap.brid.gy/post/3ltpfflhow6a2", "content": "", "creation_timestamp": "2025-07-11T17:43:28.125989Z"}, {"uuid": "d6742792-056a-4b81-81e4-79176a949c09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/crowdsec.bsky.social/post/3ltwas4vmw22u", "content": "", "creation_timestamp": "2025-07-14T11:09:11.192766Z"}, {"uuid": "83bc9178-87be-4e9a-bb46-f23d78104283", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-25257", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3ltwbfu5t7c2i", "content": "", "creation_timestamp": "2025-07-14T11:20:09.389601Z"}, {"uuid": "fda4c33b-def8-458d-a76c-9506653fcc56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25014", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lolfpa36u42g", "content": "", "creation_timestamp": "2025-05-07T12:31:44.011025Z"}, {"uuid": "cd7ad6d9-4c34-4b7e-b2d8-0aa54b82d830", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25014", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3lomulll4hc2d", "content": "", "creation_timestamp": "2025-05-08T02:30:50.819642Z"}, {"uuid": "d913945a-6696-4d17-8d7a-33c89bf643c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-25014", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lonc2jfpks2k", "content": "", "creation_timestamp": "2025-05-08T06:31:46.970506Z"}, {"uuid": "d7d2ac12-241b-41f8-ade0-3f641d97e7aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25014", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lonjdoflec2t", "content": "", "creation_timestamp": "2025-05-08T08:42:10.733749Z"}, {"uuid": "31c5e3c0-cfc4-48b9-b1b8-8697c4133f35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3ltpha5ikom2y", "content": "", "creation_timestamp": "2025-07-11T18:15:42.686142Z"}, {"uuid": "25ce814d-f7bf-4f05-88dc-837bb8f93518", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3ltphpwzahr2z", "content": "", "creation_timestamp": "2025-07-11T18:24:32.045285Z"}, {"uuid": "7783daf5-1771-453d-b92e-0ca890b5549e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://thehackernews.com/2025/07/fortinet-releases-patch-for-critical.html", "content": "", "creation_timestamp": "2025-07-11T12:38:00.000000Z"}, {"uuid": "49eb925c-ee51-4269-b577-bac7a4289779", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/cwealthsentinel.bsky.social/post/3ltwhyzhbbe2d", "content": "", "creation_timestamp": "2025-07-14T13:18:15.585036Z"}, {"uuid": "de7a5083-0580-48ef-a560-9dd73e4d33a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3ltwj7eyc2k2g", "content": "", "creation_timestamp": "2025-07-14T13:39:46.469073Z"}, {"uuid": "acc20909-70f1-4669-9030-11d14729f134", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-25257", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3ltwjanwbyxv2", "content": "", "creation_timestamp": "2025-07-14T13:42:33.125318Z"}, {"uuid": "11ea647f-d7f3-44a4-aedd-f8e3ae50c565", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/114862091331390951", "content": "", "creation_timestamp": "2025-07-16T09:00:25.252170Z"}, {"uuid": "64c7d3ee-2440-4d6d-bbd9-f53214e375bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-25257", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/114836316926652089", "content": "", "creation_timestamp": "2025-07-11T19:45:38.959432Z"}, {"uuid": "8f32acd4-2226-4610-a49a-576d0239a337", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/darkwebinformer.com/post/3ltpmbl3ggk2d", "content": "", "creation_timestamp": "2025-07-11T19:45:57.680428Z"}, {"uuid": "87384399-7999-4ed7-9a4f-8275097ed1af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lu32njbsvs2l", "content": "", "creation_timestamp": "2025-07-16T09:02:35.271938Z"}, {"uuid": "ddd24265-957b-4689-ad7b-a4d61b4343a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lu32nlupas2l", "content": "", "creation_timestamp": "2025-07-16T09:02:36.362175Z"}, {"uuid": "3aed99c6-a147-42f4-9b17-44ece2f9cce0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lu32noveyt2l", "content": "", "creation_timestamp": "2025-07-16T09:02:38.493875Z"}, {"uuid": "c5fb2b78-793e-47b1-9a8c-a596a9e1830d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25021", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqpputnlxlj2", "content": "", "creation_timestamp": "2025-06-03T16:36:56.869394Z"}, {"uuid": "589d6b6f-c6cc-4266-9c9f-19f91200c869", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3ltwnh7jdy772", "content": "", "creation_timestamp": "2025-07-14T14:58:50.971136Z"}, {"uuid": "d9f4d99f-1f85-4394-91e2-ada4d2739be8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lu32noveys2l", "content": "", "creation_timestamp": "2025-07-16T09:02:37.460709Z"}, {"uuid": "be765426-d2b4-47a0-8ad7-b583531be568", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25020", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqppupyhjsj2", "content": "", "creation_timestamp": "2025-06-03T16:36:56.355017Z"}, {"uuid": "77f25bbd-56db-45d8-b5b0-145eac8ced33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3ltpmnhsf2623", "content": "", "creation_timestamp": "2025-07-11T19:52:38.406021Z"}, {"uuid": "66d53f5a-c700-4c60-b35d-a177ad5523e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25014", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3losi4ryju22c", "content": "", "creation_timestamp": "2025-05-10T08:03:44.332286Z"}, {"uuid": "6410ebe8-286c-425e-8e6c-93f0519fa595", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/rmcholewa.bsky.social/post/3ltwps2bo6j2x", "content": "", "creation_timestamp": "2025-07-14T15:37:31.079823Z"}, {"uuid": "333296b0-9fd0-480d-ba48-e39257fdca8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25022", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqppuxp5qia2", "content": "", "creation_timestamp": "2025-06-03T16:37:19.366248Z"}, {"uuid": "01895216-ac51-4c15-bbd8-f56287e92fa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25019", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqppv4uuf5p2", "content": "", "creation_timestamp": "2025-06-03T16:37:21.269446Z"}, {"uuid": "04dd1f02-8372-4e82-a770-dbf14de6e7b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3ltwwabdnik2a", "content": "", "creation_timestamp": "2025-07-14T17:32:50.859606Z"}, {"uuid": "927de3bc-a7dd-49d1-aa50-890bc05e8e16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/giovanni-popolizio.bsky.social/post/3ltwwgcvqgk2q", "content": "", "creation_timestamp": "2025-07-14T17:36:15.694907Z"}, {"uuid": "e34679d0-d7a4-4455-a895-3a42a69d9286", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3ltwxf5atxk2a", "content": "", "creation_timestamp": "2025-07-14T17:53:27.736914Z"}, {"uuid": "1aa923bb-5b70-480c-9581-d3acb1e28b42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3ltpvt6gr542p", "content": "", "creation_timestamp": "2025-07-11T22:36:53.081930Z"}, {"uuid": "e44fbc2a-a6d1-4367-af4d-acb4b06449b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25022", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqpslba27v2m", "content": "", "creation_timestamp": "2025-06-03T17:23:11.127730Z"}, {"uuid": "42cebb3c-b93a-4512-844f-5318c2252691", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25034", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ls5h7ne2wa2k", "content": "", "creation_timestamp": "2025-06-21T21:02:18.253743Z"}, {"uuid": "ddb66748-1100-49b5-9532-a34ae5d2939b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25037", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ls5h7ngo6k2u", "content": "", "creation_timestamp": "2025-06-21T21:02:18.808277Z"}, {"uuid": "ffe22b54-2d83-416b-83a0-4e2e0a476878", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25038", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ls5h7njjy22u", "content": "", "creation_timestamp": "2025-06-21T21:02:19.319483Z"}, {"uuid": "fd70c950-5190-48de-8d43-33ab4485fe4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25251", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lq7ycxkgyp2j", "content": "", "creation_timestamp": "2025-05-28T10:23:19.380649Z"}, {"uuid": "0630b02c-a93f-460a-9495-4fb04c996119", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2566", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-175-01", "content": "", "creation_timestamp": "2025-06-24T10:00:00.000000Z"}, {"uuid": "5dd37901-b63b-4486-95b1-6d7bd20ad041", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25179", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqm5rbjggjm2", "content": "", "creation_timestamp": "2025-06-02T06:32:53.742382Z"}, {"uuid": "84dd4604-96f0-4e95-8fa2-1c88b0d9e7cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-25257", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3ltq2rnfqx432", "content": "", "creation_timestamp": "2025-07-12T00:05:38.761413Z"}, {"uuid": "9abf65e1-fa65-433d-a4e2-4a7f1d83c9e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3lu3olfwlll2l", "content": "", "creation_timestamp": "2025-07-16T14:59:13.714641Z"}, {"uuid": "029c8a43-f50e-49f6-9dbd-8b20b507fc2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25179", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqmdvc6wsd2k", "content": "", "creation_timestamp": "2025-06-02T08:22:22.481809Z"}, {"uuid": "5d57e651-8daa-477f-ae1d-3dadb78922bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2588", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lp2ivqkbn22v", "content": "", "creation_timestamp": "2025-05-13T12:39:03.778451Z"}, {"uuid": "28f0f566-ff91-4e6d-89be-cc0ccb2c4ea5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25254", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-288/", "content": "", "creation_timestamp": "2025-05-13T03:00:00.000000Z"}, {"uuid": "c9e50c18-9f28-4bf3-ad8c-a654e16bf11a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ltq5rx6bg22o", "content": "", "creation_timestamp": "2025-07-12T00:59:22.929761Z"}, {"uuid": "1e7a88ef-aa3d-444b-8bb7-4b135fff7753", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3ltxcztumqo22", "content": "", "creation_timestamp": "2025-07-14T21:21:53.392449Z"}, {"uuid": "1cae4919-a256-4f04-968f-3b4a80616447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3ltxu3b6cg32j", "content": "", "creation_timestamp": "2025-07-15T02:26:54.885990Z"}, {"uuid": "37b668d2-c7ce-425b-ad76-3dfea13ba86b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25264", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114692654840452522", "content": "", "creation_timestamp": "2025-06-16T10:50:27.662002Z"}, {"uuid": "e6f0a440-49dd-4d24-b909-998b50672775", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25265", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114692654840452522", "content": "", "creation_timestamp": "2025-06-16T10:50:27.763802Z"}, {"uuid": "ead15eac-f108-48ee-8a11-a08f145c8f49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25264", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lrpsp4dfo5g2", "content": "", "creation_timestamp": "2025-06-16T10:50:39.971700Z"}, {"uuid": "8a44d9d1-6480-4c37-8b86-ab071496d65c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25265", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lrpsp4dfo5g2", "content": "", "creation_timestamp": "2025-06-16T10:50:40.070832Z"}, {"uuid": "c8a75d6b-7c4f-4908-be63-0751f621a791", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25014", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lpin34wcuk2k", "content": "", "creation_timestamp": "2025-05-19T03:30:52.647112Z"}, {"uuid": "4ddcde6d-3d1d-45c5-8031-9520f3577345", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25012", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lpin34wcuk2k", "content": "", "creation_timestamp": "2025-05-19T03:30:52.741081Z"}, {"uuid": "58475fad-a620-402b-8ddf-f7a036805b83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://threatintel.cc/2025/07/11/hour-cyber-incident-summary-incident.html", "content": "", "creation_timestamp": "2025-07-12T01:16:50.000000Z"}, {"uuid": "fbe4f3ca-15bf-4f9b-94ad-420437e2e93a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25264", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrpucqpgr42r", "content": "", "creation_timestamp": "2025-06-16T11:19:24.763214Z"}, {"uuid": "f2737044-67bb-4fa4-8d44-e49bf956fbe9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/timb-machine.infosec.exchange.ap.brid.gy/post/3ltr3yb7zqkb2", "content": "", "creation_timestamp": "2025-07-12T09:59:46.842905Z"}, {"uuid": "7551b29d-c378-41fd-ba7b-3ea28f616078", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25265", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrpw2awn6k2r", "content": "", "creation_timestamp": "2025-06-16T11:50:27.193580Z"}, {"uuid": "e4939800-2005-49ea-a4fc-ccba53688a6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25370", "type": "seen", "source": "https://gist.github.com/krl5/4eeed04a065287489c2e606e6d48c1bc", "content": "", "creation_timestamp": "2025-05-14T18:05:14.000000Z"}, {"uuid": "b38ee1eb-291e-4da4-b00f-555b48ce6999", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25370", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp63wh6o252l", "content": "", "creation_timestamp": "2025-05-14T22:57:24.140487Z"}, {"uuid": "112249fe-e08b-4399-811e-b07084b760d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25012", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lq3pae4qgr2x", "content": "", "creation_timestamp": "2025-05-26T17:30:09.556780Z"}, {"uuid": "aef073d8-b2d2-4ee3-8c53-c8319c4a6177", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2563", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lpafxtrhmp2r", "content": "", "creation_timestamp": "2025-05-15T21:02:30.026059Z"}, {"uuid": "a4fbe963-ddf6-430c-b426-8da71648e9f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/fraustief.bsky.social/post/3lu3vx5gtfk2k", "content": "", "creation_timestamp": "2025-07-16T17:11:08.068100Z"}, {"uuid": "c9addfc0-7ff6-4876-8425-d4328d54fbf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/fraustief.bsky.social/post/3lu3vx5h65c2k", "content": "", "creation_timestamp": "2025-07-16T17:11:10.570329Z"}, {"uuid": "e30ff2dd-60bf-400d-9881-c600f81cfd22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lu3xotzrdl2n", "content": "", "creation_timestamp": "2025-07-16T17:42:13.879976Z"}, {"uuid": "41e1b956-8db8-4a6f-875a-fb68781ed536", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lu4uwsqat52j", "content": "", "creation_timestamp": "2025-07-17T02:25:37.623628Z"}, {"uuid": "f7fb5976-048d-48a2-b174-b9f830590c4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25034", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-21)", "content": "", "creation_timestamp": "2025-11-21T00:00:00.000000Z"}, {"uuid": "b80b0768-1834-4c3a-8816-0dbf0e288aea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lu5ot7hx5k2a", "content": "", "creation_timestamp": "2025-07-17T10:08:54.335897Z"}, {"uuid": "6c01978b-857d-481f-9382-0d34fad86ab9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-16)", "content": "", "creation_timestamp": "2025-07-16T00:00:00.000000Z"}, {"uuid": "bbe40dba-b58d-4a9c-b4f1-91ee2d636a60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/114868143624881502", "content": "", "creation_timestamp": "2025-07-17T10:39:33.960470Z"}, {"uuid": "243921f2-d5fe-4eb7-a70a-f27ff6b70440", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://threatintel.cc/2025/07/17/new-fortinet-fortiweb-hacks-likely.html", "content": "", "creation_timestamp": "2025-07-17T08:39:42.000000Z"}, {"uuid": "6a5dd465-24e6-4601-b08d-a941a1b4314d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/114870718452786446", "content": "", "creation_timestamp": "2025-07-17T21:34:26.408078Z"}, {"uuid": "591fbc7a-b589-483f-9691-d223bbf2a958", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lu7fh475dn2h", "content": "", "creation_timestamp": "2025-07-18T02:26:24.092995Z"}, {"uuid": "93c6575e-3df7-48bc-99ef-50d6593b0823", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lu7ywzypzc2e", "content": "", "creation_timestamp": "2025-07-18T08:15:23.300725Z"}, {"uuid": "b88fb4c8-c16c-43cf-a469-a8a75b4cc286", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-25257", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-b73bbde9-751543f940567cd2", "content": "", "creation_timestamp": "2025-07-18T14:10:23.007856Z"}, {"uuid": "009eb491-bce3-40b0-af58-70607fbdd442", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3luar4hhsys2p", "content": "", "creation_timestamp": "2025-07-18T15:27:54.633214Z"}, {"uuid": "4335afd7-462b-4040-b78e-01c8a32ad27f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3luaxxarnko24", "content": "", "creation_timestamp": "2025-07-18T17:30:12.612485Z"}, {"uuid": "af670f1a-944b-4f42-ba56-5e46e4ccc88f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lub345ws4v2f", "content": "", "creation_timestamp": "2025-07-18T18:26:39.347665Z"}, {"uuid": "3341fe0d-ee50-40e2-b971-e1191541bbba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lubahja63a27", "content": "", "creation_timestamp": "2025-07-18T20:02:28.143148Z"}, {"uuid": "67aa19e8-0e4d-489d-ab52-40320cca8e5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lubvq2fulb2h", "content": "", "creation_timestamp": "2025-07-19T02:23:07.295838Z"}, {"uuid": "dd69e71e-9471-4da9-94cd-dfd3f2b59762", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/timb-machine.infosec.exchange.ap.brid.gy/post/3luclovcq6le2", "content": "", "creation_timestamp": "2025-07-19T08:56:30.770486Z"}, {"uuid": "c55bf1e1-d673-4aad-8f84-576d7ba815cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3luctz5y7vo2h", "content": "", "creation_timestamp": "2025-07-19T11:25:01.418487Z"}, {"uuid": "38ef3b51-407d-4fe3-bb5b-23d6787da64a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3ludifv7tb32f", "content": "", "creation_timestamp": "2025-07-19T17:30:07.587120Z"}, {"uuid": "4142682b-53cd-4eed-bdd0-c2198598681d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ludins7r7pm2", "content": "", "creation_timestamp": "2025-07-19T17:34:29.919749Z"}, {"uuid": "3df6d9a2-18b8-4828-ab36-40f0c1c431dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3ludkr53e5c26", "content": "", "creation_timestamp": "2025-07-19T18:12:08.567606Z"}, {"uuid": "1ca1123b-1c0c-4baa-8feb-cf719c8aaa33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-25257", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3ludkxf6q5wb2", "content": "", "creation_timestamp": "2025-07-19T18:16:20.777683Z"}, {"uuid": "f2857fca-64fa-459d-81a6-b90d00912da5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ludubgxeg52w", "content": "", "creation_timestamp": "2025-07-19T21:02:20.989594Z"}, {"uuid": "53d9ef7c-6612-4964-a032-4d48128d529d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3ludztygrvr2s", "content": "", "creation_timestamp": "2025-07-19T22:42:10.575091Z"}, {"uuid": "91d85972-5202-4984-8e76-9a941ee5d6c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3luegh7rjoz2h", "content": "", "creation_timestamp": "2025-07-20T02:27:40.120137Z"}, {"uuid": "17beaea5-7d29-4f3a-8800-5be0fb8b7a09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/dtpnews.bsky.social/post/3luekvc5l6a2l", "content": "", "creation_timestamp": "2025-07-20T03:47:07.208834Z"}, {"uuid": "d1288914-e779-4601-8e07-14adbc8be258", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/oknews.bsky.social/post/3luekvhh6vd2g", "content": "", "creation_timestamp": "2025-07-20T03:47:12.644396Z"}, {"uuid": "8f649c26-90a4-4097-93af-cb4a062d1167", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3luerbgjdrk2w", "content": "", "creation_timestamp": "2025-07-20T05:41:20.189436Z"}, {"uuid": "085d1807-9846-472d-9dc3-ebd18734bd16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3luewzov7ks2o", "content": "", "creation_timestamp": "2025-07-20T07:24:27.554770Z"}, {"uuid": "51de07c3-4fe5-43b6-9bc2-6bd04b0936d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lufm5fceoo2v", "content": "", "creation_timestamp": "2025-07-20T13:42:12.725710Z"}, {"uuid": "b40d1194-d27b-4dbd-bbf9-6973d70a2e2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lufq2fxz6e2b", "content": "", "creation_timestamp": "2025-07-20T14:52:08.192730Z"}, {"uuid": "4335b260-d388-4c92-ac2d-b1b141c1cdbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3lufquyoivj2y", "content": "", "creation_timestamp": "2025-07-20T15:07:00.098232Z"}, {"uuid": "1cce6b1c-7f63-46b1-98ed-d8e1295755bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3lufywt3giq2q", "content": "", "creation_timestamp": "2025-07-20T17:31:10.685172Z"}, {"uuid": "98a5bc27-3944-4ff7-a74f-a9f19611d49c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lugp557oz22a", "content": "", "creation_timestamp": "2025-07-21T00:08:25.454144Z"}, {"uuid": "608c8035-c0a6-470c-aa12-faec3e5eb0d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lugpfszss72n", "content": "", "creation_timestamp": "2025-07-21T00:13:16.951437Z"}, {"uuid": "131c44c0-a409-465b-9351-a0d903515f46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-25257", "type": "seen", "source": "https://infosec.exchange/users/threatcodex/statuses/114891437684107982", "content": "", "creation_timestamp": "2025-07-21T13:23:33.144416Z"}, {"uuid": "a850ffb8-3b60-4bcd-8736-79dff68ab8d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25270", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-623/", "content": "", "creation_timestamp": "2025-07-21T03:00:00.000000Z"}, {"uuid": "ba0b924d-64fb-457e-9e42-e177b6633132", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25268", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-622/", "content": "", "creation_timestamp": "2025-07-21T03:00:00.000000Z"}, {"uuid": "8863eceb-458f-42a2-9cc3-532468f1689e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25269", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-621/", "content": "", "creation_timestamp": "2025-07-21T03:00:00.000000Z"}, {"uuid": "96ff4a02-cc54-4bfc-828b-9099741041db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3luiw44hdnc2x", "content": "", "creation_timestamp": "2025-07-21T21:18:31.085141Z"}, {"uuid": "db3dd246-6156-4683-9786-b3224271c5f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3luiwcztc622x", "content": "", "creation_timestamp": "2025-07-21T21:22:19.238999Z"}, {"uuid": "dbe56bc3-3f19-48b4-86d4-bc861529c3e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3luiyowvxyd2e", "content": "", "creation_timestamp": "2025-07-21T22:04:45.318481Z"}, {"uuid": "0353208d-0b07-4491-ad6c-f81e8b5231d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3lujqtosgfk2z", "content": "", "creation_timestamp": "2025-07-22T05:16:59.642982Z"}, {"uuid": "76f0af3f-2c97-46cc-bb7c-0b3325b702dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-25257", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lujxq3jetd2n", "content": "", "creation_timestamp": "2025-07-22T07:20:09.844149Z"}, {"uuid": "f090cea4-16d1-4611-875b-f995b631e279", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25271", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-628/", "content": "", "creation_timestamp": "2025-07-22T03:00:00.000000Z"}, {"uuid": "8c0d2544-ac37-4d4c-8c94-36ca89b27e95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25012", "type": "seen", "source": "https://bsky.app/profile/yu5k3.bsky.social/post/3lumqwxe5rk2c", "content": "", "creation_timestamp": "2025-07-23T09:56:43.307510Z"}, {"uuid": "10665259-e776-49b2-b532-30d8ec014db9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25012", "type": "seen", "source": "https://bsky.app/profile/yu5k3.bsky.social/post/3lumqwxedn22c", "content": "", "creation_timestamp": "2025-07-23T09:56:43.946671Z"}, {"uuid": "ae4528b9-03cc-46be-927b-aa0ce8091b24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25012", "type": "seen", "source": "https://bsky.app/profile/yu5k3.bsky.social/post/3lumqwxeemc2c", "content": "", "creation_timestamp": "2025-07-23T09:56:44.574791Z"}, {"uuid": "ee42fb1a-f404-4f77-9d5b-93ff637cb591", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25012", "type": "seen", "source": "https://bsky.app/profile/yu5k3.bsky.social/post/3lumqwxvw522c", "content": "", "creation_timestamp": "2025-07-23T09:56:45.231795Z"}, {"uuid": "c52ce2e2-2e44-46c3-a76f-547038323093", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2563", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "2c3190cf-45b1-4d9e-a459-6dd6f1af9f3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/jhuntinfosec.com/post/3lundj7qstk2z", "content": "", "creation_timestamp": "2025-07-23T15:29:07.008935Z"}, {"uuid": "6c5c3958-f3ed-4575-9d40-d0c05b7e3222", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lunsja44s22e", "content": "", "creation_timestamp": "2025-07-23T19:57:31.430418Z"}, {"uuid": "1ac93485-f301-4a17-9775-bf61e0389342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lunsmlvojs2e", "content": "", "creation_timestamp": "2025-07-23T19:59:25.779383Z"}, {"uuid": "e9255289-70c6-45c7-9cd0-218f3449b6b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lunw6z4ogc26", "content": "", "creation_timestamp": "2025-07-23T21:03:23.999152Z"}, {"uuid": "cfd86b7e-018b-4eab-92cf-9f9c328f5181", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/cesnet-certs.mastodonczech.cz.ap.brid.gy/post/3luoxt6ra2a62", "content": "", "creation_timestamp": "2025-07-24T07:06:30.879071Z"}, {"uuid": "b25dc957-a70e-49af-b12c-710443525227", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25214", "type": "seen", "source": "https://infosec.place/objects/0a60d725-4b8d-4f82-922c-b7df4d82b0d7", "content": "", "creation_timestamp": "2025-07-24T15:30:34.505724Z"}, {"uuid": "39293c90-fbb2-45fa-aec3-ae50ddae2af3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2523", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lupvxrav4i24", "content": "", "creation_timestamp": "2025-07-24T16:04:38.375543Z"}, {"uuid": "aca56797-7434-48c6-aa98-2509d55142e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2521", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lupvxrav4i24", "content": "", "creation_timestamp": "2025-07-24T16:04:38.479318Z"}, {"uuid": "3770318b-0719-4d58-9028-5a4cd9c3cccb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2520", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-205-03", "content": "", "creation_timestamp": "2025-07-24T10:00:00.000000Z"}, {"uuid": "5eea58af-a4b2-4994-b138-5c8dc6a52c8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2521", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-205-03", "content": "", "creation_timestamp": "2025-07-24T10:00:00.000000Z"}, {"uuid": "0e62dd70-f573-42ad-9715-7d7471a3e21a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2522", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-205-03", "content": "", "creation_timestamp": "2025-07-24T10:00:00.000000Z"}, {"uuid": "949aad81-bc03-4626-aedf-4f453fecc259", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2523", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-205-03", "content": "", "creation_timestamp": "2025-07-24T10:00:00.000000Z"}, {"uuid": "39ec7da4-f420-41f2-863c-6173b8a55859", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-24)", "content": "", "creation_timestamp": "2025-07-24T00:00:00.000000Z"}, {"uuid": "5ed6351c-586b-4f99-bac0-5dc11779d4dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25009", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3m2pymobvns2f", "content": "", "creation_timestamp": "2025-10-09T01:23:24.288599Z"}, {"uuid": "0be87849-8384-4a22-a19a-3e2284f440a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25034", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "df3f9888-45ab-4f74-9a06-957a624724f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2596", "type": "seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "content": "", "creation_timestamp": "2025-09-10T07:48:01.000000Z"}, {"uuid": "f44495b3-d6c2-4fdd-a158-13d120a329d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25226", "type": "seen", "source": "MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea", "content": "", "creation_timestamp": "2025-09-10T07:00:37.000000Z"}, {"uuid": "ae57d471-2edd-4d57-a4c9-91e604ade71f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25742", "type": "seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "content": "", "creation_timestamp": "2025-09-10T07:48:01.000000Z"}, {"uuid": "3c5f5559-6b70-447f-a92b-a756d483d8df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25211", "type": "seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "content": "", "creation_timestamp": "2025-09-10T07:47:57.000000Z"}, {"uuid": "56fc2ca7-9774-4336-9740-2caa3e4d7588", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2537", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lv4tuti2lk2u", "content": "", "creation_timestamp": "2025-07-29T19:31:51.320544Z"}, {"uuid": "0dbc2038-048e-4051-8d0d-26b766748247", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-25011", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3lv6b4hzbyo2h", "content": "", "creation_timestamp": "2025-07-30T09:01:24.437503Z"}, {"uuid": "0fff2dd1-6b8b-4e48-99b4-34135c8c14ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3m2ag6aagwo2m", "content": "", "creation_timestamp": "2025-10-02T20:43:09.086107Z"}, {"uuid": "7e74e00e-b1f8-4e61-a76a-6df630bb5d44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3m2ag6klpeg22", "content": "", "creation_timestamp": "2025-10-02T20:43:21.238926Z"}, {"uuid": "faf5e675-77a2-42a3-95d1-a22d28db3eee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25691", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lv7isqjuo52e", "content": "", "creation_timestamp": "2025-07-30T20:51:47.045408Z"}, {"uuid": "4b79e37f-f73f-467e-8962-a8d21ee8a90a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25692", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lv7k7nmyhz2c", "content": "", "creation_timestamp": "2025-07-30T21:16:53.842219Z"}, {"uuid": "d44eafc2-db02-4071-b610-d198371d3828", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lvaw6maym226", "content": "", "creation_timestamp": "2025-07-31T10:23:46.838105Z"}, {"uuid": "b6519628-ab15-4311-9d05-0eb32f213cba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lvaw6oovrc26", "content": "", "creation_timestamp": "2025-07-31T10:23:47.398970Z"}, {"uuid": "5d9c9a47-ac95-4a89-9db9-6909f829db34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lvaw6oowqk26", "content": "", "creation_timestamp": "2025-07-31T10:23:47.966930Z"}, {"uuid": "83a4a6e3-446b-422a-846a-29c540f40c88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lvaw6oowql26", "content": "", "creation_timestamp": "2025-07-31T10:23:48.525710Z"}, {"uuid": "89686752-d895-407a-a8c4-e826d5407371", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lvcm2ss66g2p", "content": "", "creation_timestamp": "2025-08-01T02:27:58.892558Z"}, {"uuid": "fc8a75a3-3d13-4d52-974c-4bfdec99f8fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25034", "type": "seen", "source": "https://gist.github.com/nguyentin1136-ops/f5bea0e7ad800547c3e9b5e241e2d65c", "content": "", "creation_timestamp": "2025-10-20T04:01:23.000000Z"}, {"uuid": "714a181d-13cc-47c9-8636-7271999fa9ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25034", "type": "seen", "source": "https://gist.github.com/nguyentin1136-ops/937b4359948bbce2e6e7cefbf97e8766", "content": "", "creation_timestamp": "2025-10-20T05:01:51.000000Z"}, {"uuid": "a565bd79-3853-4e68-bcce-749d646498c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25231", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lyqofa5ivo23", "content": "", "creation_timestamp": "2025-09-13T21:02:28.282168Z"}, {"uuid": "f31c153f-a8b4-45d9-a256-3f6bd6b53855", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-25257", "type": "seen", "source": "https://bsky.app/profile/raptor.infosec.exchange.ap.brid.gy/post/3lvlj6lmwp5p2", "content": "", "creation_timestamp": "2025-08-04T15:30:31.297425Z"}, {"uuid": "e6e3060e-d6a2-41a4-aaf5-35b43a5b914f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25763", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lvm3qg37322f", "content": "", "creation_timestamp": "2025-08-04T21:02:27.488815Z"}, {"uuid": "4a999588-f273-442b-9674-adb92b1d4b7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lvom74fqkc2b", "content": "", "creation_timestamp": "2025-08-05T21:02:23.898168Z"}, {"uuid": "eaae3f94-d7c9-4ef6-91a3-14b2463c6edc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25215", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/114981965253717952", "content": "", "creation_timestamp": "2025-08-06T13:05:54.332579Z"}, {"uuid": "bacf5310-c95b-48bd-8807-be9fce997fdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25050", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/114981965253717952", "content": "", "creation_timestamp": "2025-08-06T13:05:54.551794Z"}, {"uuid": "f3f95a84-10cc-4c7b-83b7-0cc011565169", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25215", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3lvqc2cznqk2q", "content": "", "creation_timestamp": "2025-08-06T13:06:02.334614Z"}, {"uuid": "2d6ee341-cc84-4963-b3b4-dcb719c967e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25050", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3lvqc2cznqk2q", "content": "", "creation_timestamp": "2025-08-06T13:06:02.567292Z"}, {"uuid": "bb91f884-6cbb-4d42-8541-4bff8d92ba57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-31)", "content": "", "creation_timestamp": "2025-10-31T00:00:00.000000Z"}, {"uuid": "a4768bc4-5a87-43ec-9f55-3516a09cfc15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-09-28T08:23:31.000000Z"}, {"uuid": "3fe4d7de-a516-439a-841d-a513a437c697", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/mds52.bsky.social/post/3lyiiumkvqv2j", "content": "", "creation_timestamp": "2025-09-10T15:02:23.213268Z"}, {"uuid": "196ca834-bb18-467c-9e6d-567cacc8ab46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25215", "type": "seen", "source": "https://infosec.place/objects/f39ab97e-ab86-4ed0-b818-5489d7fe348f", "content": "", "creation_timestamp": "2025-08-09T13:00:14.091794Z"}, {"uuid": "9a02a062-0ae9-4d3c-b563-93db474dcd55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25050", "type": "seen", "source": "https://infosec.place/objects/99935ba6-150e-4233-83bb-a2b05db4d2a5", "content": "", "creation_timestamp": "2025-08-09T13:00:25.294420Z"}, {"uuid": "a3b3776a-484a-4102-94bb-80d232b8d063", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2517", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-09T13:26:56.000000Z"}, {"uuid": "b1aecf02-a4bd-435f-8265-884416d3969b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25983", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-09T13:26:56.000000Z"}, {"uuid": "90528e01-9dd2-49c9-8f8c-67ea19d438ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25985", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-09T13:26:56.000000Z"}, {"uuid": "77a7fc29-7abd-4e27-8e0d-e24e7970d842", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25226", "type": "seen", "source": "MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea", "content": "", "creation_timestamp": "2025-08-09T17:25:37.000000Z"}, {"uuid": "db9470ed-7970-4a99-821c-6357b46fa574", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-09-29T03:12:16.000000Z"}, {"uuid": "977daa4c-f6c0-461e-8d63-10b05b3c67ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25004", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0310", "content": "", "creation_timestamp": "2025-10-24T06:24:42.000000Z"}, {"uuid": "f54f74ff-7cd7-4d42-8461-9892b9e5ecdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2502", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lyblllmkaz22", "content": "", "creation_timestamp": "2025-09-07T21:02:23.246338Z"}, {"uuid": "312e02dd-3bae-4718-b270-5c44dcfea6e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25211", "type": "seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "content": "", "creation_timestamp": "2025-08-10T18:27:44.000000Z"}, {"uuid": "9731294e-0900-42f5-bf81-c1d22ca107fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2596", "type": "seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "content": "", "creation_timestamp": "2025-08-10T18:27:45.000000Z"}, {"uuid": "0d74cb71-acef-4619-94e1-1b241b671a74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25742", "type": "seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "content": "", "creation_timestamp": "2025-08-10T18:27:45.000000Z"}, {"uuid": "c5f93177-4d40-457d-88e7-34197694c801", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25278", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3lw3ulrhhhk25", "content": "", "creation_timestamp": "2025-08-11T03:37:10.716740Z"}, {"uuid": "bfcdb42d-42e7-4da3-a965-4e6058f438d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25278", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lw444mdqmp2e", "content": "", "creation_timestamp": "2025-08-11T05:51:52.124367Z"}, {"uuid": "7eda7947-4a3c-4ac4-8f56-ba001c96774f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25004", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0310", "content": "", "creation_timestamp": "2025-10-14T16:03:45.000000Z"}, {"uuid": "1ca85d49-6b0c-465c-b187-249980c623a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2517", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-11T18:47:37.000000Z"}, {"uuid": "040bdcc0-d5ed-4ece-b89e-e80ae395fa96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25983", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-11T18:47:39.000000Z"}, {"uuid": "7af1953b-1436-4fa9-9399-8d1e2f34d5e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25985", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-11T18:47:39.000000Z"}, {"uuid": "ea8554a3-4409-44b7-aacd-89236acaa121", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25036", "type": "seen", "source": "MISP/3e4b778d-5810-4171-a915-f1d106684af4", "content": "", "creation_timestamp": "2025-08-11T18:27:48.000000Z"}, {"uuid": "dfb76660-2db0-4ab6-b531-c86d02eae6c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2589", "type": "seen", "source": "MISP/3e4b778d-5810-4171-a915-f1d106684af4", "content": "", "creation_timestamp": "2025-08-11T18:27:49.000000Z"}, {"uuid": "e4877f22-574c-42d2-b656-26037ffe4f16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2590", "type": "seen", "source": "MISP/3e4b778d-5810-4171-a915-f1d106684af4", "content": "", "creation_timestamp": "2025-08-11T18:27:49.000000Z"}, {"uuid": "5c04bf95-4383-4a80-8aa4-d856ab986e37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2591", "type": "seen", "source": "MISP/3e4b778d-5810-4171-a915-f1d106684af4", "content": "", "creation_timestamp": "2025-08-11T18:27:49.000000Z"}, {"uuid": "04a4bfae-481f-416b-bdbe-6d32ca5b05df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25068", "type": "seen", "source": "MISP/3e4b778d-5810-4171-a915-f1d106684af4", "content": "", "creation_timestamp": "2025-08-11T18:27:49.000000Z"}, {"uuid": "1f43c304-442d-44ca-b410-1171f7976a1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25373", "type": "seen", "source": "MISP/3e4b778d-5810-4171-a915-f1d106684af4", "content": "", "creation_timestamp": "2025-08-11T18:27:48.000000Z"}, {"uuid": "f194fdec-af68-4f91-8856-624901c14145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2559", "type": "seen", "source": "MISP/3e4b778d-5810-4171-a915-f1d106684af4", "content": "", "creation_timestamp": "2025-08-11T18:27:48.000000Z"}, {"uuid": "0878b4c6-429c-44fa-b8df-db3bce1cd2dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2538", "type": "seen", "source": "MISP/3e4b778d-5810-4171-a915-f1d106684af4", "content": "", "creation_timestamp": "2025-08-11T18:27:49.000000Z"}, {"uuid": "a4b1f6fb-3286-42c7-a710-9782cd8d41ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2592", "type": "seen", "source": "MISP/3e4b778d-5810-4171-a915-f1d106684af4", "content": "", "creation_timestamp": "2025-08-11T18:27:48.000000Z"}, {"uuid": "4366f2b7-cc88-4956-ae37-e365e7d1d53f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25035", "type": "seen", "source": "MISP/3e4b778d-5810-4171-a915-f1d106684af4", "content": "", "creation_timestamp": "2025-08-11T18:27:49.000000Z"}, {"uuid": "28cd4332-5850-4dd2-9d9f-8e41d86730a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2598", "type": "seen", "source": "MISP/3e4b778d-5810-4171-a915-f1d106684af4", "content": "", "creation_timestamp": "2025-08-11T18:27:49.000000Z"}, {"uuid": "b0e7ffaa-6e5f-45f6-bd73-95fef7eb162e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2593", "type": "seen", "source": "MISP/3e4b778d-5810-4171-a915-f1d106684af4", "content": "", "creation_timestamp": "2025-08-11T18:27:49.000000Z"}, {"uuid": "e9b74dda-bd6e-4033-a56c-5424a7856202", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2587", "type": "seen", "source": "MISP/3e4b778d-5810-4171-a915-f1d106684af4", "content": "", "creation_timestamp": "2025-08-11T18:27:49.000000Z"}, {"uuid": "daabc1c7-2d58-4a96-97dd-30a9537bded0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2588", "type": "seen", "source": "MISP/3e4b778d-5810-4171-a915-f1d106684af4", "content": "", "creation_timestamp": "2025-08-11T18:27:49.000000Z"}, {"uuid": "78b65beb-6af3-43db-a45c-e5e7826b7ad0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2505", "type": "seen", "source": "MISP/3e4b778d-5810-4171-a915-f1d106684af4", "content": "", "creation_timestamp": "2025-08-11T18:27:49.000000Z"}, {"uuid": "7188900f-78c6-4ba2-8e92-bd0e4b6ab4bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2555", "type": "seen", "source": "MISP/3e4b778d-5810-4171-a915-f1d106684af4", "content": "", "creation_timestamp": "2025-08-11T18:27:49.000000Z"}, {"uuid": "be2bc8aa-8f24-44cd-b0a9-516a10351a83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25235", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lw62rsuh7c2z", "content": "", "creation_timestamp": "2025-08-12T00:33:15.368722Z"}, {"uuid": "dd5f6af2-66bb-4a2e-b0e0-cb224af3d574", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2539", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m36mtr6nhw2g", "content": "", "creation_timestamp": "2025-10-14T21:02:30.972424Z"}, {"uuid": "1eef99fe-4904-4763-a8dc-4f2846e8d6a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-11)", "content": "", "creation_timestamp": "2025-08-11T00:00:00.000000Z"}, {"uuid": "c694a052-8a00-4b0a-823c-0a54c55529a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25177", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lzgpdnsdwf2j", "content": "", "creation_timestamp": "2025-09-22T15:18:01.792106Z"}, {"uuid": "0ed2034e-1e47-42b4-80b7-0d1861e7fc09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25580", "type": "seen", "source": "MISP/02fb130c-7874-4693-9b66-81ed91a2e996", "content": "", "creation_timestamp": "2025-08-12T13:33:28.000000Z"}, {"uuid": "65c1a276-bd87-4aa5-9ce5-ded03f6d7bc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25004", "type": "seen", "source": "https://www.thezdi.com/blog/2025/10/14/the-october-2025-security-update-review", "content": "", "creation_timestamp": "2025-10-14T16:38:44.000000Z"}, {"uuid": "8a176ebc-5ff0-4013-9712-7e39bde60f69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25220", "type": "seen", "source": "MISP/02fb130c-7874-4693-9b66-81ed91a2e996", "content": "", "creation_timestamp": "2025-08-12T13:33:28.000000Z"}, {"uuid": "ddb2e56f-6e07-4724-ae5a-b25a2e0a2501", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25618", "type": "seen", "source": "MISP/02fb130c-7874-4693-9b66-81ed91a2e996", "content": "", "creation_timestamp": "2025-08-12T13:33:28.000000Z"}, {"uuid": "65543efe-1689-4537-8923-f8fdee991f4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25004", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0313", "content": "", "creation_timestamp": "2025-10-14T16:21:47.000000Z"}, {"uuid": "ecab779b-32ea-458f-af02-95acec5469ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25914", "type": "seen", "source": "MISP/02fb130c-7874-4693-9b66-81ed91a2e996", "content": "", "creation_timestamp": "2025-08-12T13:33:28.000000Z"}, {"uuid": "078d136d-2132-4fef-badb-82eec34607f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25506", "type": "seen", "source": "https://www.thezdi.com/blog/2025/8/12/the-august-2025-security-update-review", "content": "", "creation_timestamp": "2025-08-12T16:01:32.000000Z"}, {"uuid": "d9b7cc70-c5ef-42f5-95c6-b986e616b729", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25006", "type": "seen", "source": "https://www.thezdi.com/blog/2025/8/12/the-august-2025-security-update-review", "content": "", "creation_timestamp": "2025-08-12T16:01:32.000000Z"}, {"uuid": "b02bbb63-8ec2-402d-a0f2-38b5bb34ed00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25507", "type": "seen", "source": "https://www.thezdi.com/blog/2025/8/12/the-august-2025-security-update-review", "content": "", "creation_timestamp": "2025-08-12T16:01:32.000000Z"}, {"uuid": "f0cd2d54-fb35-4b65-bd62-c1eb3673ab1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25007", "type": "seen", "source": "https://www.thezdi.com/blog/2025/8/12/the-august-2025-security-update-review", "content": "", "creation_timestamp": "2025-08-12T16:01:32.000000Z"}, {"uuid": "4a4aff5c-1792-4c0f-865c-52a9ebced3f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25505", "type": "seen", "source": "https://www.thezdi.com/blog/2025/8/12/the-august-2025-security-update-review", "content": "", "creation_timestamp": "2025-08-12T16:01:32.000000Z"}, {"uuid": "ab444c2f-8f7b-47d5-b896-96d12a440b08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25005", "type": "seen", "source": "https://www.thezdi.com/blog/2025/8/12/the-august-2025-security-update-review", "content": "", "creation_timestamp": "2025-08-12T16:01:32.000000Z"}, {"uuid": "bcb19961-427d-4df6-bb34-3ac647747634", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lwad7wigwz2e", "content": "", "creation_timestamp": "2025-08-12T22:09:38.279375Z"}, {"uuid": "03595be4-6cf9-490d-b3b3-94de7578845b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-25256", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3lwaylcn5kx2d", "content": "", "creation_timestamp": "2025-08-13T04:31:49.550430Z"}, {"uuid": "c0809732-8bd8-4759-a671-6b89bfd8f62d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lwb4x37xb42g", "content": "", "creation_timestamp": "2025-08-13T05:49:58.564920Z"}, {"uuid": "b87c9113-9937-4ec3-babd-794381f376ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3lwbkd7yza22r", "content": "", "creation_timestamp": "2025-08-13T09:49:29.504396Z"}, {"uuid": "d5dafa11-9822-432b-b37d-7f76ffea81d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-250075", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0252", "content": "", "creation_timestamp": "2025-08-13T05:29:24.000000Z"}, {"uuid": "0495ce83-e40d-4c89-bc9f-d30798f6d1d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-250065", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0252", "content": "", "creation_timestamp": "2025-08-13T05:29:24.000000Z"}, {"uuid": "8400af2c-3a31-4116-9780-c57de60acdde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-250056", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0252", "content": "", "creation_timestamp": "2025-08-13T05:29:24.000000Z"}, {"uuid": "c9c983d4-c700-43db-8332-5eac33cd8a2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lwblihx25k2m", "content": "", "creation_timestamp": "2025-08-13T10:10:17.435811Z"}, {"uuid": "d1996f03-4db0-4e53-91b1-86dd6d252fe1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-25256", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lwblsutmy232", "content": "", "creation_timestamp": "2025-08-13T10:16:19.081016Z"}, {"uuid": "b4ba4bbc-4b01-4fc8-89e0-1ec341154c5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lwbrw4alqf2d", "content": "", "creation_timestamp": "2025-08-13T12:05:14.934366Z"}, {"uuid": "d77b0a3b-1a87-444b-bb68-b48563e16974", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/infosecindustry.bsky.social/post/3lwbs2lsz7x2y", "content": "", "creation_timestamp": "2025-08-13T12:07:45.848617Z"}, {"uuid": "9b3378af-c4a2-4537-b0dc-23ce3f505dff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lwbsb4ocms2z", "content": "", "creation_timestamp": "2025-08-13T12:11:24.213181Z"}, {"uuid": "22dc5a2d-1a3a-45c5-998e-b66c9f307a91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lwbsib4wm6c2", "content": "", "creation_timestamp": "2025-08-13T12:15:48.226517Z"}, {"uuid": "7c144e2e-c083-430a-8bca-0f4b7b71a689", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lwbsig2fisz2", "content": "", "creation_timestamp": "2025-08-13T12:15:48.985280Z"}, {"uuid": "907e4e75-174c-4810-bc5d-36d429da818f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lwbssx2lqe2m", "content": "", "creation_timestamp": "2025-08-13T12:21:23.297198Z"}, {"uuid": "7707315f-e483-4535-a26a-f4a48babb3a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lwbt2e57pya2", "content": "", "creation_timestamp": "2025-08-13T12:27:16.494466Z"}, {"uuid": "864173ea-5b9c-48b7-b3f9-dbf88cf7ab26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lwbtm4bfzh2z", "content": "", "creation_timestamp": "2025-08-13T12:35:27.457484Z"}, {"uuid": "5bbd7d74-ecb4-456f-81e4-2998b31a1d6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/techit.bsky.social/post/3lwbuy5lv6f23", "content": "", "creation_timestamp": "2025-08-13T13:00:06.034397Z"}, {"uuid": "27db67d5-f155-44fa-bfae-d4c821a657b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://thehackernews.com/2025/08/fortinet-warns-about-fortisiem.html", "content": "", "creation_timestamp": "2025-08-13T09:37:00.000000Z"}, {"uuid": "590bac99-eba9-479b-bdd2-a506858d546a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lwbvbixsebz2", "content": "", "creation_timestamp": "2025-08-13T13:05:31.500497Z"}, {"uuid": "2e92ad91-9095-4e0e-8a26-f95fb3a34dab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25293", "type": "seen", "source": "MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868", "content": "", "creation_timestamp": "2025-08-13T13:26:34.000000Z"}, {"uuid": "fb3ffc06-4494-4d4c-973e-53b3405b29be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25975", "type": "seen", "source": "MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868", "content": "", "creation_timestamp": "2025-08-13T13:26:34.000000Z"}, {"uuid": "0a46ca3d-bebd-4e94-a9e6-71f9d7d9dba1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25568", "type": "seen", "source": "MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868", "content": "", "creation_timestamp": "2025-08-13T13:26:34.000000Z"}, {"uuid": "b4bca4e4-4c55-441f-86d5-d74c16441b57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25683", "type": "seen", "source": "MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868", "content": "", "creation_timestamp": "2025-08-13T13:26:34.000000Z"}, {"uuid": "e804b228-988e-4505-9a5d-fad441024111", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25034", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-11)", "content": "", "creation_timestamp": "2025-11-11T00:00:00.000000Z"}, {"uuid": "4ab3025a-80b6-43a0-bec6-8c832621a350", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25267", "type": "seen", "source": "MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868", "content": "", "creation_timestamp": "2025-08-13T13:26:35.000000Z"}, {"uuid": "428587f5-833b-46a5-9618-79b9ba197151", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25747", "type": "seen", "source": "MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868", "content": "", "creation_timestamp": "2025-08-13T13:26:34.000000Z"}, {"uuid": "80b9ddb7-11fc-48ac-8e6c-a593a43cfba8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/brianhaddock.bsky.social/post/3lwcbhgyg262r", "content": "", "creation_timestamp": "2025-08-13T16:43:23.423894Z"}, {"uuid": "cd17a3b6-7c62-4fc3-8bd2-80ee209b395b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lwciluythk2v", "content": "", "creation_timestamp": "2025-08-13T18:51:08.311812Z"}, {"uuid": "f3f4c759-17e5-4657-9c41-d3a690c9213c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-25256", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lwciuli5qcp2", "content": "", "creation_timestamp": "2025-08-13T18:58:06.658156Z"}, {"uuid": "108f4adf-5c14-476a-acb7-5fc2c00a9234", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lwcj7i2erf2o", "content": "", "creation_timestamp": "2025-08-13T19:02:06.226667Z"}, {"uuid": "ebdc5ac0-0235-4376-aed7-0049ac6bb655", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3lwclu27m4i2f", "content": "", "creation_timestamp": "2025-08-13T19:49:23.016514Z"}, {"uuid": "1152930b-34cf-4db6-908d-f32227a1ff79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-25256", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/115023349915819266", "content": "", "creation_timestamp": "2025-08-13T20:30:34.335155Z"}, {"uuid": "ad337020-abc1-4a30-862f-b3fa732143a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/darkwebinformer.com/post/3lwco5v6nq22e", "content": "", "creation_timestamp": "2025-08-13T20:30:39.779357Z"}, {"uuid": "38f9f038-676e-42f6-8c9b-de39ae12e070", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3lwcornt4342u", "content": "", "creation_timestamp": "2025-08-13T20:41:44.568527Z"}, {"uuid": "c335f0f4-118f-4dd9-8d0d-fc87bc08bd22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25235", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lwcp6krfg22b", "content": "", "creation_timestamp": "2025-08-13T20:48:57.492728Z"}, {"uuid": "c51942a2-c277-4d4e-ae59-c53d0597ee15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lwcprlanik2b", "content": "", "creation_timestamp": "2025-08-13T20:59:35.334036Z"}, {"uuid": "f813dc75-33ad-4366-b2f3-44232aebec17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3lwcq32rvye2y", "content": "", "creation_timestamp": "2025-08-13T21:04:53.277927Z"}, {"uuid": "d96876be-4750-4aa7-867b-331432ec0c6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/newsnexttech.bsky.social/post/3lwcsfz7rwo2p", "content": "", "creation_timestamp": "2025-08-13T21:46:48.211673Z"}, {"uuid": "f351c567-24d5-4ac2-b24b-fe9d3f491aa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/monikawalker.bsky.social/post/3lwcsh432ep2r", "content": "", "creation_timestamp": "2025-08-13T21:47:24.671672Z"}, {"uuid": "c25e26fd-478d-4a6d-94b6-d9a4bc09eda1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/nextbusiness24.bsky.social/post/3lwcsotamss2v", "content": "", "creation_timestamp": "2025-08-13T21:51:43.941548Z"}, {"uuid": "08c34c28-2c5c-4be9-bceb-9f32d526ed7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/monikawalker.bsky.social/post/3lwcsowm56l2p", "content": "", "creation_timestamp": "2025-08-13T21:51:47.428337Z"}, {"uuid": "e15b7d3f-a38b-49ea-965e-fd86d42c871d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-25256", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lwcxekw6d462", "content": "", "creation_timestamp": "2025-08-13T23:15:36.048666Z"}, {"uuid": "5f6f0ea5-ab9a-4b1e-bef4-64f8bf037b00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3lwd7ftjvrk25", "content": "", "creation_timestamp": "2025-08-14T01:39:23.232424Z"}, {"uuid": "de27e5e9-8263-4ac2-bf58-50e072ddb6ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3lwde6kpljf2b", "content": "", "creation_timestamp": "2025-08-14T03:04:45.693037Z"}, {"uuid": "3cf1a868-3d75-41f0-8211-665e59413a88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lwdmqoytps2s", "content": "", "creation_timestamp": "2025-08-14T05:38:04.546838Z"}, {"uuid": "f7a1970f-56c5-4db6-a4b0-ff0ff23fcbc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-25256", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lwdp3w2f4g2q", "content": "", "creation_timestamp": "2025-08-14T06:20:08.373703Z"}, {"uuid": "fb5b9a3f-0f8b-4626-8fc9-baf12f31dd17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lwdrufsty4e2", "content": "", "creation_timestamp": "2025-08-14T07:11:52.807553Z"}, {"uuid": "d33fbd96-2588-453a-8501-9413b4402ee9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lwdvogkkqk2d", "content": "", "creation_timestamp": "2025-08-14T08:17:51.872442Z"}, {"uuid": "f9122315-75af-4c90-b380-b295b8e5b384", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lwdzmqudmkh2", "content": "", "creation_timestamp": "2025-08-14T09:32:00.449044Z"}, {"uuid": "b855eac2-d63f-4492-b55c-c090c2ffc029", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lwe36szv6w2k", "content": "", "creation_timestamp": "2025-08-14T09:56:31.009825Z"}, {"uuid": "dab4a77c-4400-4a95-a2e6-849d9700b301", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25198", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m3dnrmmehl2j", "content": "", "creation_timestamp": "2025-10-16T21:02:46.105308Z"}, {"uuid": "6005cfc2-c279-46f7-bb9d-d14dc372c527", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-11)", "content": "", "creation_timestamp": "2025-11-11T00:00:00.000000Z"}, {"uuid": "e92eb41f-927b-4a30-88be-b189633a257d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lwe76hs23s2d", "content": "", "creation_timestamp": "2025-08-14T11:07:53.625634Z"}, {"uuid": "035d35ea-9a46-4741-8255-bdb267344de9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-25256", "type": "seen", "source": "https://infosec.exchange/users/threatcodex/statuses/115026998291371485", "content": "", "creation_timestamp": "2025-08-14T11:58:24.436691Z"}, {"uuid": "61b0c519-8e7d-4062-affa-c8a7bae49885", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-2525", "type": "seen", "source": "https://infosec.exchange/users/threatcodex/statuses/115026998291371485", "content": "", "creation_timestamp": "2025-08-14T11:58:24.563988Z"}, {"uuid": "34216610-8a65-46a6-a75b-9bd2d9d6ddef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "seen", "source": "https://bsky.app/profile/twypsy.bsky.social/post/3lwekcqoks22m", "content": "", "creation_timestamp": "2025-08-14T14:27:09.471959Z"}, {"uuid": "c91c50f4-9c4d-4a80-8c05-75805778c49c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/commsecirl.bsky.social/post/3lwem7t427l2q", "content": "", "creation_timestamp": "2025-08-14T15:01:18.378972Z"}, {"uuid": "61df9a55-11f7-4357-919a-5cdb3e6dbef3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lwf7iwbv6c2d", "content": "", "creation_timestamp": "2025-08-14T20:46:24.151911Z"}, {"uuid": "2129d7f8-127f-41b5-aab8-13ac0a2ec02c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lwfa3rxuxc2d", "content": "", "creation_timestamp": "2025-08-14T20:56:57.746439Z"}, {"uuid": "ccc1e06b-f825-49c7-87e0-b856ec0a2856", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25231", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lwfafkt5jy2m", "content": "", "creation_timestamp": "2025-08-14T21:02:28.497008Z"}, {"uuid": "5378ca2b-6a6c-4ced-aa0d-c7c2eb96a812", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lwfafkwczj25", "content": "", "creation_timestamp": "2025-08-14T21:02:28.954304Z"}, {"uuid": "e71a7488-3c43-4525-9311-8a9eb927bd3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-05)", "content": "", "creation_timestamp": "2025-10-05T00:00:00.000000Z"}, {"uuid": "ee0dba37-0e4c-4664-aa8c-e23d13eed757", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lwhbk73t5q22", "content": "", "creation_timestamp": "2025-08-15T16:28:14.884040Z"}, {"uuid": "7ca9925a-455a-4ada-9ada-6a084ef1d502", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3lwhc6gqkgi2y", "content": "", "creation_timestamp": "2025-08-15T16:39:32.822333Z"}, {"uuid": "af40c398-b9d4-40c6-acf5-c613ddef3b91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-25256", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115033845480789740", "content": "", "creation_timestamp": "2025-08-15T16:59:44.018917Z"}, {"uuid": "5f4fef29-9872-4b72-92d4-34c3f23ed82a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/infosecindustry.bsky.social/post/3lwhhff2gxp24", "content": "", "creation_timestamp": "2025-08-15T18:12:55.040141Z"}, {"uuid": "b81e2c3b-b417-45c1-a5c3-0f83b39bee7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/tenablesecurity.bsky.social/post/3lwhi6mdzat2f", "content": "", "creation_timestamp": "2025-08-15T18:27:01.845916Z"}, {"uuid": "aac49962-b4b3-462a-a247-f30287d434f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lwhquyoavj25", "content": "", "creation_timestamp": "2025-08-15T21:02:42.546372Z"}, {"uuid": "5e673de6-c616-41b3-81e8-1d4884031576", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/malwaretech.com/post/3lwhuk5jibe2h", "content": "", "creation_timestamp": "2025-08-15T22:08:14.085041Z"}, {"uuid": "889ae9e3-f526-44f7-806a-be530df776dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://infosec.exchange/users/malwaretech/statuses/115035058599280093", "content": "", "creation_timestamp": "2025-08-15T22:08:16.625158Z"}, {"uuid": "14ee1b65-ed46-40bc-812c-ae3ba27048fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lwickvomwz2d", "content": "", "creation_timestamp": "2025-08-16T02:19:11.037875Z"}, {"uuid": "03ade7d2-9d3a-460c-acc0-26e56a5a0e88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25908", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-16T01:45:14.000000Z"}, {"uuid": "687d3b15-af73-43b5-919f-3bf269db8206", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25616", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-16T01:45:14.000000Z"}, {"uuid": "557b4143-0279-426c-abb3-618fa5abc89a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25791", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-16T01:45:14.000000Z"}, {"uuid": "5d04c0bd-f729-4e81-a5ba-21ebc56c92d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25193", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3lzzeuwgnak2r", "content": "", "creation_timestamp": "2025-09-30T01:31:25.718128Z"}, {"uuid": "8a146c27-68f7-41fd-9b37-7c6c15485b7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25015", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-16T01:45:14.000000Z"}, {"uuid": "9c0acc5a-d189-4f24-8011-c4657ccdd829", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25939", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-16T01:45:15.000000Z"}, {"uuid": "1c3b8e9d-3471-458c-957c-e56a0760ea48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3lwiin6nauw2o", "content": "", "creation_timestamp": "2025-08-16T04:07:49.941684Z"}, {"uuid": "57ce1ba2-ab67-4ecb-9ee1-d672584798b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25007", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lwivpe2hy22d", "content": "", "creation_timestamp": "2025-08-16T08:01:42.973857Z"}, {"uuid": "8cc82fba-e7ac-47cc-9e18-aaf4866de7e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25005", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lwivpe2hy22d", "content": "", "creation_timestamp": "2025-08-16T08:01:43.112096Z"}, {"uuid": "0092c82f-6c5b-4324-8fe1-98a90f3df9f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25007", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lwivqffy522d", "content": "", "creation_timestamp": "2025-08-16T08:02:17.956420Z"}, {"uuid": "064fc0d9-6ba7-4150-8986-850b40802c34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25005", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lwivqffy522d", "content": "", "creation_timestamp": "2025-08-16T08:02:18.084533Z"}, {"uuid": "57a78fc4-6633-47d4-8b02-abd8f814719c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lwivu6jwdrq2", "content": "", "creation_timestamp": "2025-08-16T08:04:33.937693Z"}, {"uuid": "3c5d07aa-b684-4c10-b962-4508d15a0117", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lwivzk3lob24", "content": "", "creation_timestamp": "2025-08-16T08:07:23.847053Z"}, {"uuid": "0ece52db-025d-4047-9cdd-3d70fad241a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lwiw6gmsteq2", "content": "", "creation_timestamp": "2025-08-16T08:10:15.048061Z"}, {"uuid": "398f0027-c13c-4ebd-952e-12d58007f5d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lwiwqcfope2r", "content": "", "creation_timestamp": "2025-08-16T08:20:06.748223Z"}, {"uuid": "04c4430c-d2e9-4554-8acd-06fa35b14c86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-25256", "type": "seen", "source": "https://bsky.app/profile/appsecfeed.bsky.social/post/3lwjbealzqg2p", "content": "", "creation_timestamp": "2025-08-16T11:30:13.557638Z"}, {"uuid": "5004f53a-8e82-4685-804a-a9afe05d43c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lwjcbp2gii2b", "content": "", "creation_timestamp": "2025-08-16T11:46:42.250566Z"}, {"uuid": "0dc81f5b-56c6-4d6e-965b-9e77839006ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3lwjdkjoldu2u", "content": "", "creation_timestamp": "2025-08-16T12:09:31.739483Z"}, {"uuid": "2442455c-df84-46c0-b109-8ba49e6601d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115038912521980024", "content": "", "creation_timestamp": "2025-08-16T14:28:21.158326Z"}, {"uuid": "9b761b04-ef25-4702-a402-fabce7c1ed19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lwke3gt6r22d", "content": "", "creation_timestamp": "2025-08-16T21:51:41.217690Z"}, {"uuid": "5520533b-b030-40fa-96a3-ba664e122789", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-25256", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lwkekyom2l2h", "content": "", "creation_timestamp": "2025-08-16T22:00:21.175328Z"}, {"uuid": "c0e8ac30-87d4-46ba-9e92-bc412bd514a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lwkhhjqzzk2d", "content": "", "creation_timestamp": "2025-08-16T22:52:07.018762Z"}, {"uuid": "37fd640c-c72b-4de5-9e98-dbb0831edf33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lwktgjpcyt2x", "content": "", "creation_timestamp": "2025-08-17T02:26:17.546592Z"}, {"uuid": "a94381a5-6de5-4dba-81ed-c439c267b080", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lwndvvkc6g2y", "content": "", "creation_timestamp": "2025-08-18T02:26:32.914561Z"}, {"uuid": "1814ccbe-512e-4d4d-8149-bb86c6618583", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/network/cves/2025/CVE-2025-25256.yaml", "content": "", "creation_timestamp": "2025-08-18T03:47:22.000000Z"}, {"uuid": "b074a454-23b7-4059-b244-7431ef245361", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-25256", "type": "seen", "source": "https://bsky.app/profile/sambowne.infosec.exchange.ap.brid.gy/post/3lwobm7k6tl22", "content": "", "creation_timestamp": "2025-08-18T11:19:05.039371Z"}, {"uuid": "cba472bf-ff2e-453b-9aa4-9efb48c80fd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25361", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-18T13:31:23.000000Z"}, {"uuid": "7ed4e990-9208-49eb-9e5f-b0a1f964692f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25191", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-18T13:31:23.000000Z"}, {"uuid": "da94cd74-9779-4afa-8364-d6bf642a524c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25182", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-18T13:31:23.000000Z"}, {"uuid": "38f33a9d-cb5b-498d-9e43-dff14831c413", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25362", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-18T13:31:23.000000Z"}, {"uuid": "0e933de8-b7f9-42b9-a6ac-2df62e81831d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25012", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-18T13:31:23.000000Z"}, {"uuid": "20417ac4-aebe-4962-be72-c6c0d8820521", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25231", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3m2fkbxmele2l", "content": "", "creation_timestamp": "2025-10-04T21:40:09.133665Z"}, {"uuid": "2a63e754-619c-4869-981b-3a8b25f06146", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25632", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-18T13:31:24.000000Z"}, {"uuid": "8b74ae9f-3d44-47be-9654-f2382835f629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25634", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-18T13:31:24.000000Z"}, {"uuid": "7665f99c-8acd-4f42-b64e-f8ce16d19e18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/leekthehack.bsky.social/post/3lwox4dqgzs27", "content": "", "creation_timestamp": "2025-08-18T17:42:58.563714Z"}, {"uuid": "a972b629-8885-42e7-b1cb-4e93fb105519", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/leekthehack.bsky.social/post/3lwox4lwaxk27", "content": "", "creation_timestamp": "2025-08-18T17:42:59.100190Z"}, {"uuid": "309ada93-1069-45f3-a548-dfb50a445f5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lwpcbpxfgc26", "content": "", "creation_timestamp": "2025-08-18T21:02:52.290595Z"}, {"uuid": "8fdeaca0-3b26-4a5d-bed4-5f2efedf8740", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25621", "type": "seen", "source": "MISP/fc16b923-3a13-4e9d-9aac-10a57cac12c7", "content": "", "creation_timestamp": "2025-08-18T18:30:59.000000Z"}, {"uuid": "3df9e395-8b12-4579-8eba-6d9708dbb35f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25426", "type": "seen", "source": "MISP/fc16b923-3a13-4e9d-9aac-10a57cac12c7", "content": "", "creation_timestamp": "2025-08-18T18:31:00.000000Z"}, {"uuid": "562f01c5-93bd-42e4-81b3-ed0474505a04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lwptuewahf2u", "content": "", "creation_timestamp": "2025-08-19T02:17:20.993665Z"}, {"uuid": "05a7d033-ae93-416d-892a-5dbb852e095e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25361", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-19T02:47:42.000000Z"}, {"uuid": "c2611559-6b69-4468-821e-8e53d6547632", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25191", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-19T02:47:43.000000Z"}, {"uuid": "3bfb6884-f291-4ee9-a400-0f961411e27d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25362", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-19T02:47:45.000000Z"}, {"uuid": "67c7cdf4-9a28-49c6-9fd8-bbce4b6ec7c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25012", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-19T02:47:45.000000Z"}, {"uuid": "90905b3c-1c33-42a2-a39f-623ef42c37ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25182", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-19T02:47:45.000000Z"}, {"uuid": "65311f55-68ae-4f5e-8cd7-1381b88cbe50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25634", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-19T02:47:47.000000Z"}, {"uuid": "ce82ede3-e0fc-4979-beb1-c9f2d4c4663a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25632", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-19T02:47:48.000000Z"}, {"uuid": "6582489f-217b-48c9-a87d-3dc97b95fe6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25908", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-19T04:06:31.000000Z"}, {"uuid": "acd18714-0feb-4493-ae11-829fa17a84e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25616", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-19T04:06:32.000000Z"}, {"uuid": "c65287f1-2c76-433f-a0d1-180411b0bf2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25791", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-19T04:06:34.000000Z"}, {"uuid": "13360cba-c1db-4684-8531-97f3c0abe32b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25015", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-19T04:06:36.000000Z"}, {"uuid": "893fab09-3083-47a7-83ea-9f649ef431a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25939", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-19T04:06:37.000000Z"}, {"uuid": "d8534ce4-95e8-4969-9a64-26596fe9051e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25018", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115350049964729526", "content": "", "creation_timestamp": "2025-10-10T13:14:41.232530Z"}, {"uuid": "444d5a76-cc05-4982-b980-d89bfc2ae057", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25953", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "9669686b-9597-4e40-9a0c-6606e9cbfa04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25952", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "b6d496b6-5447-4696-904e-f25aeb9d8509", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25951", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "c37257e5-fa28-40f8-b837-177070fdb307", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25948", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "96c20019-f44e-4240-a175-56844d09d19e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25950", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "ce8eb50f-1812-41c7-8047-91557a56bc9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25949", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "fcb395bd-c0e8-46e6-9e3c-e60bd5f1e96f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25726", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "3daf8bd4-93ff-488a-a73a-97509f76865a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25724", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:29.000000Z"}, {"uuid": "12a0eb45-d14e-415a-b8e4-5f46c9006725", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25760", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:29.000000Z"}, {"uuid": "a7a9bdf7-9328-4184-9cd2-e08579cdf174", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25325", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:29.000000Z"}, {"uuid": "6244a238-34ce-477a-bed7-03292bc0f464", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25609", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:29.000000Z"}, {"uuid": "5389db59-6d2e-46e6-9cd5-dbba54a8d055", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25723", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:29.000000Z"}, {"uuid": "a56f5961-4c69-445b-a990-5dab65b7b300", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25610", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:29.000000Z"}, {"uuid": "89d90115-747a-48be-8d83-05022f60e225", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25430", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:29.000000Z"}, {"uuid": "af40ed25-6d90-45f0-bb4b-02a3a3ee530a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lwseanwnc52x", "content": "", "creation_timestamp": "2025-08-20T02:15:52.019868Z"}, {"uuid": "f716311e-284b-4469-88b0-38a7ccc2ed62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25114", "type": "seen", "source": "MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72", "content": "", "creation_timestamp": "2025-08-19T13:26:45.000000Z"}, {"uuid": "c703035c-5bf4-4cfb-972c-d6ce9297b60a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25150", "type": "seen", "source": "MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72", "content": "", "creation_timestamp": "2025-08-19T13:26:45.000000Z"}, {"uuid": "30e24d4a-742b-45e2-92bb-3187cd4a0b18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/115063880212858349", "content": "", "creation_timestamp": "2025-08-21T00:18:02.214548Z"}, {"uuid": "b53d0781-8a27-413d-a899-6864a977d71f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lwuuoepmx525", "content": "", "creation_timestamp": "2025-08-21T02:15:11.307843Z"}, {"uuid": "f8d93fe8-f495-4382-a012-e95610eda06e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25580", "type": "seen", "source": "MISP/02fb130c-7874-4693-9b66-81ed91a2e996", "content": "", "creation_timestamp": "2025-08-21T03:19:28.000000Z"}, {"uuid": "d553a080-db0e-4962-9f46-9da145537077", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25220", "type": "seen", "source": "MISP/02fb130c-7874-4693-9b66-81ed91a2e996", "content": "", "creation_timestamp": "2025-08-21T03:19:29.000000Z"}, {"uuid": "05714167-bf40-4b1e-a6ce-f3c85ef9efaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25914", "type": "seen", "source": "MISP/02fb130c-7874-4693-9b66-81ed91a2e996", "content": "", "creation_timestamp": "2025-08-21T03:19:30.000000Z"}, {"uuid": "a4080288-50f9-4d9f-9ad7-8451aa28b657", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25618", "type": "seen", "source": "MISP/02fb130c-7874-4693-9b66-81ed91a2e996", "content": "", "creation_timestamp": "2025-08-21T03:19:31.000000Z"}, {"uuid": "1a142cf5-bcf5-44e4-99f2-fa950c74c4e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25009", "type": "seen", "source": "https://gist.github.com/Darkcrai86/a09881e53ee590b2c5041f7a13405a74", "content": "", "creation_timestamp": "2025-10-08T07:00:08.000000Z"}, {"uuid": "4eea8b25-48e2-4d75-bef4-2c9b3509f8f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2595", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/115484518470557884", "content": "", "creation_timestamp": "2025-11-03T07:11:48.020210Z"}, {"uuid": "05cbfc46-85fd-4395-8484-7288aedc4f94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2595", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3m4phqxsehr22", "content": "", "creation_timestamp": "2025-11-03T07:12:01.669365Z"}, {"uuid": "ea1e5c15-f9b6-42a8-9b98-07f490148e77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-20)", "content": "", "creation_timestamp": "2025-08-20T00:00:00.000000Z"}, {"uuid": "d3701411-ef09-431e-b89c-ac3212635ed4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2534", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m52sd72t7iu2", "content": "", "creation_timestamp": "2025-11-07T19:21:22.639302Z"}, {"uuid": "87f3c6f8-35b6-4f3a-8c95-f8a141ea86f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lwxf6nvpu22v", "content": "", "creation_timestamp": "2025-08-22T02:15:57.262779Z"}, {"uuid": "14e59e5f-a8b3-4f5a-9357-75d4b963d5e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://social.circl.lu/users/cedric/statuses/115074838000391199", "content": "", "creation_timestamp": "2025-08-22T22:44:40.342156Z"}, {"uuid": "c07600b2-119e-4a2e-abfa-720b7bb49137", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25724", "type": "seen", "source": "https://gist.github.com/EbonJaeger/99dd58f015b229c6f25edb5dae784966", "content": "", "creation_timestamp": "2025-10-17T17:52:23.000000Z"}, {"uuid": "75618efa-4ed0-4e00-bd5e-5bb17919f244", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-22)", "content": "", "creation_timestamp": "2025-08-22T00:00:00.000000Z"}, {"uuid": "33bfbe3d-c597-4322-9247-431e184178c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25034", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-25034.yaml", "content": "", "creation_timestamp": "2025-10-15T07:37:31.000000Z"}, {"uuid": "4e443a9c-ce90-466c-bed9-b269338a3b86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25034", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-24)", "content": "", "creation_timestamp": "2025-11-24T00:00:00.000000Z"}, {"uuid": "dc865c17-a443-4a08-aca0-630fd061db06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3m3q742yxg22w", "content": "", "creation_timestamp": "2025-10-21T20:44:27.824451Z"}, {"uuid": "7a579c46-f900-47b6-85d3-df9db638e7ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25034", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-24)", "content": "", "creation_timestamp": "2025-11-24T00:00:00.000000Z"}, {"uuid": "94b5cc24-375c-463e-ae39-e4a735aa4cd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25236", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5hbdk7fjn22", "content": "", "creation_timestamp": "2025-11-12T18:20:54.810421Z"}, {"uuid": "f284b894-bb19-4a6e-9d01-0fff050a3011", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "960883df-3257-4fd3-bdd2-466a6cd98783", "vulnerability": "CVE-2025-25255", "type": "published-proof-of-concept", "source": "https://github.com/watchtowrlabs/watchTowr-vs-Fortiweb-AuthBypass/blob/main/watchTowr-vs-Fortiweb-AuthBypass.py", "content": "", "creation_timestamp": "2025-11-19T12:50:02.631915Z"}, {"uuid": "0e9ce369-c3bc-4daf-8396-9380503628ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/catc0n.bsky.social/post/3lx7zx5ky4k27", "content": "", "creation_timestamp": "2025-08-25T12:48:53.747693Z"}, {"uuid": "37196a21-f274-48d4-aeaa-0ba54763b1f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/mds52.bsky.social/post/3lxabg42u462y", "content": "", "creation_timestamp": "2025-08-25T15:02:30.276372Z"}, {"uuid": "f0557e45-547a-4c3b-9225-410cd73f0a78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25772", "type": "seen", "source": "MISP/9ca82492-7deb-4197-a6f1-191e121eef96", "content": "", "creation_timestamp": "2025-08-25T13:32:04.000000Z"}, {"uuid": "c3f6db68-8e64-49ba-9eb2-718bf39b5557", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25770", "type": "seen", "source": "MISP/9ca82492-7deb-4197-a6f1-191e121eef96", "content": "", "creation_timestamp": "2025-08-25T13:32:04.000000Z"}, {"uuid": "0729a482-6d94-4720-92af-df300dccb1a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25769", "type": "seen", "source": "MISP/9ca82492-7deb-4197-a6f1-191e121eef96", "content": "", "creation_timestamp": "2025-08-25T13:32:04.000000Z"}, {"uuid": "ee850463-c35e-4a4f-bd6f-bafb5c0b7e58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25768", "type": "seen", "source": "MISP/9ca82492-7deb-4197-a6f1-191e121eef96", "content": "", "creation_timestamp": "2025-08-25T13:32:04.000000Z"}, {"uuid": "f7c43e3f-8f84-4cac-beac-06f8dcdf59dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25876", "type": "seen", "source": "MISP/9ca82492-7deb-4197-a6f1-191e121eef96", "content": "", "creation_timestamp": "2025-08-25T13:32:04.000000Z"}, {"uuid": "362c0d3c-b26a-4288-b3fd-e63763cf72fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25875", "type": "seen", "source": "MISP/9ca82492-7deb-4197-a6f1-191e121eef96", "content": "", "creation_timestamp": "2025-08-25T13:32:04.000000Z"}, {"uuid": "fbdf8ea7-2349-4e84-aab4-9b8bda957fb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25507", "type": "seen", "source": "MISP/9ca82492-7deb-4197-a6f1-191e121eef96", "content": "", "creation_timestamp": "2025-08-25T13:32:04.000000Z"}, {"uuid": "669188c0-7732-477d-9fb0-eb1e4bc76220", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25510", "type": "seen", "source": "MISP/9ca82492-7deb-4197-a6f1-191e121eef96", "content": "", "creation_timestamp": "2025-08-25T13:32:04.000000Z"}, {"uuid": "b84efd12-eb24-40b8-9b1b-9198ee168819", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25505", "type": "seen", "source": "MISP/9ca82492-7deb-4197-a6f1-191e121eef96", "content": "", "creation_timestamp": "2025-08-25T13:32:04.000000Z"}, {"uuid": "9fc02cec-bfc7-435c-8118-62bfe5382070", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25196", "type": "seen", "source": "MISP/9ca82492-7deb-4197-a6f1-191e121eef96", "content": "", "creation_timestamp": "2025-08-25T13:32:05.000000Z"}, {"uuid": "a26f3700-e542-4fcf-90ca-428d02cccd7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25675", "type": "seen", "source": "MISP/9ca82492-7deb-4197-a6f1-191e121eef96", "content": "", "creation_timestamp": "2025-08-25T13:32:05.000000Z"}, {"uuid": "fa38771d-7116-48dd-a196-2303e82c41b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25667", "type": "seen", "source": "MISP/9ca82492-7deb-4197-a6f1-191e121eef96", "content": "", "creation_timestamp": "2025-08-25T13:32:05.000000Z"}, {"uuid": "e5f34d7b-7116-4755-a8ca-ebca1b32c3aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25896", "type": "seen", "source": "MISP/9ca82492-7deb-4197-a6f1-191e121eef96", "content": "", "creation_timestamp": "2025-08-25T13:32:05.000000Z"}, {"uuid": "291cc93d-14ba-4c20-a9bc-57f0ea66e7da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25064", "type": "seen", "source": "MISP/71f05cce-2beb-4b80-8496-bbbabc032544", "content": "", "creation_timestamp": "2025-08-25T18:31:43.000000Z"}, {"uuid": "c563f816-bc8e-4541-b39e-a7bc0eff5174", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25055", "type": "seen", "source": "MISP/71f05cce-2beb-4b80-8496-bbbabc032544", "content": "", "creation_timestamp": "2025-08-25T18:31:43.000000Z"}, {"uuid": "59793440-5307-4b6e-a627-e21bcc7c3949", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25964", "type": "seen", "source": "MISP/71f05cce-2beb-4b80-8496-bbbabc032544", "content": "", "creation_timestamp": "2025-08-25T18:31:44.000000Z"}, {"uuid": "9e689b07-3fdb-4c2d-8d9c-4c9eabef801b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25745", "type": "seen", "source": "MISP/71f05cce-2beb-4b80-8496-bbbabc032544", "content": "", "creation_timestamp": "2025-08-25T18:31:44.000000Z"}, {"uuid": "3d22d5fc-4a19-4cdf-b00e-16054e6cbe01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25295", "type": "seen", "source": "MISP/71f05cce-2beb-4b80-8496-bbbabc032544", "content": "", "creation_timestamp": "2025-08-25T18:31:44.000000Z"}, {"uuid": "14b7c304-cfa6-4a4b-970f-b11704f0f281", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25987", "type": "seen", "source": "MISP/71f05cce-2beb-4b80-8496-bbbabc032544", "content": "", "creation_timestamp": "2025-08-25T18:31:44.000000Z"}, {"uuid": "2c77e1e9-1a9f-4f01-9437-f39152c7b04c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25195", "type": "seen", "source": "MISP/71f05cce-2beb-4b80-8496-bbbabc032544", "content": "", "creation_timestamp": "2025-08-25T18:31:44.000000Z"}, {"uuid": "b14a90aa-3305-46c2-a55b-724018c2dbbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25286", "type": "seen", "source": "MISP/db121278-a8f5-4f36-a226-e45f3a86f55e", "content": "", "creation_timestamp": "2025-08-26T13:26:34.000000Z"}, {"uuid": "31a68032-66c1-44a3-bf91-e82052a1be74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25066", "type": "seen", "source": "MISP/f7787455-9994-4047-b6f7-77347597c104", "content": "", "creation_timestamp": "2025-08-26T18:36:19.000000Z"}, {"uuid": "cb22f751-7e2f-44e0-aee8-8b2f3c9ba3ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-25469", "type": "seen", "source": "https://infosec.exchange/users/Tinolle/statuses/115106666186102704", "content": "", "creation_timestamp": "2025-08-28T13:38:59.361956Z"}, {"uuid": "55a84a29-c4a0-4643-847e-1586f3da4771", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25175", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-876/", "content": "", "creation_timestamp": "2025-08-28T03:00:00.000000Z"}, {"uuid": "3cb5e4dc-36a7-45b6-a281-2715eec806ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25175", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-875/", "content": "", "creation_timestamp": "2025-08-28T03:00:00.000000Z"}, {"uuid": "87700758-2cf9-4b97-aa0e-5bc2bef5a713", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25175", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-874/", "content": "", "creation_timestamp": "2025-08-28T03:00:00.000000Z"}, {"uuid": "f004394c-4419-4a30-b1ea-7e18be5ec810", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25231", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-25231.yaml", "content": "", "creation_timestamp": "2025-08-30T15:48:47.000000Z"}, {"uuid": "67fcb3ef-6651-4ce5-ac7a-afc52e4028c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3m335yzgz2c2y", "content": "", "creation_timestamp": "2025-10-13T11:59:02.414556Z"}, {"uuid": "a0623457-d393-4201-adfa-40f433be28ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3m335z53gn22y", "content": "", "creation_timestamp": "2025-10-13T11:59:03.183842Z"}, {"uuid": "f2cf2e71-3fb1-45e5-b765-5a77fab3a2f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2563", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_user_registration_membership_escalation.rb", "content": "", "creation_timestamp": "2025-05-14T13:41:16.000000Z"}, {"uuid": "d6ea83f0-ce40-4054-9249-d22b0c39e73f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3m335z53jks2y", "content": "", "creation_timestamp": "2025-10-13T11:59:03.969570Z"}, {"uuid": "c7066b33-779e-409c-9536-b2fa080e7945", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25034", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-23)", "content": "", "creation_timestamp": "2025-11-23T00:00:00.000000Z"}, {"uuid": "6625717b-a730-46ae-b3e9-16260ef8ab42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25231", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lxpyd4mwh62h", "content": "", "creation_timestamp": "2025-08-31T21:02:22.202534Z"}, {"uuid": "22bb7f8a-d78e-4f34-a799-815e64de7456", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25034", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/sugarcrm_rest_unserialize_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "438ecd2c-fb51-46b4-ad38-771fc8d31a9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25010", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lxrowkqahk2o", "content": "", "creation_timestamp": "2025-09-01T13:19:36.588958Z"}, {"uuid": "f502522c-5d30-45a8-9597-2a4c8dd10fb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2521", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-247-01", "content": "", "creation_timestamp": "2025-09-04T10:00:00.000000Z"}, {"uuid": "9f201aab-4fe6-4a25-932c-ff8fed308c71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2522", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-247-01", "content": "", "creation_timestamp": "2025-09-04T10:00:00.000000Z"}, {"uuid": "510fe696-ceae-4c94-816b-7a5b1cd329e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2523", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-247-01", "content": "", "creation_timestamp": "2025-09-04T10:00:00.000000Z"}, {"uuid": "d0ad9f34-f855-49a6-af74-634bf3482b4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2523", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lxzwtiqgdx26", "content": "", "creation_timestamp": "2025-09-04T20:02:21.134365Z"}, {"uuid": "2c19f3ac-4316-4c72-a051-364421d7869e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2521", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lxzwtiqgdx26", "content": "", "creation_timestamp": "2025-09-04T20:02:21.280738Z"}, {"uuid": "00f10373-93ce-4875-8117-be8fa2571218", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2568", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m2pk253aoi2n", "content": "", "creation_timestamp": "2025-10-08T21:02:26.110732Z"}, {"uuid": "c56c5aa5-e823-4b2c-a839-0cf3a7404d01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3me5bzfundg2i", "content": "", "creation_timestamp": "2026-02-05T21:02:55.969356Z"}, {"uuid": "3005d8d4-ca9d-408f-b409-3c8e6dedcfc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25473", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3m7gmdqjtmk2i", "content": "", "creation_timestamp": "2025-12-07T22:55:38.552072Z"}, {"uuid": "460fba22-3622-46d3-8d40-59a174afac7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25198", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mgb6lqcoai2q", "content": "", "creation_timestamp": "2026-03-04T21:02:34.717788Z"}, {"uuid": "84af3b9f-2f00-475e-8dba-a76f15019f08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25292", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m7ljpqhxj225", "content": "", "creation_timestamp": "2025-12-09T21:51:55.557434Z"}, {"uuid": "e01ae3fc-b214-42b7-897b-4fb589861f9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25356", "type": "seen", "source": "Telegram/5H7Xq5Bh1UsEGJW0e6lNWXAOuTuehvhpxhOk44JsmS6V0h_n", "content": "", "creation_timestamp": "2025-02-14T21:09:18.000000Z"}, {"uuid": "ebecee2a-ab54-47f0-b485-5194118be276", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25034", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-15)", "content": "", "creation_timestamp": "2026-02-15T00:00:00.000000Z"}, {"uuid": "ef283df9-3b8d-4fd7-83fb-7cb89054cb82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2592", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116065289827099937", "content": "", "creation_timestamp": "2026-02-13T20:49:36.915995Z"}, {"uuid": "73e1c2f9-57ad-4d7b-84f4-cc1b00930db2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-18)", "content": "", "creation_timestamp": "2025-12-18T00:00:00.000000Z"}, {"uuid": "28e2ed02-5d0f-4eb6-9db3-a45af816dca3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-25231", "type": "seen", "source": "https://gist.github.com/Darkcrai86/8d7908d95301dfc61173b9e9ee4f1d69", "content": "", "creation_timestamp": "2025-12-19T14:11:27.000000Z"}, {"uuid": "41b51a92-c00a-47db-851a-ea2453685fba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25364", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3maoiuluz6w27", "content": "", "creation_timestamp": "2025-12-23T19:39:54.355968Z"}, {"uuid": "e5e9e4a0-90c3-4503-b30d-1104ad2394b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25364", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3maonzqlbkz2e", "content": "", "creation_timestamp": "2025-12-23T21:12:14.601875Z"}, {"uuid": "e8c7e48b-e501-4820-970e-a641efab3dbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2515", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3maqvkfs6d422", "content": "", "creation_timestamp": "2025-12-24T18:32:09.373762Z"}, {"uuid": "95979c04-55ee-4229-8b13-59b4bb21ac48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25341", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mawa3hdej42y", "content": "", "creation_timestamp": "2025-12-26T21:24:05.389329Z"}, {"uuid": "cf6fd6f8-b8cd-4841-8654-1b856a665343", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-28)", "content": "", "creation_timestamp": "2025-12-28T00:00:00.000000Z"}, {"uuid": "c1b86b9e-7735-428d-a0d5-02fe1b66c964", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25034", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-29)", "content": "", "creation_timestamp": "2025-12-29T00:00:00.000000Z"}, {"uuid": "d4118046-07c3-4b9b-96a1-0abff744a8b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2595", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/control-systems-abb-security-advisory-av26-163", "content": "", "creation_timestamp": "2026-02-24T19:30:01.000000Z"}, {"uuid": "0099a3a7-b531-47b2-8679-965e32c74aea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25034", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-08)", "content": "", "creation_timestamp": "2026-02-08T00:00:00.000000Z"}, {"uuid": "b4e6e1d5-77f0-48fd-a1be-545e344de351", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25210", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mejk4n5pyo2g", "content": "", "creation_timestamp": "2026-02-10T17:59:45.411973Z"}, {"uuid": "586d1f46-a8bb-4107-a9e7-61def984794f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25198", "type": "seen", "source": "https://bsky.app/profile/exploitdb-bot.bsky.social/post/3mg5n53vzog2j", "content": "", "creation_timestamp": "2026-03-03T11:12:08.150105Z"}, {"uuid": "2e4609e1-f952-4080-b481-406311e9bc21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25051", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-022-02", "content": "", "creation_timestamp": "2026-01-22T11:00:00.000000Z"}, {"uuid": "f19d74f0-8262-4e68-9675-73c4ea9ff3d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25034", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-09)", "content": "", "creation_timestamp": "2026-03-09T00:00:00.000000Z"}, {"uuid": "1d4cb620-a8a1-49cd-b549-f55bf4b112d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-02)", "content": "", "creation_timestamp": "2026-01-02T00:00:00.000000Z"}, {"uuid": "e3da500f-7f66-4e97-804c-4dc59e324243", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-14)", "content": "", "creation_timestamp": "2026-02-14T00:00:00.000000Z"}, {"uuid": "a4b16416-c54a-4e42-814c-680c0fde7bab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://bsky.app/profile/exploitdb-bot.bsky.social/post/3mdzycrbunx2w", "content": "", "creation_timestamp": "2026-02-04T13:31:06.971161Z"}, {"uuid": "3052d1bd-b7d1-4c25-aa1e-5f0e18921ff2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25034", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-03)", "content": "", "creation_timestamp": "2026-01-03T00:00:00.000000Z"}, {"uuid": "b0cbf537-806f-4c6d-bfaf-8f1fbbead76e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-05)", "content": "", "creation_timestamp": "2026-01-05T00:00:00.000000Z"}, {"uuid": "04a78e8d-1a8e-4f7e-a641-d095b7e363c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25034", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-07)", "content": "", "creation_timestamp": "2026-01-07T00:00:00.000000Z"}, {"uuid": "4933a81e-8c74-41cc-9047-3c835a5fd3dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25231", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-23)", "content": "", "creation_timestamp": "2026-03-23T00:00:00.000000Z"}, {"uuid": "3378b084-ef0c-4e53-85b9-7f33ca5ce7b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-10)", "content": "", "creation_timestamp": "2026-01-10T00:00:00.000000Z"}, {"uuid": "817ab894-58bc-4659-a87b-cb85497d6cf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-10)", "content": "", "creation_timestamp": "2026-01-10T00:00:00.000000Z"}, {"uuid": "df9d38a6-c168-43c4-b6e0-204f5f14ef95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-25193", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1729", "content": "", "creation_timestamp": "2026-01-21T04:00:00.000000Z"}, {"uuid": "7035b37f-1144-4229-9153-5392cfa6b42b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25570", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-25570.yaml", "content": "", "creation_timestamp": "2026-01-12T23:11:23.000000Z"}, {"uuid": "fdf66551-1d72-4ac4-9330-52e434e10068", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcd34sceo22g", "content": "", "creation_timestamp": "2026-01-13T17:25:04.108441Z"}, {"uuid": "1be3c5fb-96a1-491a-8ca1-a30581f6f131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25176", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcd3kpktlp2x", "content": "", "creation_timestamp": "2026-01-13T17:32:49.166226Z"}, {"uuid": "0e199784-3a6f-4675-9182-97c5a1350de9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25652", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcd3nfpfir2q", "content": "", "creation_timestamp": "2026-01-13T17:34:19.518330Z"}, {"uuid": "b67006f2-09af-4de0-bd94-dca85b8e8751", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcd3qaek542y", "content": "", "creation_timestamp": "2026-01-13T17:35:54.462141Z"}, {"uuid": "4dc05994-ecfc-4f68-8394-6f3bfd0add96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25034", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-12)", "content": "", "creation_timestamp": "2026-03-12T00:00:00.000000Z"}, {"uuid": "168acee9-fab6-47bc-b293-5930493f8554", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mce6txmaok2q", "content": "", "creation_timestamp": "2026-01-14T04:04:20.660285Z"}, {"uuid": "d3f37399-6961-4b43-99c9-e206ccec9766", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-25249", "type": "seen", "source": "https://gist.github.com/Darkcrai86/45f4c256c8074121c8876b78492ca689", "content": "", "creation_timestamp": "2026-01-14T08:27:19.000000Z"}, {"uuid": "699c596e-42e0-4efe-ac09-5f417918f0b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25037", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-24)", "content": "", "creation_timestamp": "2026-03-24T00:00:00.000000Z"}, {"uuid": "3079cb62-da67-4549-aa9d-d76f8a443108", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25652", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mcfxrjbon42g", "content": "", "creation_timestamp": "2026-01-14T21:03:01.900482Z"}, {"uuid": "7961be2b-98c5-40bb-910d-1d167906c359", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25570", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mcfxrjrxfo24", "content": "", "creation_timestamp": "2026-01-14T21:03:05.593013Z"}, {"uuid": "1b8ecf16-db9b-4a97-8565-0433b4960d15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25034", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-13)", "content": "", "creation_timestamp": "2026-03-13T00:00:00.000000Z"}, {"uuid": "3e555a57-95bd-4870-813b-0dfdf815d554", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-2595", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01", "content": "", "creation_timestamp": "2026-03-17T12:00:00.000000Z"}, {"uuid": "08bfb1d3-6a0a-4f43-a6b8-7621a29f2dec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-25231", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/05b3e48c-916b-4493-ae63-3ce938d3d01f", "content": "", "creation_timestamp": "2026-02-02T12:25:28.783369Z"}, {"uuid": "e5f8f964-9b65-492a-a2e6-cf40a276a15a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-27)", "content": "", "creation_timestamp": "2026-03-27T00:00:00.000000Z"}, {"uuid": "213e1a5d-671c-4c73-8f5e-b14c82efb523", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/115899108531535021", "content": "", "creation_timestamp": "2026-01-15T12:27:30.039023Z"}, {"uuid": "a8ada59f-b427-476d-8ced-090ea1075f31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://threatintel.cc/2026/01/15/exploit-code-public-for-critical.html", "content": "", "creation_timestamp": "2026-01-15T11:27:41.000000Z"}, {"uuid": "a99e31b8-a9f8-46cd-a5e2-bb353f3a2a8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/115899612832516143", "content": "", "creation_timestamp": "2026-01-15T14:35:44.956885Z"}, {"uuid": "e966ed3a-3190-4d5d-9f09-70cadf58700b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3mchsm7lbrk25", "content": "", "creation_timestamp": "2026-01-15T14:35:56.239639Z"}, {"uuid": "9b509265-24f6-4f15-8a66-22ddbabfa58d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://vulnerability.circl.lu/comment/8e8d20dc-fdfa-49d1-948e-61e14e28462b", "content": "", "creation_timestamp": "2025-07-11T07:02:48.563599Z"}, {"uuid": "5bf1e4f4-68f7-49c2-991f-f2e92dba4785", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "cve-2025-25257", "type": "seen", "source": "https://vulnerability.circl.lu/comment/94b37950-f479-444b-bff8-5571bd15eac5", "content": "", "creation_timestamp": "2025-07-11T12:39:36.125991Z"}, {"uuid": "6676ee49-e79d-4850-b5fa-60a8724e7863", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mciseebiis2h", "content": "", "creation_timestamp": "2026-01-16T00:04:14.312332Z"}, {"uuid": "ece9b6cc-9264-4625-95f7-34c334484b21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mciws5svuj2e", "content": "", "creation_timestamp": "2026-01-16T01:23:29.817794Z"}, {"uuid": "b50bcf99-883f-4f78-8ae9-56248ac52dcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mcj32vorif2x", "content": "", "creation_timestamp": "2026-01-16T02:39:57.734757Z"}, {"uuid": "7827af80-9a2e-47ff-a34f-fc4576426c80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mcokosuzis2k", "content": "", "creation_timestamp": "2026-01-18T07:02:52.238110Z"}, {"uuid": "46f7864c-0ebc-426d-94f4-58905801787e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mcolervvvc2k", "content": "", "creation_timestamp": "2026-01-18T07:15:10.499183Z"}, {"uuid": "60f97e5e-aa7f-454c-89da-175ff9610d6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://bsky.app/profile/hjmscs4.bsky.social/post/3mcu7ojf2sc25", "content": "", "creation_timestamp": "2026-01-20T13:01:51.216854Z"}, {"uuid": "98a2b9ff-b694-49a3-b0e1-23f8ac2ce601", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25051", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md2dzwhhqv2t", "content": "", "creation_timestamp": "2026-01-22T23:35:43.634938Z"}, {"uuid": "d0ed5826-2930-4002-9bb4-b4e3978e1352", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-25246", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/52db1232-3e47-4bf4-a6ed-a4b863f96ab9", "content": "", "creation_timestamp": "2025-02-10T18:09:14.246689Z"}, {"uuid": "354ca22f-9961-4b6d-a7c1-dfee0a5c1ecc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-25292", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/788f36f8-de85-4779-b4e3-6815a156b903", "content": "", "creation_timestamp": "2025-03-13T05:57:30.908420Z"}, {"uuid": "47728736-8cab-41ff-bcb4-45a7a57fda02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-25291", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/788f36f8-de85-4779-b4e3-6815a156b903", "content": "", "creation_timestamp": "2025-03-13T05:57:30.908420Z"}, {"uuid": "189e5ee6-1200-478e-a634-256b340c2286", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-25212", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/9d7fef5d-952d-4ecc-880d-94d02304e7a3", "content": "", "creation_timestamp": "2025-07-30T07:59:24.597474Z"}, {"uuid": "85e65915-a7e5-4d95-8e03-566ebc654d76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-25193", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/bbcbc485-b88d-4831-b8e9-6e37e7bd9875", "content": "", "creation_timestamp": "2026-01-21T21:18:16.771453Z"}, {"uuid": "63488d72-ae5d-4a3b-b960-080c3113f197", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-21)", "content": "", "creation_timestamp": "2026-03-21T00:00:00.000000Z"}, {"uuid": "a22609d9-d360-4b0c-8275-c1797f46c96d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1613", "content": "", "creation_timestamp": "2025-08-14T04:00:00.000000Z"}, {"uuid": "3be8b2ab-b645-49ad-bbd7-82e45d02d1a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1586", "content": "", "creation_timestamp": "2025-07-10T04:00:00.000000Z"}, {"uuid": "8a0f9298-bf5c-4587-8f7d-f5defdfda1d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25182", "type": "seen", "source": "https://gist.github.com/alon710/63fa2f1b8363f1b0421ae7bb4a3d42bc", "content": "", "creation_timestamp": "2026-01-24T22:43:32.000000Z"}, {"uuid": "8e18575c-126f-4a0e-b9df-c1463d34cb99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25231", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-29)", "content": "", "creation_timestamp": "2026-03-29T00:00:00.000000Z"}, {"uuid": "527453ed-8a2e-446f-81b2-d08c6fb6e71c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-25257", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/393a57fc-8151-4ee4-869f-1719b1281589", "content": "", "creation_timestamp": "2026-02-02T12:25:57.257265Z"}, {"uuid": "a1f0d23e-8d48-40c4-af7a-02bb9cc6757e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-25181", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/945ed962-2e0b-46af-a43e-cc92e2d2a8d6", "content": "", "creation_timestamp": "2026-02-02T12:26:08.709738Z"}, {"uuid": "07aac09b-850b-45b7-a04e-c927dd18fd6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25231", "type": "seen", "source": "https://bsky.app/profile/g0rosato.bsky.social/post/3mil3bhoyuq2v", "content": "", "creation_timestamp": "2026-04-03T06:20:07.035570Z"}, {"uuid": "9a3155b3-ad42-4775-bf9a-fa0f83d2c6f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25034", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-02)", "content": "", "creation_timestamp": "2026-04-02T00:00:00.000000Z"}, {"uuid": "49bbea0c-32fa-4d0c-bd60-ec1eb7b39ad4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25034", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-03)", "content": "", "creation_timestamp": "2026-04-03T00:00:00.000000Z"}, {"uuid": "3896b422-5a18-42f5-9174-d5f4e75f84b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25034", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-03)", "content": "", "creation_timestamp": "2026-04-03T00:00:00.000000Z"}, {"uuid": "590635e2-b68a-4b83-9549-562347cb30ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25535", "type": "seen", "source": "https://t.me/cvedetector/21230", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25535 - SCRIPT CASE HTTP Response Manipulation Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2025-25535 \nPublished : March 26, 2025, 7:15 p.m. | 1\u00a0hour, 31\u00a0minutes ago \nDescription : HTTP Response Manipulation in SCRIPT CASE v.1.0.002 Build7 allows a remote attacker to escalate privileges via a crafted request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T22:15:40.000000Z"}, {"uuid": "7e9f0d5c-e560-477a-a163-8ac7eff6cee8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25426", "type": "seen", "source": "https://t.me/cvedetector/19550", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25426 - Yshopmall SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25426 \nPublished : March 4, 2025, 10:15 p.m. | 34\u00a0minutes ago \nDescription : yshopmall <=v1.9.0\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T00:12:43.000000Z"}, {"uuid": "42ba66e5-4c89-4aad-9343-aa3ea4f0cce2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2539", "type": "published-proof-of-concept", "source": "Telegram/cQf2CT3r4WvnJhAn_Z5tbBdbHlIor2zaa0XkqChp6pgA9CQ", "content": "", "creation_timestamp": "2025-12-13T09:00:04.000000Z"}, {"uuid": "8b09f748-fcc5-466e-bcaa-3ce407725492", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25967", "type": "seen", "source": "https://t.me/cvedetector/19396", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25967 - Acora CMS CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25967 \nPublished : March 3, 2025, 7:15 p.m. | 1\u00a0hour, 6\u00a0minutes ago \nDescription : Acora CMS version 10.1.1 is vulnerable to Cross-Site Request Forgery (CSRF). This flaw enables attackers to trick authenticated users into performing unauthorized actions, such as account deletion or user creation, by embedding malicious requests in external content. The lack of CSRF protections allows exploitation via crafted requests. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T21:24:34.000000Z"}, {"uuid": "1e6cee9d-bc0d-469d-a21b-b45ba4bcb596", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25939", "type": "seen", "source": "https://t.me/cvedetector/19395", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25939 - Reprise License Manager Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25939 \nPublished : March 3, 2025, 7:15 p.m. | 1\u00a0hour, 6\u00a0minutes ago \nDescription : Reprise License Manager 14.2 is vulnerable to reflected cross-site scripting in /goform/activate_process via the akey parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T21:24:33.000000Z"}, {"uuid": "5ae9d11e-9d68-48a0-9faa-cc3f11d6d034", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2598", "type": "published-proof-of-concept", "source": "Telegram/cQbTgpKMUqE7r50TMi-Jo6XMKFA-M4NuOONOoKLBjTRKKPs", "content": "", "creation_timestamp": "2025-11-25T03:00:13.000000Z"}, {"uuid": "40385b90-0774-4419-b2bc-722b8285fd82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25302", "type": "seen", "source": "https://t.me/cvedetector/19380", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25302 - Rembg CORS Misconfiguration (Open Redirect)\", \n  \"Content\": \"CVE ID : CVE-2025-25302 \nPublished : March 3, 2025, 5:15 p.m. | 1\u00a0hour, 1\u00a0minute ago \nDescription : Rembg is a tool to remove images background. In Rembg 2.0.57 and earlier, the CORS middleware is setup incorrectly. All origins are reflected, which allows any website to send cross site requests to the rembg server and thus query any API. Even if authentication were to be enabled, allow_credentials is set to True, which would allow any website to send authenticated cross site requests. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T19:44:08.000000Z"}, {"uuid": "74a52588-f5a5-44aa-95ea-c92e3f75f74a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25301", "type": "seen", "source": "https://t.me/cvedetector/19379", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25301 - Rembg Insecure Image Retrieval Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25301 \nPublished : March 3, 2025, 5:15 p.m. | 1\u00a0hour, 1\u00a0minute ago \nDescription : Rembg is a tool to remove images background. In Rembg 2.0.57 and earlier, the /api/remove endpoint takes a URL query parameter that allows an image to be fetched, processed and returned. An attacker may be able to query this endpoint to view pictures hosted on the internal network of the rembg server. This issue may lead to Information Disclosure. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T19:44:07.000000Z"}, {"uuid": "285e25f6-a993-4f30-933a-0f44ae40c970", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25066", "type": "seen", "source": "https://t.me/cvedetector/17055", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25066 - Cisco nDPI Stack Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25066 \nPublished : Feb. 3, 2025, 6:15 a.m. | 1\u00a0hour, 52\u00a0minutes ago \nDescription : nDPI through 4.12 has a potential stack-based buffer overflow in ndpi_address_cache_restore in lib/ndpi_cache.c. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-03T09:27:13.000000Z"}, {"uuid": "10ea34ac-bb42-4f14-955d-01601902da46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25303", "type": "seen", "source": "https://t.me/cvedetector/19374", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25303 - \"MouseTooltipTranslator Chrome Extension SSRF Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-25303 \nPublished : March 3, 2025, 5:15 p.m. | 1\u00a0hour, 1\u00a0minute ago \nDescription : The MouseTooltipTranslator Chrome extension allows mouseover translation of any language at once. The MouseTooltipTranslator browser extension is vulnerable to SSRF attacks. The pdf.mjs script uses the URL parameter from the current URL as the file to download and display to the extension user. Because pdf.mjs is imported in viewer.html and viewer.html is accessible to all URLs, an attacker can force the user\u2019s browser to make a request to any arbitrary URL. After discussion with maintainer, patching this issue would require disabling a major feature of the extension in exchange for a low severity vulnerability. Decision to not patch issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T19:44:00.000000Z"}, {"uuid": "0f501fe2-78a9-4c1e-bc38-02710302fc89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25949", "type": "seen", "source": "https://t.me/cvedetector/19280", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25949 - Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR XSS\", \n  \"Content\": \"CVE ID : CVE-2025-25949 \nPublished : March 3, 2025, 1:15 a.m. | 28\u00a0minutes ago \nDescription : A stored cross-site scripting (XSS) vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the User ID parameter at /rest/staffResource/update. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T02:58:43.000000Z"}, {"uuid": "b3924916-5367-45dd-9284-b1b276a47c5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25948", "type": "seen", "source": "https://t.me/cvedetector/19279", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25948 - Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR Unauthenticated Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2025-25948 \nPublished : March 3, 2025, 1:15 a.m. | 28\u00a0minutes ago \nDescription : Incorrect access control in the component /rest/staffResource/create of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows create and modify user accounts, including an Administrator account. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T02:58:39.000000Z"}, {"uuid": "f0312a59-849c-42b5-8c51-915a8671f84e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25280", "type": "seen", "source": "https://t.me/cvedetector/19320", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25280 - Century Systems Co., Ltd. FutureNet AS and FA Series Remote Reboot Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25280 \nPublished : March 3, 2025, 9:15 a.m. | 46\u00a0minutes ago \nDescription : Buffer overflow vulnerability exists in FutureNet AS series (Industrial Routers) and FA series (Protocol Conversion Machine) provided by Century Systems Co., Ltd. If this vulnerability is exploited, a remote unauthenticated attacker may reboot the device by sending a specially crafted request. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T11:21:36.000000Z"}, {"uuid": "34c54e7e-1a27-494b-9c3c-b008caee6ed5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25953", "type": "seen", "source": "https://t.me/cvedetector/19284", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25953 - Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR Azure JWT Access Token Exposure Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25953 \nPublished : March 3, 2025, 1:15 a.m. | 28\u00a0minutes ago \nDescription : Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 was discovered to contain an Azure JWT access token exposure. This vulnerability allows authenticated attackers to escalate privileges and access sensitive information. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T02:58:46.000000Z"}, {"uuid": "06b94b58-0df2-448b-951e-aad3900c4826", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25952", "type": "seen", "source": "https://t.me/cvedetector/19283", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25952 - Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR IDOR\", \n  \"Content\": \"CVE ID : CVE-2025-25952 \nPublished : March 3, 2025, 1:15 a.m. | 28\u00a0minutes ago \nDescription : An Insecure Direct Object References (IDOR) in the component /getStudemtAllDetailsById?studentId=XX of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows attackers to access sensitive user information via a crafted API request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T02:58:45.000000Z"}, {"uuid": "884e9c4d-ea37-432f-a9bc-42eddd2c1796", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25951", "type": "seen", "source": "https://t.me/cvedetector/19282", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25951 - Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25951 \nPublished : March 3, 2025, 1:15 a.m. | 28\u00a0minutes ago \nDescription : An information disclosure vulnerability in the component /rest/cb/executeBasicSearch of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows attackers to access sensitive user information. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T02:58:45.000000Z"}, {"uuid": "106df1c3-977a-43f6-b3cd-743fda76658e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25950", "type": "seen", "source": "https://t.me/cvedetector/19281", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25950 - Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR Unauthorized Account Creation and Modification\", \n  \"Content\": \"CVE ID : CVE-2025-25950 \nPublished : March 3, 2025, 1:15 a.m. | 28\u00a0minutes ago \nDescription : Incorrect access control in the component /rest/staffResource/update of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows create and modify user accounts, including an Administrator account. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T02:58:44.000000Z"}, {"uuid": "b1e7dd55-697d-4b77-86c5-f4aa637bd63c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2598", "type": "published-proof-of-concept", "source": "Telegram/CNCo7u9pxW3UDCEza_6pwX43cNExCuNI5ZKP87l7tNL-Bg4", "content": "", "creation_timestamp": "2025-11-24T03:00:06.000000Z"}, {"uuid": "6504168c-9db3-4851-a6c3-16d0f5c561b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25724", "type": "seen", "source": "https://t.me/cvedetector/19246", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25724 - Apache Libarchive strftime Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2025-25724 \nPublished : March 2, 2025, 2:15 a.m. | 46\u00a0minutes ago \nDescription : list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale. \nSeverity: 4.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-02T04:23:52.000000Z"}, {"uuid": "c13fc895-43b1-46a5-a481-701079d2e39c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25565", "type": "seen", "source": "https://t.me/cvedetector/20156", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25565 - SoftEther VPN Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25565 \nPublished : March 12, 2025, 4:15 p.m. | 2\u00a0hours, 58\u00a0minutes ago \nDescription : SoftEther VPN 5.02.5187 is vulnerable to Buffer Overflow in the Command.c file via the PtMakeCert and PtMakeCert2048 functions. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-12T20:23:08.000000Z"}, {"uuid": "6a1ab44b-f452-42a8-bb59-2fd7472bbf0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25566", "type": "seen", "source": "https://t.me/cvedetector/20157", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25566 - SoftEtherVPN Memory Leak Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2025-25566 \nPublished : March 12, 2025, 4:15 p.m. | 2\u00a0hours, 58\u00a0minutes ago \nDescription : Memory Leak vulnerability in SoftEtherVPN 5.02.5187 allows an attacker to cause a denial of service via the UnixMemoryAlloc function. \nSeverity: 5.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-12T20:23:09.000000Z"}, {"uuid": "df567585-513b-4268-9504-9e7bfa8e11ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25224", "type": "seen", "source": "https://t.me/cvedetector/18272", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25224 - LuxCal Web Calendar File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25224 \nPublished : Feb. 18, 2025, 1:15 a.m. | 2\u00a0hours, 6\u00a0minutes ago \nDescription : The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains a missing authentication vulnerability in dloader.php. If this vulnerability is exploited, arbitrary files on a server may be obtained. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T05:05:52.000000Z"}, {"uuid": "d796ccad-4b46-4be5-9f13-1eb4ee0d2f93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25223", "type": "seen", "source": "https://t.me/cvedetector/18271", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25223 - LuxCal Web Calendar Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25223 \nPublished : Feb. 18, 2025, 1:15 a.m. | 2\u00a0hours, 6\u00a0minutes ago \nDescription : The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains a path traversal vulnerability in dloader.php. If this vulnerability is exploited, arbitrary files on a server may be obtained. \nSeverity: 5.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T05:05:52.000000Z"}, {"uuid": "48f03779-5a5a-40dd-a0d4-842a6c459e39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25222", "type": "seen", "source": "https://t.me/cvedetector/18270", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25222 - LuxCal SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25222 \nPublished : Feb. 18, 2025, 1:15 a.m. | 2\u00a0hours, 6\u00a0minutes ago \nDescription : The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL injection vulnerability in retrieve.php. If this vulnerability is exploited, information in a database may be deleted, altered, or retrieved. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T05:05:51.000000Z"}, {"uuid": "f4c3d5c6-9ad5-4bc3-a1b9-2cb589c4649e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25221", "type": "seen", "source": "https://t.me/cvedetector/18269", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25221 - LuxCal Web Calendar SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25221 \nPublished : Feb. 18, 2025, 1:15 a.m. | 2\u00a0hours, 6\u00a0minutes ago \nDescription : The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL injection vulnerability in pdf.php. If this vulnerability is exploited, information in a database may be deleted, altered, or retrieved. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T05:05:50.000000Z"}, {"uuid": "f17e6d89-39c5-4baf-bbfc-a98c9fb746d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2539", "type": "published-proof-of-concept", "source": "Telegram/aBeyDdTI7Zum5os9PmI4HFpUmUopRMgRxo8j72qDaoO90es", "content": "", "creation_timestamp": "2025-06-09T21:00:04.000000Z"}, {"uuid": "3843a836-7058-410c-8b90-6ae15af6409d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25175", "type": "seen", "source": "https://t.me/cvedetector/20203", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25175 - Femap Memory Corruption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25175 \nPublished : March 13, 2025, 9:15 a.m. | 31\u00a0minutes ago \nDescription : A vulnerability has been identified in Simcenter Femap V2401 (All versions < V2401.0003), Simcenter Femap V2406 (All versions < V2406.0002). The affected application contains a memory corruption vulnerability while  parsing specially crafted .NEU files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-25443) \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-13T11:26:18.000000Z"}, {"uuid": "8f2c25b2-6e6a-4d31-bc01-ed0deffad480", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25032", "type": "seen", "source": "Telegram/d4nUwsOBOdQROW01SEnvl_Ro6E92wcWw7AWRntwHKYeAQB4", "content": "", "creation_timestamp": "2025-06-11T20:16:15.000000Z"}, {"uuid": "51e722a1-64cb-4ea5-ab26-f15e52dd9dc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2562", "type": "seen", "source": "https://t.me/cvedetector/21205", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2562 - Devolutions Remote Desktop Manager Inadequate Logging in Autotyping Feature\", \n  \"Content\": \"CVE ID : CVE-2025-2562 \nPublished : March 26, 2025, 6:15 p.m. | 31\u00a0minutes ago \nDescription : Insufficient logging in the autotyping feature in Devolutions Remote Desktop Manager on Windows allows an authenticated user to use a stored password without generating a corresponding log event, via the use of the autotyping functionality.  \n  \n  \n  \n  \n  \n  \n  \nThis issue affects Remote Desktop Manager versions from 2025.1.24 through 2025.1.25, and all versions up to 2024.3.29. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T20:34:50.000000Z"}, {"uuid": "54d6ab20-ec7b-4389-8b84-9f09b9a1b491", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2528", "type": "seen", "source": "https://t.me/cvedetector/21204", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2528 - Devolutions Remote Desktop Manager Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-2528 \nPublished : March 26, 2025, 6:15 p.m. | 31\u00a0minutes ago \nDescription : Improper authorization in application password policy in Devolutions Remote Desktop Manager on Windows allows an authenticated user to   \nuse a configuration different from the one mandated by the system administrators.  \n  \n  \n  \n  \n  \nThis issue affects Remote Desktop Manager versions from 2025.1.24 through 2025.1.25, and all versions up to 2024.3.29. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T20:34:49.000000Z"}, {"uuid": "1dca62f5-a8db-4015-b8af-6d2b679f1909", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25055", "type": "seen", "source": "https://t.me/cvedetector/18266", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25055 - FileMegane Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25055 \nPublished : Feb. 18, 2025, 12:15 a.m. | 1\u00a0hour, 5\u00a0minutes ago \nDescription : Authentication bypass by spoofing issue exists in FileMegane versions above 1.0.0.0 prior to 3.4.0.0, which may lead to user impersonation. If exploited, restricted file contents may be accessed. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T02:35:20.000000Z"}, {"uuid": "bf0a8142-85ee-4d23-8c5f-ab1aa6192a3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25625", "type": "seen", "source": "https://t.me/cvedetector/20218", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25625 - FS Inc S3150 8T2F Switch Stored Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25625 \nPublished : March 13, 2025, 3:15 p.m. | 41\u00a0minutes ago \nDescription : FS Inc S3150 8T2F Switch s3150-8t2f-switch-fsos-220d_118101 has a stored cross-site scripting (XSS) vulnerability in the web management interface. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-13T17:17:23.000000Z"}, {"uuid": "f04dfd87-2f54-41c9-b088-6b6414354129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25711", "type": "seen", "source": "https://t.me/cvedetector/20152", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25711 - Apache tNexus Airport View Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25711 \nPublished : March 12, 2025, 4:15 p.m. | 2\u00a0hours, 58\u00a0minutes ago \nDescription : An issue in dtp.ae tNexus Airport View v.2.8 allows a remote attacker to escalate privileges via the ProfileID value to the [/tnexus/rest/admin/updateUser] API endpoint \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-12T20:23:02.000000Z"}, {"uuid": "7d564ca4-7e45-49b4-9bac-58bb9ab5cd8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25293", "type": "seen", "source": "https://t.me/cvedetector/20177", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25293 - Ruby-SAML zlib Compression Denial of Service (DoS)\", \n  \"Content\": \"CVE ID : CVE-2025-25293 \nPublished : March 12, 2025, 9:15 p.m. | 2\u00a0hours, 8\u00a0minutes ago \nDescription : ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. Prior to versions 1.12.4 and 1.18.0, ruby-saml is susceptible to remote Denial of Service (DoS) with compressed SAML responses. ruby-saml uses zlib to decompress SAML responses in case they're compressed. It is possible to bypass the message size check with a compressed assertion since the message size is checked before inflation and not after. This issue may lead to remote Denial of Service (DoS). Versions 1.12.4 and 1.18.0 fix the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-13T00:34:10.000000Z"}, {"uuid": "4d5b0bbd-51c0-452f-b449-d54b6ff08e73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25292", "type": "seen", "source": "https://t.me/cvedetector/20176", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25292 - Apache Ruby SAML XML Parser Signature Wrapping Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-25292 \nPublished : March 12, 2025, 9:15 p.m. | 2\u00a0hours, 8\u00a0minutes ago \nDescription : ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. An authentication bypass vulnerability was found in ruby-saml prior to versions 1.12.4 and 1.18.0 due to a parser differential. ReXML and Nokogiri parse XML differently, the parsers can generate entirely different document structures from the same XML input. That allows an attacker to be able to execute a Signature Wrapping attack. This issue may lead to authentication bypass. Versions 1.12.4 and 1.18.0 contain a patch for the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-13T00:34:10.000000Z"}, {"uuid": "df1d2c75-5b0a-400c-9223-191ed7cffae8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "seen", "source": "https://t.me/cvedetector/20175", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25291 - Apache Ruby-SAML XML Parser Signature Wrapping Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-25291 \nPublished : March 12, 2025, 9:15 p.m. | 2\u00a0hours, 8\u00a0minutes ago \nDescription : ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. An authentication bypass vulnerability was found in ruby-saml prior to versions 1.12.4 and 1.18.0 due to a parser differential. ReXML and Nokogiri parse XML differently; the parsers can generate entirely different document structures from the same XML input. That allows an attacker to be able to execute a Signature Wrapping attack. This issue may lead to authentication bypass. Versions 1.12.4 and 1.18.0 fix the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-13T00:34:09.000000Z"}, {"uuid": "701688fa-cb13-4f0a-8988-c4d46bcd980e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25975", "type": "seen", "source": "https://t.me/cvedetector/20167", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25975 - Git Parse Config Sensitive Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-25975 \nPublished : March 12, 2025, 7:15 p.m. | 1\u00a0hour, 49\u00a0minutes ago \nDescription : An issue in parse-git-config v.3.0.0 allows an attacker to obtain sensitive information via the expandKeys function \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-12T22:53:43.000000Z"}, {"uuid": "f8d3bfe2-0a41-4586-a1b2-eb35f3a0f78f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25568", "type": "seen", "source": "https://t.me/cvedetector/20159", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25568 - SoftEtherVPN Use After Free Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2025-25568 \nPublished : March 12, 2025, 4:15 p.m. | 2\u00a0hours, 58\u00a0minutes ago \nDescription : SoftEtherVPN 5.02.5187 is vulnerable to Use after Free in the Command.c file via the CheckNetworkAcceptThread function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-12T20:23:11.000000Z"}, {"uuid": "a8accdfc-57f8-4468-b372-f5a9c6cf355d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25567", "type": "seen", "source": "https://t.me/cvedetector/20158", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25567 - SoftEther VPN Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25567 \nPublished : March 12, 2025, 4:15 p.m. | 2\u00a0hours, 58\u00a0minutes ago \nDescription : SoftEther VPN 5.02.5187 is vulnerable to Buffer Overflow in Internat.c via the UniToStrForSingleChars function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-12T20:23:10.000000Z"}, {"uuid": "dbd637c1-32b8-4bfd-8893-d3b61da445d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25683", "type": "seen", "source": "https://t.me/cvedetector/20148", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25683 - AlekSIS-Core Unauthenticated PDF File Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25683 \nPublished : March 12, 2025, 5:15 p.m. | 1\u00a0hour, 58\u00a0minutes ago \nDescription : AlekSIS-Core is vulnerable to Incorrect Access Control. Unauthenticated users can access all PDF files. This affects AlekSIS-Core 3.0, 3.1, 3.1.1, 3.1.2, 3.1.3, 3.1.4, 3.1.5, 3.1.6, 3.2.0 and 3.2.1. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-12T20:22:56.000000Z"}, {"uuid": "6d30db69-ce2d-4137-8d44-b38474778b29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25774", "type": "seen", "source": "https://t.me/cvedetector/20147", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25774 - Open5GS AMF Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25774 \nPublished : March 12, 2025, 5:15 p.m. | 1\u00a0hour, 58\u00a0minutes ago \nDescription : An issue was discovered in Open5GS v2.7.2. When a UE switches between two gNBs and sends a handover request at a specific time, it may cause an exception in the AMF's internal state machine, leading to an AMF crash and resulting in a Denial of Service (DoS). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-12T20:22:56.000000Z"}, {"uuid": "c6348131-7295-42db-9a1a-ce79e5ee9572", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/43972", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aExplore the CVE-2025-25257 exploit for FortiWeb. This repo includes a full exploit and a proof of concept for file read/write. \ud83d\udc31\ud83d\udcbb\ud83d\udd12\nURL\uff1ahttps://github.com/mtjanus106/CVE-2025-25257\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-07-14T05:19:14.000000Z"}, {"uuid": "206b9c6c-f26b-4282-9154-115e8c9e21f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25264", "type": "seen", "source": "Telegram/rWCmDShs9kyN-Ac2IJ6oBoNksY3QzSzid5WB25gwy_nslFg", "content": "", "creation_timestamp": "2025-06-16T10:33:51.000000Z"}, {"uuid": "52d6aa44-ad06-414a-9f0a-24bc3f15241d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25265", "type": "seen", "source": "Telegram/rWCmDShs9kyN-Ac2IJ6oBoNksY3QzSzid5WB25gwy_nslFg", "content": "", "creation_timestamp": "2025-06-16T10:33:51.000000Z"}, {"uuid": "3f2995ba-ef3d-4e42-9e0d-8f24f4da6a3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25008", "type": "seen", "source": "https://t.me/cvedetector/20114", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25008 - Microsoft Windows Link Following Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25008 \nPublished : March 11, 2025, 5:16 p.m. | 1\u00a0hour, 6\u00a0minutes ago \nDescription : Improper link resolution before file access ('link following') in Microsoft Windows allows an authorized attacker to elevate privileges locally. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T20:08:27.000000Z"}, {"uuid": "a40806d4-3b69-41df-81fc-d4254eebf526", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2558", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-2558.yaml", "content": "", "creation_timestamp": "2026-04-09T02:52:43.000000Z"}, {"uuid": "9134828b-186b-4c53-8250-e46c86562100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25003", "type": "seen", "source": "https://t.me/cvedetector/20113", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25003 - \"Visual Studio Uncontrolled Search Path Element Privilege Escalation Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-25003 \nPublished : March 11, 2025, 5:16 p.m. | 1\u00a0hour, 6\u00a0minutes ago \nDescription : Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T20:08:27.000000Z"}, {"uuid": "89667867-9ac4-4445-bef5-71ad098590ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25266", "type": "seen", "source": "https://t.me/cvedetector/20076", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25266 - Tecnomatix Plant Simulation Unrestricted File Deletion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25266 \nPublished : March 11, 2025, 10:15 a.m. | 1\u00a0hour, 55\u00a0minutes ago \nDescription : A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0021), Tecnomatix Plant Simulation V2404 (All versions < V2404.0010). The affected application does not properly restrict access to the file deletion functionality.  \nThis could allow an unauthorized attacker to delete files even when access to the system should be prohibited, resulting in potential data loss or unauthorized modification of system files. \nSeverity: 6.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T13:26:52.000000Z"}, {"uuid": "077618ab-fe7f-42b2-8f5e-5cf3b1eff199", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2558", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mj67us6sjt2o", "content": "", "creation_timestamp": "2026-04-10T21:03:09.036017Z"}, {"uuid": "af5e4ea7-3862-4fc5-88c1-0ee318b013f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25267", "type": "seen", "source": "https://t.me/cvedetector/20067", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25267 - Tecnomatix Plant Simulation File Access Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25267 \nPublished : March 11, 2025, 10:15 a.m. | 1\u00a0hour, 55\u00a0minutes ago \nDescription : A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0021), Tecnomatix Plant Simulation V2404 (All versions < V2404.0010). The affected application does not properly restrict the scope of files accessible to the simulation model. This could allow an unauthorized attacker to compromise the confidentiality of the system. \nSeverity: 6.2 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T13:26:43.000000Z"}, {"uuid": "e9fa8afd-e184-4bd1-a8d2-e65b00e1a781", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2539", "type": "published-proof-of-concept", "source": "Telegram/aWscXhYr1A8gWeZdQHMz20x8VhjQaEeRrEle8W6cDW3lY_0", "content": "", "creation_timestamp": "2025-06-21T15:00:09.000000Z"}, {"uuid": "27ed6f4a-c314-44ef-8fb8-2db62839d5cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25616", "type": "seen", "source": "https://t.me/cvedetector/19956", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25616 - Unifiedtransform Exam Rule Access Control Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-25616 \nPublished : March 10, 2025, 2:15 p.m. | 57\u00a0minutes ago \nDescription : Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows students to modify rules for exams. The affected endpoint is /exams/edit-rule?exam_rule_id=1. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-10T16:31:53.000000Z"}, {"uuid": "9bd64d31-4cea-47b8-aa06-1f61ccafe3f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25244", "type": "seen", "source": "https://t.me/cvedetector/20024", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25244 - SAP Business Warehouse Authorization Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-25244 \nPublished : March 11, 2025, 1:15 a.m. | 24\u00a0minutes ago \nDescription : SAP Business Warehouse (Process Chains) allows an attacker to manipulate the process execution due to missing authorization check. An attacker with display authorization for the process chain object could set one or all processes to be skipped. This means corresponding activities, such as data loading, activation, or deletion, will not be executed as initially modeled. This could lead to unexpected results in business reporting leading to a significant impact on integrity. However, there is no impact on confidentiality or availability. \nSeverity: 5.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T03:24:48.000000Z"}, {"uuid": "5e19cfa7-1a2a-4cc2-9054-6c5e9fefe66d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25242", "type": "seen", "source": "https://t.me/cvedetector/20023", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25242 - SAP NetWeaver Application Server ABAP Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25242 \nPublished : March 11, 2025, 1:15 a.m. | 24\u00a0minutes ago \nDescription : SAP NetWeaver Application Server ABAP allows malicious scripts to be executed in the application, potentially leading to a Cross-Site Scripting (XSS) vulnerability. This has no impact on the availability of the application, but it can have some minor impact on its confidentiality and integrity. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T03:24:47.000000Z"}, {"uuid": "ce6c86c7-ec1e-4c11-b162-6e7632310272", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25977", "type": "seen", "source": "https://t.me/cvedetector/19965", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25977 - Canvg StyleElement Constructor Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25977 \nPublished : March 10, 2025, 4:15 p.m. | 1\u00a0hour, 7\u00a0minutes ago \nDescription : An issue in canvg v.4.0.2 allows an attacker to execute arbitrary code via the Constructor of the class StyleElement. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-10T19:02:30.000000Z"}, {"uuid": "70f730a4-65b2-4399-b6ae-52175d84f11c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25940", "type": "seen", "source": "https://t.me/cvedetector/19964", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25940 - VisiCut XML Deserialization Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25940 \nPublished : March 10, 2025, 4:15 p.m. | 1\u00a0hour, 7\u00a0minutes ago \nDescription : VisiCut 2.1 allows code execution via Insecure XML Deserialization in the loadPlfFile method of VisicutModel.java. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-10T19:02:30.000000Z"}, {"uuid": "92497fec-7acf-42bf-8a51-f2dcd68720b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25382", "type": "seen", "source": "https://t.me/cvedetector/19963", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25382 - \"Information Kerala Mission SANCHAYA Payment Amount Manipulation Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-25382 \nPublished : March 10, 2025, 4:15 p.m. | 1\u00a0hour, 7\u00a0minutes ago \nDescription : An issue in the Property Tax Payment Portal in Information Kerala Mission SANCHAYA v3.0.4 allows attackers to arbitrarily modify payment amounts via a crafted request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-10T19:02:29.000000Z"}, {"uuid": "6c915809-5e48-4423-8b84-c991286e0cf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25245", "type": "seen", "source": "https://t.me/cvedetector/20019", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25245 - SAP BusinessObjects Business Intelligence Platform Web Intelligence Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-25245 \nPublished : March 11, 2025, 1:15 a.m. | 24\u00a0minutes ago \nDescription : SAP BusinessObjects Business Intelligence Platform (Web Intelligence) contains a deprecated web application endpoint that is not properly secured. An attacker could take advantage of this by injecting a malicious url in the data returned to the user. On successful exploitation, there could be a limited impact on confidentiality and integrity within the scope of victim\ufffds browser. There is no impact on availability. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T03:24:41.000000Z"}, {"uuid": "ee3176b3-64ee-4c56-a005-a3750ec09835", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25908", "type": "seen", "source": "https://t.me/cvedetector/20004", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25908 - Tianti Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25908 \nPublished : March 10, 2025, 10:15 p.m. | 1\u00a0hour, 23\u00a0minutes ago \nDescription : A stored cross-site scripting (XSS) vulnerability in tianti v2.3 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the coverImageURL parameter at /article/ajax/save. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T00:54:08.000000Z"}, {"uuid": "f740f14c-3ecd-4585-8de9-b2c06e1e5c85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25052", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15073", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25052\n\ud83d\udd25 CVSS Score: 3.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through buffer overflow.\n\ud83d\udccf Published: 2025-05-06T09:03:38.566Z\n\ud83d\udccf Modified: 2025-05-06T09:03:38.566Z\n\ud83d\udd17 References:\n1. https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-05.md", "creation_timestamp": "2025-05-06T09:21:15.000000Z"}, {"uuid": "f2388ae6-4650-441a-a75d-5c9c950099fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2580", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13383", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2580\n\ud83d\udd25 CVSS Score: 4.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Contact Form by Bit Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.18.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.\n\ud83d\udccf Published: 2025-04-25T05:25:06.373Z\n\ud83d\udccf Modified: 2025-04-25T05:25:06.373Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/1f3b5d85-a8b0-43ac-b593-a61e20b9a4ca?source=cve\n2. https://wordpress.org/plugins/bit-form/#developers\n3. https://plugins.trac.wordpress.org/changeset/3271396/", "creation_timestamp": "2025-04-25T06:10:53.000000Z"}, {"uuid": "c5e911d9-2470-4936-896c-f2487a311dfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25907", "type": "seen", "source": "https://t.me/cvedetector/20006", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25907 - Tianti Cross-Site Request Forgery (CSRF)\", \n  \"Content\": \"CVE ID : CVE-2025-25907 \nPublished : March 10, 2025, 10:15 p.m. | 1\u00a0hour, 23\u00a0minutes ago \nDescription : tianti v2.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /user/ajax/save. This vulnerability allows attackers to execute arbitrary operations via a crafted GET or POST request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T00:54:12.000000Z"}, {"uuid": "857f2c80-65d6-4474-8551-5344d82a6abd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25306", "type": "seen", "source": "https://t.me/cvedetector/19994", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25306 - Misskey ActivityPub Object Authority Validation Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-25306 \nPublished : March 10, 2025, 7:15 p.m. | 2\u00a0hours, 17\u00a0minutes ago \nDescription : Misskey is an open source, federated social media platform. The patch for CVE-2024-52591 did not sufficiently validate the relation between the `id` and `url` fields of ActivityPub objects. An attacker can forge an object where they claim authority in the `url` field even if the specific ActivityPub object type require authority in the `id` field. Version 2025.2.1 addresses the issue. \nSeverity: 9.3 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-10T23:13:49.000000Z"}, {"uuid": "a4445a1b-541e-4357-81eb-d2e55450688f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25620", "type": "seen", "source": "https://t.me/cvedetector/19970", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25620 - Unifiedtransform XSS in Create Assignment Function\", \n  \"Content\": \"CVE ID : CVE-2025-25620 \nPublished : March 10, 2025, 3:15 p.m. | 2\u00a0hours, 7\u00a0minutes ago \nDescription : Unifiedtransform 2.0 is vulnerable to Cross Site Scripting (XSS) in the Create assignment function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-10T19:02:37.000000Z"}, {"uuid": "f3e39222-7bc3-494a-8a55-88b05920340c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25614", "type": "seen", "source": "https://t.me/cvedetector/19969", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25614 - Apache Unifiedtransform Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25614 \nPublished : March 10, 2025, 3:15 p.m. | 2\u00a0hours, 7\u00a0minutes ago \nDescription : Incorrect Access Control in Unifiedtransform 2.0 leads to Privilege Escalation, which allows teachers to update the personal data of fellow teachers. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-10T19:02:36.000000Z"}, {"uuid": "2f9eb663-75fd-4904-82c4-e9920f304a0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25615", "type": "seen", "source": "https://t.me/cvedetector/19960", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25615 - Unifiedtransform Attendance List Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-25615 \nPublished : March 10, 2025, 2:15 p.m. | 57\u00a0minutes ago \nDescription : Unifiedtransform 2.0 is vulnerable to Incorrect Access Control which allows viewing attendance list for all class sections. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-10T16:31:59.000000Z"}, {"uuid": "bbccba5a-8587-41ed-9fb9-d5c9767ecffa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "published-proof-of-concept", "source": "https://t.me/cKure/15050", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 Pre-Auth SQLi in Fortinet.\n\nhttps://labs.watchtowr.com/pre-auth-sql-injection-to-rce-fortinet-fortiweb-fabric-connector-cve-2025-25257/", "creation_timestamp": "2025-07-13T12:55:53.000000Z"}, {"uuid": "7f83fe21-f260-4256-8a86-4062e39e61f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://t.me/TengkorakCyberCrewzz/3690", "content": "Fortinet Releases Patch for Critical SQL Injection Flaw in FortiWeb (CVE-2025-25257) \u2013 thehackernews.com\n\nFri, 11 Jul 2025 22:38:00", "creation_timestamp": "2025-07-11T16:03:43.000000Z"}, {"uuid": "1782c2e0-e9a4-438b-85f3-9cc8b8c293fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25617", "type": "seen", "source": "https://t.me/cvedetector/19833", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25617 - Oracle Unifiedtransform Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25617 \nPublished : March 7, 2025, 4:15 p.m. | 58\u00a0minutes ago \nDescription : Incorrect Access Control in Unifiedtransform 2.X leads to Privilege Escalation allowing teachers to create syllabus. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T18:17:19.000000Z"}, {"uuid": "d6226ade-0cdb-4122-88b8-b306501b7c31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25769", "type": "seen", "source": "https://t.me/cvedetector/18688", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25769 - Wangmarket CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25769 \nPublished : Feb. 21, 2025, 7:15 p.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : Wangmarket v4.10 to v5.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /controller/UserController.java. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T22:17:18.000000Z"}, {"uuid": "cbe572a5-a94d-4dd7-bee5-c57b05a036de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25768", "type": "seen", "source": "https://t.me/cvedetector/18687", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25768 - MRCMS Server-Side Template Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25768 \nPublished : Feb. 21, 2025, 7:15 p.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : MRCMS v3.1.2 was discovered to contain a server-side template injection (SSTI) vulnerability in the component \\servlet\\DispatcherServlet.java. This vulnerability allows attackers to execute arbitrary code via a crafted payload. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T22:17:14.000000Z"}, {"uuid": "a1e06c2f-2729-4bde-8c73-fec7c47e0a23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25767", "type": "seen", "source": "https://t.me/cvedetector/18686", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25767 - MRCMS Vertical Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25767 \nPublished : Feb. 21, 2025, 7:15 p.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : A vertical privilege escalation vulnerability in the component /controller/UserController.java of MRCMS v3.1.2 allows attackers to arbitrarily delete users via a crafted request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T22:17:13.000000Z"}, {"uuid": "cb17d832-4eb8-4376-958c-63b90a131d0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25034", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-20)", "content": "", "creation_timestamp": "2026-04-20T00:00:00.000000Z"}, {"uuid": "4510e0a5-291b-4f0d-9f5e-cfdb30cb793b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25034", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-20)", "content": "", "creation_timestamp": "2026-04-20T00:00:00.000000Z"}, {"uuid": "d93d4548-5360-4238-9816-b38151c1320e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "Telegram/Gv0FtjdOX4I0ShtCLmMkoMqWbC55I4JC7vyObeg-shKMzg", "content": "", "creation_timestamp": "2025-07-12T21:32:01.000000Z"}, {"uuid": "dd56b202-9eeb-4861-869a-af75a9ca0246", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25763", "type": "seen", "source": "https://t.me/cvedetector/19754", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25763 - \"CRMEB SQL Injection\"\", \n  \"Content\": \"CVE ID : CVE-2025-25763 \nPublished : March 6, 2025, 9:15 p.m. | 1\u00a0hour, 10\u00a0minutes ago \nDescription : crmeb CRMEB-KY v5.4.0 and before has a SQL Injection vulnerability at getRead() in /system/SystemDatabackupServices.php \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T23:52:54.000000Z"}, {"uuid": "e625cd73-d30b-4b87-acb1-d42db4aedde7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25775", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13468", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25775\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Codeastro Bus Ticket Booking System v1.0 is vulnerable to SQL injection via the kodetiket parameter in /BusTicket-CI/tiket/cekorder.\n\ud83d\udccf Published: 2025-04-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-25T16:58:41.878Z\n\ud83d\udd17 References:\n1. https://codeastro.com/bus-ticket-booking-system-in-php-codeigniter-with-source-code/\n2. https://github.com/arunmodi/Vulnerability-Research/tree/main/CVE-2025-25775", "creation_timestamp": "2025-04-25T17:07:48.000000Z"}, {"uuid": "b7d379d5-7c7a-40d7-a1d4-399194f886e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2502", "type": "published-proof-of-concept", "source": "Telegram/XRlIyZz-CP9DGPDUnkpM2rQ69nWBXf9u1F_euOSP58SyFZw", "content": "", "creation_timestamp": "2025-09-05T15:00:07.000000Z"}, {"uuid": "1379179f-991c-4b8b-bcab-9c950dbda591", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25497", "type": "seen", "source": "https://t.me/cvedetector/19756", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25497 - Netsweeper Server Account Owner Manipulation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25497 \nPublished : March 6, 2025, 8:15 p.m. | 2\u00a0hours, 10\u00a0minutes ago \nDescription : An issue in account management interface in Netsweeper Server v.8.2.6 and earlier (fixed in v.8.2.7) allows unauthorized changes to the \"Account Owner\" field due to client-side-only restrictions and a lack of server-side validation. This vulnerability enables account ownership reassignment to or away from any user. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T23:52:55.000000Z"}, {"uuid": "81783674-712a-45fd-ac5b-aefd049d6294", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25037", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-22)", "content": "", "creation_timestamp": "2026-04-22T00:00:00.000000Z"}, {"uuid": "5e431c27-33c8-4cf2-9a7c-a124baa6f278", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25460", "type": "seen", "source": "https://t.me/cvedetector/18797", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25460 - FlatPress Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2025-25460 \nPublished : Feb. 24, 2025, 4:15 p.m. | 36\u00a0minutes ago \nDescription : A stored Cross-Site Scripting (XSS) vulnerability was identified in FlatPress 1.3.1 within the \"Add Entry\" feature. This vulnerability allows authenticated attackers to inject malicious JavaScript payloads into blog posts, which are executed when other users view the posts. The issue arises due to improper input sanitization of the \"TextArea\" field in the blog entry submission form. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-24T17:57:36.000000Z"}, {"uuid": "aad481ff-c54c-4580-975b-6fb3970074c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25279", "type": "seen", "source": "https://t.me/cvedetector/18788", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25279 - Mattermost File Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25279 \nPublished : Feb. 24, 2025, 8:15 a.m. | 30\u00a0minutes ago \nDescription : Mattermost versions 10.4.x <=<=<=<=\nSeverity: 9.9 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-24T10:26:04.000000Z"}, {"uuid": "076320c4-6ce5-4d0a-b47f-6f9507efa45c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25505", "type": "seen", "source": "https://t.me/cvedetector/18675", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25505 - Tenda AC6 Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25505 \nPublished : Feb. 21, 2025, 5:15 p.m. | 1\u00a0hour, 23\u00a0minutes ago \nDescription : Tenda AC6 15.03.05.16_multi is vulnerable to Buffer Overflow in the sub_452A4 function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T19:46:48.000000Z"}, {"uuid": "722a626e-b8ff-4686-aa32-dd0ede135f55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25282", "type": "seen", "source": "https://t.me/cvedetector/18698", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25282 - RAGFlow IDOR: Cross-Tenant Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25282 \nPublished : Feb. 21, 2025, 9:15 p.m. | 1\u00a0hour, 33\u00a0minutes ago \nDescription : RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine based on deep document understanding. An authenticated user can exploit the Insecure Direct Object Reference (IDOR) vulnerability that may lead to unauthorized cross-tenant access (list tenant user accounts, add user account into other tenant). Unauthorized cross-tenant access: list user from other tenant (e.g., via GET //user/list), add user account to other tenant (POST //user). This issue has not yet been patched. Users are advised to reach out to the project maintainers to coordinate a fix. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T23:57:36.000000Z"}, {"uuid": "93941589-34c5-465c-8ea2-49e74e36b6db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25354", "type": "seen", "source": "Telegram/b5wvMg1w3p7qRhdMURiaiP-ta418hujhOlf8t8bJHLtWAuUt", "content": "", "creation_timestamp": "2025-02-14T21:09:18.000000Z"}, {"uuid": "8a4b1479-3739-4cd5-b5e9-00e5f810f8e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25352", "type": "seen", "source": "Telegram/PPVJHQamHD5ae_1SGSM-6xQs-bf4TYPylZZtiz5yIcs-zxBk", "content": "", "creation_timestamp": "2025-02-14T21:09:18.000000Z"}, {"uuid": "41fe2e83-e6a6-436c-8c55-2e3d9b2ba4be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25675", "type": "seen", "source": "https://t.me/cvedetector/18614", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25675 - Tenda AC10 Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25675 \nPublished : Feb. 20, 2025, 11:15 p.m. | 27\u00a0minutes ago \nDescription : Tenda AC10 V1.0 V15.03.06.23 has a command injection vulnerablility located in the formexeCommand function. The str variable receives the cmdinput parameter from a POST request and is later assigned to the cmd_buf variable, which is directly used in the doSystemCmd function, causing an arbitrary command execution. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T00:56:10.000000Z"}, {"uuid": "c557176d-9148-4459-9fb0-1fc467034799", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25676", "type": "seen", "source": "https://t.me/cvedetector/18613", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25676 - Tenda i12 Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2025-25676 \nPublished : Feb. 20, 2025, 11:15 p.m. | 27\u00a0minutes ago \nDescription : Tenda i12 V1.0.0.10(3805) was discovered to contain a buffer overflow via the list parameter in the formwrlSSIDset function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T00:55:49.000000Z"}, {"uuid": "a091ac08-30e2-486d-ad85-d229a6cdead3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25674", "type": "seen", "source": "https://t.me/cvedetector/18612", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25674 - Tenda AC10 Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2025-25674 \nPublished : Feb. 20, 2025, 11:15 p.m. | 27\u00a0minutes ago \nDescription : Tenda AC10 V1.0 V15.03.06.23 is vulnerable to Buffer Overflow in form_fast_setting_wifi_set via the parameter ssid. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T00:55:43.000000Z"}, {"uuid": "786f9d3e-886a-49e7-abb3-a0b6bda3e695", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25668", "type": "seen", "source": "https://t.me/cvedetector/18611", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25668 - Tenda AC8V4 Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2025-25668 \nPublished : Feb. 20, 2025, 11:15 p.m. | 27\u00a0minutes ago \nDescription : Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the shareSpeed parameter in the sub_47D878 function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T00:55:15.000000Z"}, {"uuid": "bb33c8dc-1e2a-45ad-8720-97c4a9a72060", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25667", "type": "seen", "source": "https://t.me/cvedetector/18610", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25667 - Tenda AC8V4 Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25667 \nPublished : Feb. 20, 2025, 11:15 p.m. | 27\u00a0minutes ago \nDescription : Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the urls parameter in the function get_parentControl_list_Info. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T00:55:14.000000Z"}, {"uuid": "6e4a7e21-f27d-4585-96da-391cbc69d454", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25772", "type": "seen", "source": "https://t.me/cvedetector/18689", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25772 - Jspxcms CSRF: Administrator Account Creation\", \n  \"Content\": \"CVE ID : CVE-2025-25772 \nPublished : Feb. 21, 2025, 7:15 p.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : A Cross-Site Request Forgery (CSRF) in the component /back/UserController.java of Jspxcms v9.0 to v9.5 allows attackers to arbitrarily add Administrator accounts via a crafted request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T22:17:19.000000Z"}, {"uuid": "e1938dfe-016b-4006-a027-f02171f64159", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25605", "type": "seen", "source": "https://t.me/cvedetector/18683", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25605 - Totolink X5000R Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25605 \nPublished : Feb. 21, 2025, 7:15 p.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : Totolink X5000R V9.1.0u.6369_B20230113 is vulnerable to command injection via the apcli_wps_gen_pincode function in mtkwifi.lua. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T22:17:11.000000Z"}, {"uuid": "81d0193e-030d-4e7a-8854-cdd68a98cf41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25604", "type": "seen", "source": "https://t.me/cvedetector/18685", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25604 - Totolink X5000R Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25604 \nPublished : Feb. 21, 2025, 7:15 p.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : Totolink X5000R V9.1.0u.6369_B20230113 is vulnerable to command injection via the vif_disable function in mtkwifi.lua. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T22:17:13.000000Z"}, {"uuid": "8b97a1dc-3d0c-4030-9fc4-ccb5730f9daf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25770", "type": "seen", "source": "https://t.me/cvedetector/18684", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25770 - Wangmarket Cross-Site Request Forgery (CSRF)\", \n  \"Content\": \"CVE ID : CVE-2025-25770 \nPublished : Feb. 21, 2025, 7:15 p.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : Wangmarket v4.10 to v5.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /agency/AgencyUserController.java. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T22:17:12.000000Z"}, {"uuid": "b2a5a38c-e31c-4c9f-a38a-03a27c4e6119", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25507", "type": "seen", "source": "https://t.me/cvedetector/18672", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25507 - Tenda AC6 Remote Command Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25507 \nPublished : Feb. 21, 2025, 5:15 p.m. | 1\u00a0hour, 23\u00a0minutes ago \nDescription : There is a RCE vulnerability in Tenda AC6 15.03.05.16_multi. In the formexeCommand function, the parameter cmdinput will cause remote command execution. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T19:46:43.000000Z"}, {"uuid": "07051b61-8b1a-4713-9a72-8ca4573a4ee2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25875", "type": "seen", "source": "https://t.me/cvedetector/18668", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25875 - ITSourcecode Simple ChatBox SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25875 \nPublished : Feb. 21, 2025, 6:16 p.m. | 22\u00a0minutes ago \nDescription : A vulnerability was found in ITSourcecode Simple ChatBox up to 1.0. This vulnerability affects unknown code of the file /message.php. The attack can use SQL injection to obtain sensitive data. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T19:46:40.000000Z"}, {"uuid": "3bcd12b1-9946-4790-a197-2a5b037deae3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25766", "type": "seen", "source": "https://t.me/cvedetector/18667", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25766 - MRCMS Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2025-25766 \nPublished : Feb. 21, 2025, 6:16 p.m. | 22\u00a0minutes ago \nDescription : An arbitrary file upload vulnerability in the component /file/savefile.do of MRCMS v3.1.2 allows attackers to execute arbitrary code via uploading a crafted .jsp file. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T19:46:36.000000Z"}, {"uuid": "bfaead24-217a-4faf-a350-820f39ed1b09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25765", "type": "seen", "source": "https://t.me/cvedetector/18666", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25765 - MRCMS Unauthenticated Arbitrary File Write Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25765 \nPublished : Feb. 21, 2025, 6:16 p.m. | 22\u00a0minutes ago \nDescription : MRCMS v3.1.2 was discovered to contain an arbitrary file write vulnerability via the component /file/save.do. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T19:46:36.000000Z"}, {"uuid": "13c7d524-c844-4eff-a71e-ccc64804faf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25878", "type": "seen", "source": "https://t.me/cvedetector/18665", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25878 - ITSourcecode Simple ChatBox SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25878 \nPublished : Feb. 21, 2025, 6:16 p.m. | 22\u00a0minutes ago \nDescription : A vulnerability was found in ITSourcecode Simple ChatBox up to 1.0. This vulnerability affects unknown code of the file /del.php. The attack can use SQL injection to obtain sensitive data. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T19:46:35.000000Z"}, {"uuid": "893d0d1e-db0e-4f4f-836b-f3db857df7c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25877", "type": "seen", "source": "https://t.me/cvedetector/18664", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25877 - ITSourcecode Simple ChatBox SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25877 \nPublished : Feb. 21, 2025, 6:16 p.m. | 22\u00a0minutes ago \nDescription : A vulnerability was found in ITSourcecode Simple ChatBox up to 1.0. This vulnerability affects unknown code of the file /admin.php. The attack can use SQL injection to obtain sensitive data. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T19:46:34.000000Z"}, {"uuid": "ca26af09-48ed-4837-9091-abe262eb6935", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "published-proof-of-concept", "source": "Telegram/V2mdqKSMgeppzzH_bE3cFMrZOnKGN3nTDPR1wp6Bw5A2fQQ", "content": "", "creation_timestamp": "2025-07-15T15:00:06.000000Z"}, {"uuid": "1a81dccf-66f2-4fd7-bac9-6b8cf42ac8d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25510", "type": "seen", "source": "https://t.me/cvedetector/18673", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25510 - Tenda AC8 Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25510 \nPublished : Feb. 21, 2025, 5:15 p.m. | 1\u00a0hour, 23\u00a0minutes ago \nDescription : Tenda AC8 V16.03.34.06 is vulnerable to Buffer Overflow in the get_parentControl_list_Info function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T19:46:47.000000Z"}, {"uuid": "ab611d9e-1480-46e3-8277-c98abfa1c299", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25876", "type": "seen", "source": "https://t.me/cvedetector/18663", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25876 - ITSourcecode Simple ChatBox SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25876 \nPublished : Feb. 21, 2025, 6:16 p.m. | 22\u00a0minutes ago \nDescription : A vulnerability was found in ITSourcecode Simple ChatBox up to 1.0. This vulnerability affects unknown code of the file /delete.php. The attack can use SQL injection to obtain sensitive data. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T19:46:33.000000Z"}, {"uuid": "889638e3-7b66-4a80-a76b-305642fece7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "published-proof-of-concept", "source": "Telegram/5aUcibga9ahdvEaXGsFmNWu2zpz13cdX6Lx4aj6F7TA15sg", "content": "", "creation_timestamp": "2025-07-15T23:00:10.000000Z"}, {"uuid": "8ed68d9c-568a-446b-a35f-09cbf3561dad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "exploited", "source": "Telegram/1P3RdXBJNWZVXSTEb7cNFrkXhnNYnOUqa469ic21NYUl81CP", "content": "", "creation_timestamp": "2025-07-19T17:35:05.000000Z"}, {"uuid": "0b1ad4b0-89ab-49fd-ad5a-793c16e15708", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25960", "type": "seen", "source": "https://t.me/cvedetector/18619", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25960 - PhpCms Cross Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-25960 \nPublished : Feb. 20, 2025, 10:15 p.m. | 1\u00a0hour, 26\u00a0minutes ago \nDescription : Cross Site Scripting vulnerability in phpcmsv9 v.9.6.3 allows a remote attacker to escalate privileges via the menu interface of the member center of the background administrator. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T00:57:39.000000Z"}, {"uuid": "38bd0f09-d3b3-4647-9265-dc898aa5500d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25664", "type": "seen", "source": "https://t.me/cvedetector/18609", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25664 - Tenda AC8V4 Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2025-25664 \nPublished : Feb. 20, 2025, 11:15 p.m. | 27\u00a0minutes ago \nDescription : Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the shareSpeed parameter in the sub_49E098 function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T00:54:47.000000Z"}, {"uuid": "da8ff83c-73ce-4032-9902-a13e3c643aa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25663", "type": "seen", "source": "https://t.me/cvedetector/18608", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25663 - Tenda AC8V4 Stack-Based Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2025-25663 \nPublished : Feb. 20, 2025, 11:15 p.m. | 27\u00a0minutes ago \nDescription : A vulnerability was found in Tenda AC8V4 V16.03.34.06. Affected is the function SUB_0046AC38 of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk_crypto leads to stack-based buffer overflow. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T00:54:46.000000Z"}, {"uuid": "5a16aeaf-96b0-49b9-98fc-e1581014b9f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25958", "type": "seen", "source": "https://t.me/cvedetector/18618", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25958 - PhpCMS Cross-Site Scripting (XSS) Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2025-25958 \nPublished : Feb. 20, 2025, 10:15 p.m. | 1\u00a0hour, 26\u00a0minutes ago \nDescription : Cross Site Scripting vulnerabilities in phpcmsv9 v.9.6.3 allows a remote attacker to escalate privileges via a crafted script. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T00:57:13.000000Z"}, {"uuid": "044fb979-c06a-4659-9919-b61b82f0cc53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "published-proof-of-concept", "source": "Telegram/H7PxK1Y5ILptQdQyYGoz1FhgvYZD-lY_IbVT681OPMHGA7M", "content": "", "creation_timestamp": "2025-07-19T09:00:11.000000Z"}, {"uuid": "ddba4153-5887-4707-a523-38c4f138156e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25662", "type": "seen", "source": "https://t.me/cvedetector/18607", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25662 - Tenda O4 Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25662 \nPublished : Feb. 20, 2025, 11:15 p.m. | 27\u00a0minutes ago \nDescription : Tenda O4 V3.0 V1.0.0.10(2936) is vulnerable to Buffer Overflow in the function SafeSetMacFilter of the file /goform/setMacFilterList via the argument remark/type/time. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T00:54:46.000000Z"}, {"uuid": "8fdc75c2-1a24-42f5-a72d-71ad221f776c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25957", "type": "seen", "source": "https://t.me/cvedetector/18605", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25957 - Xunruicms Cross Site Scripting Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2025-25957 \nPublished : Feb. 20, 2025, 11:15 p.m. | 27\u00a0minutes ago \nDescription : Cross Site Scripting vulnerabilities in Xunruicms v.4.6.3 and before allows a remote attacker to escalate privileges via a crafted script. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T00:53:51.000000Z"}, {"uuid": "f94fbf40-b96e-4494-b42c-f70522f67698", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25679", "type": "seen", "source": "https://t.me/cvedetector/18604", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25679 - Tenda i12 Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2025-25679 \nPublished : Feb. 20, 2025, 11:15 p.m. | 27\u00a0minutes ago \nDescription : Tenda i12 V1.0.0.10(3805) was discovered to contain a buffer overflow via the index parameter in the formWifiMacFilterSet function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T00:53:18.000000Z"}, {"uuid": "5825b027-3c09-4a8b-9fca-3b5ec0323d2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25678", "type": "seen", "source": "https://t.me/cvedetector/18603", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25678 - Tenda i12 Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25678 \nPublished : Feb. 20, 2025, 11:15 p.m. | 27\u00a0minutes ago \nDescription : Tenda i12 V1.0.0.10(3805) was discovered to contain a buffer overflow via the funcpara1 parameter in the formSetCfm function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T00:52:51.000000Z"}, {"uuid": "2f4fe5fa-4828-4dc5-9b72-d66af34e7bb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25299", "type": "seen", "source": "https://t.me/cvedetector/18602", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25299 - CKEditor 5 Real-Time Collaboration Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25299 \nPublished : Feb. 20, 2025, 8:15 p.m. | 1\u00a0hour, 23\u00a0minutes ago \nDescription : CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. During a recent internal audit, a Cross-Site Scripting (XSS) vulnerability was discovered in the CKEditor 5 real-time collaboration package. This vulnerability affects user markers, which represent users' positions within the document. It can lead to unauthorized JavaScript code execution, which might happen with a very specific editor and token endpoint configuration. This vulnerability affects only installations with Real-time collaborative editing enabled. The problem has been recognized and patched. The fix is available in version 44.2.1 (and above). Users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-20T23:12:09.000000Z"}, {"uuid": "2b52ca83-ee3a-4622-9549-3bbbb0adba33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25054", "type": "seen", "source": "https://t.me/cvedetector/18407", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25054 - Movable Type Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2025-25054 \nPublished : Feb. 19, 2025, 6:15 a.m. | 2\u00a0hours ago \nDescription : Movable Type contains a reflected cross-site scripting vulnerability in the user information edit page. When Multi-Factor authentication plugin is enabled and a user accesses a crafted page while logged in to the affected product, an arbitrary script may be executed on the web browser of the user. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T09:32:36.000000Z"}, {"uuid": "b165fb33-b5db-445a-9491-a09fa21357d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25973", "type": "seen", "source": "https://t.me/cvedetector/18586", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25973 - Ppress Stored Cross Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2025-25973 \nPublished : Feb. 20, 2025, 6:15 p.m. | 1\u00a0hour, 21\u00a0minutes ago \nDescription : A stored Cross Site Scripting vulnerability in the \"related recommendations\" feature in Ppress v.0.0.9 allows a remote attacker to execute arbitrary code via a crafted script to the article.title, article.category, and article.tags parameters. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-20T20:41:18.000000Z"}, {"uuid": "76f3ed41-fb0e-413f-abea-e68b3d17caab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25968", "type": "seen", "source": "https://t.me/cvedetector/18585", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25968 - DDSN Interactive cm3 Acora CMS Information Disclosure and Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25968 \nPublished : Feb. 20, 2025, 6:15 p.m. | 1\u00a0hour, 21\u00a0minutes ago \nDescription : DDSN Interactive cm3 Acora CMS version 10.1.1 contains an improper access control vulnerability. An editor-privileged user can access sensitive information, such as system administrator credentials, by force browsing the endpoint and exploiting the 'file' parameter. By referencing specific files (e.g., cm3.xml), attackers can bypass access controls, leading to account takeover and potential privilege escalation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-20T20:41:18.000000Z"}, {"uuid": "86ff0f50-86e4-4a63-9085-d153d8adc388", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25218", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15079", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25218\n\ud83d\udd25 CVSS Score: 3.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.\n\ud83d\udccf Published: 2025-05-06T08:50:02.099Z\n\ud83d\udccf Modified: 2025-05-06T08:50:02.099Z\n\ud83d\udd17 References:\n1. https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-04.md", "creation_timestamp": "2025-05-06T09:21:23.000000Z"}, {"uuid": "b661ea56-7670-42ce-b777-a9fc6280bab2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25943", "type": "seen", "source": "https://t.me/cvedetector/18499", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25943 - Bento4 Buffer Overflow Arbitrary Code Execution\", \n  \"Content\": \"CVE ID : CVE-2025-25943 \nPublished : Feb. 19, 2025, 11:15 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : Buffer Overflow vulnerability in Bento4 v.1.6.0-641 allows a local attacker to execute arbitrary code via the AP4_Stz2Atom::AP4_Stz2Atom component located in Ap4Stz2Atom.cpp. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-20T02:16:44.000000Z"}, {"uuid": "5e139b15-385f-40c8-adb2-50d4987811df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25947", "type": "seen", "source": "https://t.me/cvedetector/18496", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25947 - Bento4 Segmentation Fault in MP4 File Processing\", \n  \"Content\": \"CVE ID : CVE-2025-25947 \nPublished : Feb. 19, 2025, 11:15 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : An issue in Bento4 v1.6.0-641 allows an attacker to trigger a segmentation fault via Ap4Atom.cpp, specifically in AP4_AtomParent::RemoveChild, during the execution of mp4encrypt with a specially crafted MP4 input file. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-20T02:16:42.000000Z"}, {"uuid": "24daf740-0fbb-44b3-a8c0-1717dc6fe26a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25946", "type": "seen", "source": "https://t.me/cvedetector/18495", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25946 - Bento4 Memory Leak\", \n  \"Content\": \"CVE ID : CVE-2025-25946 \nPublished : Feb. 19, 2025, 11:15 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : An issue in Bento4 v1.6.0-641 allows an attacker to cause a memory leak via Ap4Marlin.cpp and Ap4Processor.cpp, specifically in AP4_MarlinIpmpEncryptingProcessor::Initialize and AP4_Processor::Process, during the execution of mp4encrypt with a specially crafted MP4 input file. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-20T02:16:41.000000Z"}, {"uuid": "ddcfe957-da3d-41e6-bc2b-a65498fbfc10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25945", "type": "seen", "source": "https://t.me/cvedetector/18494", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25945 - Bento4 Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25945 \nPublished : Feb. 19, 2025, 11:15 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : An issue in Bento4 v1.6.0-641 allows an attacker to obtain sensitive information via the the Mp4Fragment.cpp and in AP4_DescriptorFactory::CreateDescriptorFromStream at Ap4DescriptorFactory.cpp. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-20T02:16:38.000000Z"}, {"uuid": "84a0406c-daed-4d55-94ff-c0f22549229b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25944", "type": "seen", "source": "https://t.me/cvedetector/18493", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25944 - Bento4 Buffer Overflow Arbitrary Code Execution\", \n  \"Content\": \"CVE ID : CVE-2025-25944 \nPublished : Feb. 19, 2025, 11:15 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : Buffer Overflow vulnerability in Bento4 v.1.6.0-641 allows a local attacker to execute arbitrary code via the Ap4RtpAtom.cpp, specifically in AP4_RtpAtom::AP4_RtpAtom, during the execution of mp4fragment with a crafted MP4 input file. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-20T02:16:37.000000Z"}, {"uuid": "d3002806-5b1a-4967-b540-cfe40baf7b86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25942", "type": "seen", "source": "https://t.me/cvedetector/18492", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25942 - Bento4 Memory Leak\", \n  \"Content\": \"CVE ID : CVE-2025-25942 \nPublished : Feb. 19, 2025, 11:15 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : An issue in Bento4 v1.6.0-641 allows an attacker to obtain sensitive information via the the mp4fragment tool when processing invalid files. Specifically, memory allocated in SampleArray::SampleArray in Mp4Fragment.cpp is not properly released. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-20T02:16:36.000000Z"}, {"uuid": "4b15f9b3-a529-4f08-910b-11e79bde5f7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25196", "type": "seen", "source": "https://t.me/cvedetector/18481", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25196 - OpenFGA Authorization Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25196 \nPublished : Feb. 19, 2025, 9:15 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. OpenFGA < v1.8.4 (Helm chart < openfga-0.2.22, docker < v.1.8.4) are vulnerable to authorization bypass when certain Check and ListObject calls are executed. Users on OpenFGA v1.8.4 or previous, specifically under the following conditions are affected by this authorization bypass vulnerability: 1. Calling Check API or ListObjects with a model that has a relation directly assignable to both public access AND userset with the same type. 2. A type bound public access tuple is assigned to an object. 3. userset tuple is not assigned to the same object. and 4. Check request's user field is a userset that has the same type as the type bound public access tuple's user type. Users are advised to upgrade to v1.8.5 which is backwards compatible. There are no known workarounds for this vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T23:46:03.000000Z"}, {"uuid": "381cb7e7-ca8d-436f-a3cc-4217009f3521", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25475", "type": "seen", "source": "https://t.me/cvedetector/18385", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25475 - DCMTK NULL Pointer Dereference Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2025-25475 \nPublished : Feb. 18, 2025, 11:15 p.m. | 51\u00a0minutes ago \nDescription : A NULL pointer dereference in the component /libsrc/dcrleccd.cc of DCMTK v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via a crafted DICOM file. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T01:11:00.000000Z"}, {"uuid": "140674fb-db26-4e14-8fc1-d6c635cfe30e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25474", "type": "seen", "source": "https://t.me/cvedetector/18384", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25474 - DCMTK Heap Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2025-25474 \nPublished : Feb. 18, 2025, 11:15 p.m. | 51\u00a0minutes ago \nDescription : DCMTK v3.6.9+ DEV was discovered to contain a buffer overflow via the component /dcmimgle/diinpxt.h. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T01:11:00.000000Z"}, {"uuid": "5bb7f756-13f3-4cb7-95f1-e38dad2b74ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25473", "type": "seen", "source": "https://t.me/cvedetector/18383", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25473 - FFmpeg NULL Pointer Dereference in libavformat/mov.c\", \n  \"Content\": \"CVE ID : CVE-2025-25473 \nPublished : Feb. 18, 2025, 11:15 p.m. | 51\u00a0minutes ago \nDescription : FFmpeg git master before commit c08d30 was discovered to contain a NULL pointer dereference via the component libavformat/mov.c. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T01:10:59.000000Z"}, {"uuid": "58b0ad3e-ccf4-4a23-8022-42547620a431", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25471", "type": "seen", "source": "https://t.me/cvedetector/18382", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25471 - FFmpeg NULL Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25471 \nPublished : Feb. 18, 2025, 11:15 p.m. | 51\u00a0minutes ago \nDescription : FFmpeg git master before commit fd1772 was discovered to contain a NULL pointer dereference via the component libavformat/mov.c. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T01:10:58.000000Z"}, {"uuid": "55047014-9c5a-4922-a41a-e6f5d86249b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25284", "type": "seen", "source": "https://t.me/cvedetector/18342", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25284 - ZOO-Project WPS Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25284 \nPublished : Feb. 18, 2025, 7:15 p.m. | 39\u00a0minutes ago \nDescription : The ZOO-Project is an open source processing platform, released under MIT/X11 Licence. A vulnerability in ZOO-Project's WPS (Web Processing Service) implementation allows unauthorized access to files outside the intended directory through path traversal. Specifically, the Gdal_Translate service, when processing VRT (Virtual Format) files, does not properly validate file paths referenced in the VRTRasterBand element, allowing attackers to read arbitrary files on the system. The vulnerability exists because the service doesn't properly sanitize the SourceFilename parameter in VRT files, allowing relative path traversal sequences (../). When combined with VRT's raw data handling capabilities, this allows reading arbitrary files as raw binary data and converting them to TIFF format, effectively exposing their contents. This vulnerability is particularly severe because it allows attackers to read sensitive system files, potentially exposing configuration data, credentials, or other confidential information stored on the server. An unauthenticated attacker can read arbitrary files from the system through path traversal, potentially accessing sensitive information such as configuration files, credentials, or other confidential data stored on the server. The vulnerability requires no authentication and can be exploited remotely through the WPS service. This issue has been addressed in commit `5f155a8` and all users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T20:59:40.000000Z"}, {"uuid": "1f93e731-3dcd-4888-905b-3d2603f59e0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25894", "type": "seen", "source": "https://t.me/cvedetector/18394", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25894 - D-Link DSL-3782 Samba Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25894 \nPublished : Feb. 18, 2025, 10:15 p.m. | 1\u00a0hour, 51\u00a0minutes ago \nDescription : An OS command injection vulnerability was discovered in D-Link DSL-3782 v1.01 via the samba_wg and samba_nbn parameters. This vulnerability allows attackers to execute arbitrary operating system (OS) commands via a crafted packet. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T01:11:13.000000Z"}, {"uuid": "0b46a0f2-873d-41a8-b823-3939c0f7f81d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25896", "type": "seen", "source": "https://t.me/cvedetector/18396", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25896 - D-Link DSL-3782 Buffer Overflow Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2025-25896 \nPublished : Feb. 18, 2025, 10:15 p.m. | 1\u00a0hour, 51\u00a0minutes ago \nDescription : A buffer overflow vulnerability was discovered in D-Link DSL-3782 v1.01 via the destination, netmask, and gateway parameters. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted packet. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T01:11:14.000000Z"}, {"uuid": "ca44698d-d11c-4264-a242-241a7cdab928", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25895", "type": "seen", "source": "https://t.me/cvedetector/18395", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25895 - D-Link DSL-3782 OS Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25895 \nPublished : Feb. 18, 2025, 10:15 p.m. | 1\u00a0hour, 51\u00a0minutes ago \nDescription : An OS command injection vulnerability was discovered in D-Link DSL-3782 v1.01 via the public_type parameter. This vulnerability allows attackers to execute arbitrary operating system (OS) commands via a crafted packet. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T01:11:13.000000Z"}, {"uuid": "2b120dd3-fda0-4830-a08a-06ee527b24bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25198", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/55920", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aPoC for CVE-2025-25198: automated Host header poisoning test for Mailcow - HTTPS listener, automatic cookie/CSRF handling, captures first reset link.\nURL\uff1ahttps://github.com/Groppoxx/CVE-2025-25198-PoC\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-10-18T02:20:27.000000Z"}, {"uuid": "17430ca9-c97c-40b8-bb47-bc1b5975ac04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25472", "type": "seen", "source": "https://t.me/cvedetector/18381", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25472 - DCMTK Buffer Overflow Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2025-25472 \nPublished : Feb. 18, 2025, 11:15 p.m. | 51\u00a0minutes ago \nDescription : A buffer overflow in DCMTK git master v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via a crafted DCM file. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T01:10:54.000000Z"}, {"uuid": "3b880733-dddf-432b-93f1-34921f1c8af2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25300", "type": "seen", "source": "https://t.me/cvedetector/18349", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25300 - Smartbanner.js Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25300 \nPublished : Feb. 18, 2025, 6:15 p.m. | 1\u00a0hour, 39\u00a0minutes ago \nDescription : smartbanner.js is a customizable smart app banner for iOS and Android. Prior to version 1.14.1, clicking on smartbanner `View` link and navigating to 3rd party page leaves `window.opener` exposed. It may allow hostile third parties to abuse `window.opener`, e.g. by redirection or injection on the original page with smartbanner. `rel=\"noopener\"` is automatically populated to links as of `v1.14.1` which is a recommended upgrade to resolve the vulnerability. Some workarounds are available for those who cannot upgrade. Ensure `View` link is only taking users to App Store or Google Play Store where security is guarded by respective app store security teams. If `View` link is going to a third party page, limit smartbanner.js to be used on iOS that decreases the scope of the vulnerability since as of Safari 12.1,  `rel=\"noopener\"` is imposed on all `target=\"_blank\"` links. Version 1.14.1 of smartbanner.js contains a fix for the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T20:59:48.000000Z"}, {"uuid": "0fe44fe9-1d60-4be7-ba55-ac13b37c65f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25305", "type": "seen", "source": "https://t.me/cvedetector/18337", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25305 - Home Assistant Core SSL Verification Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-25305 \nPublished : Feb. 18, 2025, 7:15 p.m. | 39\u00a0minutes ago \nDescription : Home Assistant Core is an open source home automation that puts local control and privacy first. Affected versions are subject to a potential man-in-the-middle attacks due to missing SSL certificate verification in the project codebase and used third-party libraries. In the past, `aiohttp-session`/`request` had the parameter `verify_ssl` to control SSL certificate verification. This was a boolean value. In `aiohttp` 3.0, this parameter was deprecated in favor of the `ssl` parameter. Only when `ssl` is set to `None` or provided with a correct configured SSL context the standard SSL certificate verification will happen. When migrating integrations in Home Assistant and libraries used by Home Assistant, in some cases the `verify_ssl` parameter value was just moved to the new `ssl` parameter. This resulted in these integrations and 3rd party libraries using `request.ssl = True`, which unintentionally turned off SSL certificate verification and opened up a man-in-the-middle attack vector. This issue has been addressed in version 2024.1.6 and all users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 7.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T20:59:32.000000Z"}, {"uuid": "62127441-af6b-40b1-b054-e6d844ebc2e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25612", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/16851", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-25612\nURL\uff1ahttps://github.com/secmuzz/CVE-2025-25612\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-03-04T15:44:19.000000Z"}, {"uuid": "4837fcaa-4adb-471e-a63c-58676292805b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25246", "type": "seen", "source": "https://t.me/cvedetector/17271", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25246 - NETGEAR XR RCE\", \n  \"Content\": \"CVE ID : CVE-2025-25246 \nPublished : Feb. 5, 2025, 5:15 a.m. | 23\u00a0minutes ago \nDescription : NETGEAR XR1000 before 1.0.0.74, XR1000v2 before 1.1.0.22, and XR500 before 2.3.2.134 allow remote code execution by unauthenticated users. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-05T07:26:54.000000Z"}, {"uuid": "eb1b5024-8961-448d-964c-ef7bfd6fe345", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25379", "type": "seen", "source": "https://t.me/cvedetector/19197", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25379 - 07FLYCMS Cross Site Request Forgery (CSRF)\", \n  \"Content\": \"CVE ID : CVE-2025-25379 \nPublished : Feb. 28, 2025, 11:15 p.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : Cross Site Request Forgery vulnerability in 07FLYCMS v.1.3.9 allows a remote attacker to execute arbitrary code via the id parameter of the del.html component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T02:13:47.000000Z"}, {"uuid": "38d3499d-5c91-4ad3-a1ac-e113b215bbd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25723", "type": "seen", "source": "https://t.me/cvedetector/19196", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25723 - GPAC Buffer Overflow RCE\", \n  \"Content\": \"CVE ID : CVE-2025-25723 \nPublished : Feb. 28, 2025, 11:15 p.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : Buffer Overflow vulnerability in GPAC version 2.5 allows a local attacker to execute arbitrary code. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T02:13:46.000000Z"}, {"uuid": "3ae6648d-fb46-419a-adc3-1db0cc628942", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25478", "type": "seen", "source": "https://t.me/cvedetector/19195", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25478 - Syspass Directory Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25478 \nPublished : Feb. 28, 2025, 11:15 p.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : The account file upload functionality in Syspass 3.2.x fails to properly handle special characters in filenames. This mismanagement leads to the disclosure of the web application s source code, exposing sensitive information such as the database password. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T02:13:45.000000Z"}, {"uuid": "95738884-bfdc-4f35-8d03-746fc5e33195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25429", "type": "seen", "source": "https://t.me/cvedetector/19183", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25429 - Trendnet TEW-929DRU Stored Cross-site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-25429 \nPublished : Feb. 28, 2025, 7:15 p.m. | 1\u00a0hour, 13\u00a0minutes ago \nDescription : Trendnet TEW-929DRU 1.0.0.10 contains a Stored Cross-site Scripting (XSS) vulnerability via the r_name variable inside the have_same_name function on the /addschedule.htm page. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T22:03:06.000000Z"}, {"uuid": "16787419-3d17-4d1c-89f5-e0ef27470101", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25428", "type": "seen", "source": "https://t.me/cvedetector/19182", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25428 - TRENDnet TEW-929DRU Root Hardcoded Password Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25428 \nPublished : Feb. 28, 2025, 7:15 p.m. | 1\u00a0hour, 13\u00a0minutes ago \nDescription : TRENDnet TEW-929DRU 1.0.0.10 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T22:03:05.000000Z"}, {"uuid": "ef6a821d-4b23-42be-aa1f-0c44478d4efd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25610", "type": "seen", "source": "https://t.me/cvedetector/19177", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25610 - TOTOlink A3002R Web Application Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2025-25610 \nPublished : Feb. 28, 2025, 7:15 p.m. | 1\u00a0hour, 13\u00a0minutes ago \nDescription : TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the static_gw parameter in the formIpv6Setup interface of /bin/boa. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T22:02:58.000000Z"}, {"uuid": "c3527b8e-dd70-4991-b445-210e343796a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25461", "type": "seen", "source": "https://t.me/cvedetector/19175", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25461 - SeedDMS Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2025-25461 \nPublished : Feb. 28, 2025, 4:15 p.m. | 2\u00a0hours, 7\u00a0minutes ago \nDescription : A Stored Cross-Site Scripting (XSS) vulnerability exists in SeedDMS 6.0.29. A user or rogue admin with the \"Add Category\" permission can inject a malicious XSS payload into the category name field. When a document is subsequently associated with this category, the payload is stored on the server and rendered without proper sanitization or output encoding. This results in the XSS payload executing in the browser of any user who views the document. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T19:32:32.000000Z"}, {"uuid": "243dde0d-6cb8-4129-85ce-01ed21025da3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25476", "type": "seen", "source": "https://t.me/cvedetector/19194", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25476 - SysPass Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25476 \nPublished : Feb. 28, 2025, 11:15 p.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : A stored cross-site scripting (XSS) vulnerability in SysPass 3.2.x allows a malicious user with elevated privileges to execute arbitrary Javascript code by specifying a malicious XSS payload as a notification type or notification component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T02:13:44.000000Z"}, {"uuid": "c923300b-807e-4ffe-b239-dcdd50f72071", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25431", "type": "seen", "source": "https://t.me/cvedetector/19186", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25431 - Trendnet TEW-929DRU Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2025-25431 \nPublished : Feb. 28, 2025, 6:15 p.m. | 2\u00a0hours, 13\u00a0minutes ago \nDescription : Trendnet TEW-929DRU 1.0.0.10 contains a Stored Cross-site Scripting (XSS) vulnerability via the The ssid key of wifi_data parameter on the /captive_portal.htm page. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T22:03:08.000000Z"}, {"uuid": "c1c51e20-b621-4390-a5b1-af77c5880248", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25430", "type": "seen", "source": "https://t.me/cvedetector/19185", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25430 - Trendnet TEW-929DRU Stored Cross-site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25430 \nPublished : Feb. 28, 2025, 6:15 p.m. | 2\u00a0hours, 13\u00a0minutes ago \nDescription : Trendnet TEW-929DRU 1.0.0.10 contains a Stored Cross-site Scripting (XSS) vulnerability via the configname parameter on the /cbi_addcert.htm page. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T22:03:07.000000Z"}, {"uuid": "4c6f14b4-5b4c-4937-9ab4-b37547398bcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25609", "type": "seen", "source": "https://t.me/cvedetector/19184", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25609 - TOTOlink A3002R Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25609 \nPublished : Feb. 28, 2025, 7:15 p.m. | 1\u00a0hour, 13\u00a0minutes ago \nDescription : TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the static_ipv6 parameter in the formIpv6Setup interface of /bin/boa \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T22:03:07.000000Z"}, {"uuid": "e8c8cafe-aeb8-4766-8aaf-3a8cf886609d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25635", "type": "seen", "source": "https://t.me/cvedetector/19178", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25635 - TOTOlink A3002R Buffer Overflow in boa\", \n  \"Content\": \"CVE ID : CVE-2025-25635 \nPublished : Feb. 28, 2025, 7:15 p.m. | 1\u00a0hour, 13\u00a0minutes ago \nDescription : TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the pppoe_dns1 parameter in the formIpv6Setup interface of /bin/boa. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T22:02:59.000000Z"}, {"uuid": "193ba540-75e8-41c0-901f-1631631800d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25515", "type": "seen", "source": "https://t.me/cvedetector/18934", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25515 - Seacms SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25515 \nPublished : Feb. 25, 2025, 10:15 p.m. | 1\u00a0hour, 56\u00a0minutes ago \nDescription : Seacms <=13.3\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-26T01:44:50.000000Z"}, {"uuid": "168cf245-8d2f-4d3a-9f1b-614db939fed5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25514", "type": "seen", "source": "https://t.me/cvedetector/18933", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25514 - Seacms SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25514 \nPublished : Feb. 25, 2025, 10:15 p.m. | 1\u00a0hour, 56\u00a0minutes ago \nDescription : Seacms <=13.3\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-26T01:44:49.000000Z"}, {"uuid": "2e6af677-a27b-475a-9aa7-fb818b0d91a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25331", "type": "seen", "source": "https://t.me/cvedetector/19053", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25331 - Beitatong Technology LianJia iOS URL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25331 \nPublished : Feb. 27, 2025, 4:15 p.m. | 1\u00a0hour, 16\u00a0minutes ago \nDescription : An issue in Beitatong Technology LianJia iOS 9.83.50 allows attackers to access sensitive user information via supplying a crafted link. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T19:15:44.000000Z"}, {"uuid": "6b41823a-508b-407a-9501-1fec0d9cbb10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25330", "type": "seen", "source": "https://t.me/cvedetector/19052", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25330 - Boohee Technology Boohee Health iOS Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-25330 \nPublished : Feb. 27, 2025, 4:15 p.m. | 1\u00a0hour, 16\u00a0minutes ago \nDescription : An issue in Boohee Technology Boohee Health iOS 13.0.13 allows attackers to access sensitive user information via supplying a crafted link. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T19:15:43.000000Z"}, {"uuid": "10df77da-ada5-4d65-b649-156a8fc9fb8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25477", "type": "seen", "source": "https://t.me/cvedetector/19107", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25477 - SysPass Host Header Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25477 \nPublished : Feb. 28, 2025, 12:15 a.m. | 1\u00a0hour, 42\u00a0minutes ago \nDescription : A host header injection vulnerability in SysPass 3.2x allows an attacker to load malicious JS files from an arbitrary domain which would be executed in the victim's browser. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T03:38:48.000000Z"}, {"uuid": "97ebd8f7-1eff-4754-b416-38b517365893", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25916", "type": "seen", "source": "https://t.me/cvedetector/19157", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25916 - Wuzhicms Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25916 \nPublished : Feb. 28, 2025, 3:15 p.m. | 1\u00a0hour, 5\u00a0minutes ago \nDescription : wuzhicms v4.1.0 has a Cross Site Scripting (XSS) vulnerability in del function in \\coreframe\\app\\member\\admin\\group.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T17:51:54.000000Z"}, {"uuid": "5cea2eb4-5197-4adc-9be4-cb60cdee65f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25730", "type": "seen", "source": "https://t.me/cvedetector/19103", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25730 - Motorola Mobility Droid Razr HD USB Debugging Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-25730 \nPublished : Feb. 27, 2025, 10:15 p.m. | 1\u00a0hour, 31\u00a0minutes ago \nDescription : An issue in Motorola Mobility Droid Razr HD (Model XT926) System Version: 9.18.94.XT926.Verizon.en.US allows physically proximate unauthorized attackers to access USB debugging, leading to control of the host device itself. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T01:08:20.000000Z"}, {"uuid": "42b9b2c6-7db9-403f-baa5-b8cbdf3dfc0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25570", "type": "seen", "source": "https://t.me/cvedetector/19102", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25570 - Vue Vben Admin Insecure Hardcoded Credentials Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25570 \nPublished : Feb. 27, 2025, 10:15 p.m. | 1\u00a0hour, 31\u00a0minutes ago \nDescription : Vue Vben Admin 2.10.1 allows unauthorized login to the backend due to an issue with hardcoded credentials. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T01:08:16.000000Z"}, {"uuid": "522db40e-a541-485b-adae-4bc35296e2cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25462", "type": "seen", "source": "https://t.me/cvedetector/18948", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25462 - PHPGurukul Land Record System Project SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-25462 \nPublished : Feb. 26, 2025, 4:15 p.m. | 2\u00a0hours, 30\u00a0minutes ago \nDescription : A SQL Injection vulnerability was found in /admin/add-propertytype.php in PHPGurukul Land Record System Project in PHP v1.0 allows remote attackers to execute arbitrary code via the propertytype POST request parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-26T20:08:23.000000Z"}, {"uuid": "16878fcb-7d5d-4764-beae-26333a7ea99a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25729", "type": "seen", "source": "https://t.me/cvedetector/19110", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25729 - Bosscomm IF740 Firmware Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-25729 \nPublished : Feb. 28, 2025, 12:15 a.m. | 1\u00a0hour, 42\u00a0minutes ago \nDescription : An information disclosure vulnerability in Bosscomm IF740 Firmware versions:11001.7078 & v11001.0000 and System versions: 6.25 & 6.00 allows attackers to obtain hardcoded cleartext credentials via the update or boot process. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T03:38:53.000000Z"}, {"uuid": "0d3d16ee-d256-4216-b184-d61eea38331a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25728", "type": "seen", "source": "https://t.me/cvedetector/19109", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25728 - Bosscomm IF740 PlainText Communication Exposure\", \n  \"Content\": \"CVE ID : CVE-2025-25728 \nPublished : Feb. 28, 2025, 12:15 a.m. | 1\u00a0hour, 42\u00a0minutes ago \nDescription : Bosscomm IF740 Firmware versions:11001.7078 & v11001.0000 and System versions: 6.25 & 6.00 were discovered to send communications to the update API in plaintext, allowing attackers to access sensitive information via a man-in-the-middle attack. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T03:38:49.000000Z"}, {"uuid": "94af822d-69ab-4f4d-8883-14feec338203", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25727", "type": "seen", "source": "https://t.me/cvedetector/19108", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25727 - Bosscomm IF740 Password Storage Weakness\", \n  \"Content\": \"CVE ID : CVE-2025-25727 \nPublished : Feb. 28, 2025, 12:15 a.m. | 1\u00a0hour, 42\u00a0minutes ago \nDescription : Bosscomm IF740 Firmware versions:11001.7078 & v11001.0000 and System versions: 6.25 & 6.00 were discovered to store passwords in cleartext. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T03:38:48.000000Z"}, {"uuid": "8aa085d9-3d4c-4819-9816-8689f66f9f56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25255", "type": "published-proof-of-concept", "source": "Telegram/PHoJQGmgGzsQrC8Gnxfc8pLZD55xgKQzGqHQgQ7hPSbJXl0", "content": "", "creation_timestamp": "2025-11-19T15:00:09.000000Z"}, {"uuid": "f5507574-072f-4653-b76d-aaea6ba491c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25761", "type": "seen", "source": "https://t.me/cvedetector/19066", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25761 - HkCms File Write Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25761 \nPublished : Feb. 27, 2025, 3:15 p.m. | 2\u00a0hours, 16\u00a0minutes ago \nDescription : HkCms v2.3.2.240702 was discovered to contain an arbitrary file write vulnerability in the component Appcenter.php. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T19:16:00.000000Z"}, {"uuid": "012858c5-1854-4b3d-bcdc-70cf0ce1b6e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25760", "type": "seen", "source": "https://t.me/cvedetector/19065", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25760 - SUCMS SSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25760 \nPublished : Feb. 27, 2025, 3:15 p.m. | 2\u00a0hours, 16\u00a0minutes ago \nDescription : A Server-Side Request Forgery (SSRF) in the component admin_webgather.php of SUCMS v1.0 allows attackers to access internal data and services via a crafted GET request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T19:15:59.000000Z"}, {"uuid": "79e4e817-7753-4cb6-8f79-bc808116205f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25369", "type": "seen", "source": "https://t.me/GithubRedTeam/15676", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-25369\nURL\uff1ahttps://github.com/DRAGOWN/CVE-2025-26263\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-02-26T17:43:25.000000Z"}, {"uuid": "d9922252-6c2a-4e5f-8263-041db04241ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25759", "type": "seen", "source": "https://t.me/cvedetector/19064", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25759 - SUCMS Directory Traversal and File Deletion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25759 \nPublished : Feb. 27, 2025, 3:15 p.m. | 2\u00a0hours, 16\u00a0minutes ago \nDescription : An issue in the component admin_template.php of SUCMS v1.0 allows attackers to execute a directory traversal and arbitrary file deletion via a crafted GET request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T19:15:58.000000Z"}, {"uuid": "2229585f-4b47-4efd-b5c4-3c419585b45e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25326", "type": "seen", "source": "https://t.me/cvedetector/19059", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25326 - Merchants Union Finance iOS URL Hijacking Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25326 \nPublished : Feb. 27, 2025, 4:15 p.m. | 1\u00a0hour, 16\u00a0minutes ago \nDescription : An issue in Merchants Union Consumer Finance Company Limited Merchants Union Finance iOS 6.19.0 allows attackers to access sensitive user information via supplying a crafted link. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T19:15:51.000000Z"}, {"uuid": "a41f7919-7fb0-40c9-80d1-192a895caf84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25325", "type": "seen", "source": "https://t.me/cvedetector/19058", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25325 - YuPao DirectHire iOS URL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25325 \nPublished : Feb. 27, 2025, 4:15 p.m. | 1\u00a0hour, 16\u00a0minutes ago \nDescription : An issue in Yibin Fengguan Network Technology Co., Ltd YuPao DirectHire iOS 8.8.0 allows attackers to access sensitive user information via supplying a crafted link. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T19:15:51.000000Z"}, {"uuid": "8865d0a9-9d0d-44cb-b775-c3ad072d1ae6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25324", "type": "seen", "source": "https://t.me/cvedetector/19057", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25324 - Shandong Provincial Big Data Center AiShanDong iOS Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25324 \nPublished : Feb. 27, 2025, 4:15 p.m. | 1\u00a0hour, 17\u00a0minutes ago \nDescription : An issue in Shandong Provincial Big Data Center AiShanDong iOS 5.0.0 allows attackers to access sensitive user information via supplying a crafted link. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T19:15:50.000000Z"}, {"uuid": "a2fb02da-0ecb-438c-bdd4-f96fab75d515", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25334", "type": "seen", "source": "https://t.me/cvedetector/19055", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25334 - Suning EMall Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25334 \nPublished : Feb. 27, 2025, 4:15 p.m. | 1\u00a0hour, 16\u00a0minutes ago \nDescription : An issue in Suning Commerce Group Suning EMall iOS 9.5.198 allows attackers to access sensitive user information via supplying a crafted link. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T19:15:45.000000Z"}, {"uuid": "8d5aed2a-faef-42d9-8058-66f408399d48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25333", "type": "seen", "source": "https://t.me/cvedetector/19054", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25333 - IKEA CN iOS Link Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25333 \nPublished : Feb. 27, 2025, 4:15 p.m. | 1\u00a0hour, 16\u00a0minutes ago \nDescription : An issue in IKEA CN iOS 4.13.0 allows attackers to access sensitive user information via supplying a crafted link. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T19:15:44.000000Z"}, {"uuid": "9c8f75c2-ee35-466e-9ab0-7c516d131f32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25323", "type": "seen", "source": "https://t.me/cvedetector/19061", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25323 - \"51Job iOS URL Injection\"\", \n  \"Content\": \"CVE ID : CVE-2025-25323 \nPublished : Feb. 27, 2025, 4:15 p.m. | 1\u00a0hour, 17\u00a0minutes ago \nDescription : An issue in Qianjin Network Information Technology (Shanghai) Co., Ltd 51Job iOS 14.22.0 allows attackers to access sensitive user information via supplying a crafted link. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T19:15:53.000000Z"}, {"uuid": "78e9edf1-740a-4bd2-8217-d3ddaefe62a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25329", "type": "seen", "source": "https://t.me/cvedetector/19048", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25329 - Tencent MicroVision iOS Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25329 \nPublished : Feb. 27, 2025, 5:15 p.m. | 17\u00a0minutes ago \nDescription : An issue in Tencent Technology (Beijing) Company Limited Tencent MicroVision iOS 8.137.0 allows attackers to access sensitive user information via supplying a crafted link. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T19:15:37.000000Z"}, {"uuid": "4249cf32-dd50-467c-8bbe-567ab490da4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25190", "type": "seen", "source": "https://t.me/cvedetector/17613", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25190 - \"ZOO-Project WPS Server XSS EchoProcess Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-25190 \nPublished : Feb. 10, 2025, 10:15 p.m. | 1\u00a0hour, 29\u00a0minutes ago \nDescription : The ZOO-Project is an open source processing platform. The ZOO-Project Web Processing Service (WPS) Server contains a Cross-Site Scripting (XSS) vulnerability in its EchoProcess service prior to commit 7a5ae1a. The vulnerability exists because the EchoProcess service directly reflects user input in its output without proper sanitization when handling complex inputs.The service accepts various input formats including XML, JSON, and SVG, and returns the content based on the requested MIME type. When processing SVG content and returning it with the image/svg+xml MIME type, the server fails to sanitize potentially malicious JavaScript in attributes like onload, allowing arbitrary JavaScript execution in the victim's browser context. This vulnerability is particularly dangerous because it exists in a service specifically designed to echo back user input, and the lack of proper sanitization in combination with SVG handling creates a reliable XSS vector. Commit 7a5ae1a contains a fix for the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-11T01:27:22.000000Z"}, {"uuid": "f28da3e8-a601-4c45-b3e6-8c5fe8996b94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25189", "type": "seen", "source": "https://t.me/cvedetector/17612", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25189 - ZOO-Project Web Processing Service (WPS) Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25189 \nPublished : Feb. 10, 2025, 10:15 p.m. | 1\u00a0hour, 29\u00a0minutes ago \nDescription : The ZOO-Project is an open source processing platform. A reflected Cross-Site Scripting vulnerability exists in the ZOO-Project Web Processing Service (WPS) publish.py CGI script prior to commit 7a5ae1a. The script reflects user input from the `jobid` parameter in its HTTP response without proper HTML encoding or sanitization. When a victim visits a specially crafted URL pointing to this endpoint, arbitrary JavaScript code can be executed in their browser context. The vulnerability occurs because the CGI script directly outputs the query string parameters into the HTML response without escaping HTML special characters. An attacker can inject malicious JavaScript code through the `jobid` parameter which will be executed when rendered by the victim's browser. Commit 7a5ae1a contains a fix for the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-11T01:27:19.000000Z"}, {"uuid": "09c6896d-1590-497a-afe6-93c3c308d76c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25521", "type": "seen", "source": "https://t.me/cvedetector/18932", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25521 - Seacms SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25521 \nPublished : Feb. 25, 2025, 10:15 p.m. | 1\u00a0hour, 56\u00a0minutes ago \nDescription : Seacms <=13.3\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-26T01:44:48.000000Z"}, {"uuid": "40a3bcb6-2a09-418b-8533-2a52a1755b4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25520", "type": "seen", "source": "https://t.me/cvedetector/18931", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25520 - Seacms SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25520 \nPublished : Feb. 25, 2025, 10:15 p.m. | 1\u00a0hour, 56\u00a0minutes ago \nDescription : Seacms <13.3\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-26T01:44:45.000000Z"}, {"uuid": "d8a80e90-7567-4756-9e2c-b7802c526fc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25519", "type": "seen", "source": "https://t.me/cvedetector/18930", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25519 - Seacms SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25519 \nPublished : Feb. 25, 2025, 10:15 p.m. | 1\u00a0hour, 56\u00a0minutes ago \nDescription : Seacms <=13.3\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-26T01:44:44.000000Z"}, {"uuid": "45372fc4-8d9b-4830-ad7b-78f2388add93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25793", "type": "seen", "source": "https://t.me/cvedetector/18957", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25793 - SeaCMS Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25793 \nPublished : Feb. 26, 2025, 3:15 p.m. | 3\u00a0hours, 30\u00a0minutes ago \nDescription : SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin_notify.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-26T20:08:37.000000Z"}, {"uuid": "faf724d8-81ba-4888-8a7b-30d15e594238", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25792", "type": "seen", "source": "https://t.me/cvedetector/18958", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25792 - SeaCMS Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25792 \nPublished : Feb. 26, 2025, 3:15 p.m. | 3\u00a0hours, 30\u00a0minutes ago \nDescription : SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the isopen parameter at admin_weixin.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-26T20:08:38.000000Z"}, {"uuid": "11849204-8654-4fb5-95a4-9421375e372a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25791", "type": "seen", "source": "https://t.me/cvedetector/18956", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25791 - YZNCMS File Upload Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25791 \nPublished : Feb. 26, 2025, 3:15 p.m. | 3\u00a0hours, 30\u00a0minutes ago \nDescription : An arbitrary file upload vulnerability in the plugin installation feature of YZNCMS v2.0.1 allows attackers to execute arbitrary code via uploading a crafted Zip file. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-26T20:08:36.000000Z"}, {"uuid": "176362c1-d032-4404-a5bb-15bbcac10ac4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25740", "type": "seen", "source": "Telegram/T1EgymRIEjxTuWeN4JNTg085mscMcEhck-iS2ysAWmZLXM5t", "content": "", "creation_timestamp": "2025-02-14T21:08:30.000000Z"}, {"uuid": "b55a2bb3-dde2-45fb-88a7-f60c52f0694b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25369", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/15630", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-25369\nURL\uff1ahttps://github.com/lkasjkasj/CVE-2025-25369\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-02-26T12:23:35.000000Z"}, {"uuid": "7f09f646-5f26-4286-bd70-4da4501971d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25825", "type": "seen", "source": "https://t.me/cvedetector/18955", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25825 - Emlog Pro XSS\", \n  \"Content\": \"CVE ID : CVE-2025-25825 \nPublished : Feb. 26, 2025, 3:15 p.m. | 3\u00a0hours, 30\u00a0minutes ago \nDescription : A cross-site scripting (XSS) vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Titile in the article category section. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-26T20:08:35.000000Z"}, {"uuid": "bb84c954-6c63-4910-a506-f63c6df4f9e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25802", "type": "seen", "source": "https://t.me/cvedetector/18954", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25802 - SeaCMS Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25802 \nPublished : Feb. 26, 2025, 3:15 p.m. | 3\u00a0hours, 30\u00a0minutes ago \nDescription : SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin_ip.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-26T20:08:34.000000Z"}, {"uuid": "fc23198a-0a16-4f32-b10b-161d08e920cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25827", "type": "seen", "source": "https://t.me/cvedetector/18953", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25827 - Emlog Pro SSRF\", \n  \"Content\": \"CVE ID : CVE-2025-25827 \nPublished : Feb. 26, 2025, 3:15 p.m. | 3\u00a0hours, 30\u00a0minutes ago \nDescription : A Server-Side Request Forgery (SSRF) in the component sort.php of Emlog Pro v2.5.4 allows attackers to scan local and internal ports via supplying a crafted URL. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-26T20:08:30.000000Z"}, {"uuid": "1304debb-4caa-48b4-bbce-cb45f165967c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25823", "type": "seen", "source": "https://t.me/cvedetector/18952", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25823 - Emlog Pro XSS Injection\", \n  \"Content\": \"CVE ID : CVE-2025-25823 \nPublished : Feb. 26, 2025, 3:15 p.m. | 3\u00a0hours, 30\u00a0minutes ago \nDescription : A cross-site scripting (XSS) vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the article header at /admin/article.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-26T20:08:30.000000Z"}, {"uuid": "aa918042-e689-4c38-950a-da6330ee1d4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25818", "type": "seen", "source": "https://t.me/cvedetector/18951", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25818 - Emlog Pro Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25818 \nPublished : Feb. 26, 2025, 3:15 p.m. | 3\u00a0hours, 30\u00a0minutes ago \nDescription : A cross-site scripting (XSS) vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the postStrVar function at article_save.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-26T20:08:29.000000Z"}, {"uuid": "d95ca191-3d96-486e-a2d3-25c065df7255", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25813", "type": "seen", "source": "https://t.me/cvedetector/18950", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25813 - SeaCMS Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25813 \nPublished : Feb. 26, 2025, 3:15 p.m. | 3\u00a0hours, 30\u00a0minutes ago \nDescription : SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin_files.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-26T20:08:28.000000Z"}, {"uuid": "9d1bb958-2f04-4a94-bdcc-660eeb25b07b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25517", "type": "seen", "source": "https://t.me/cvedetector/18929", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25517 - Seacms SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25517 \nPublished : Feb. 25, 2025, 10:15 p.m. | 1\u00a0hour, 56\u00a0minutes ago \nDescription : Seacms <=13.3\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-26T01:44:43.000000Z"}, {"uuid": "b656046a-4ef0-44f9-87cd-42c8095ac502", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25516", "type": "seen", "source": "https://t.me/cvedetector/18928", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25516 - Seacms SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25516 \nPublished : Feb. 25, 2025, 10:15 p.m. | 1\u00a0hour, 56\u00a0minutes ago \nDescription : Seacms <=13.3\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-26T01:44:42.000000Z"}, {"uuid": "5b55c90d-e807-4989-88bd-f4505d7fc61e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2563", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/26740", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-2563 PoC\nURL\uff1ahttps://github.com/ubaydev/CVE-2025-2563\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-03-29T12:05:35.000000Z"}, {"uuid": "214b81be-cbd9-40a7-adfc-0bdd0afddfeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25192", "type": "seen", "source": "https://t.me/cvedetector/18906", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25192 - \"GLPI Debug Mode Information Disclosure\"\", \n  \"Content\": \"CVE ID : CVE-2025-25192 \nPublished : Feb. 25, 2025, 6:15 p.m. | 1\u00a0hour, 46\u00a0minutes ago \nDescription : GLPI is a free asset and IT management software package. Prior to version 10.0.18, a low privileged user can enable debug mode and access sensitive information. Version 10.0.18 contains a patch. As a workaround, one may delete the `install/update.php` file. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-25T21:33:59.000000Z"}, {"uuid": "e8aa2f43-7b11-41ee-a1e7-d815c0299b7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25526", "type": "seen", "source": "https://t.me/cvedetector/17762", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25526 - Mercury MIPC552W Camera Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2025-25526 \nPublished : Feb. 11, 2025, 8:15 p.m. | 2\u00a0hours, 2\u00a0minutes ago \nDescription : Buffer overflow vulnerability in Mercury MIPC552W Camera v1.0 due to the lack of length verification, which is related to the configuration of the PPTP server. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T00:04:19.000000Z"}, {"uuid": "a4dfaee1-1427-4f3c-bdc7-667a52d0a9d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25202", "type": "seen", "source": "https://t.me/cvedetector/17734", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25202 - Ash Authentication Magic Link Token Reuse Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25202 \nPublished : Feb. 11, 2025, 7:15 p.m. | 1\u00a0hour, 1\u00a0minute ago \nDescription : Ash Authentication is an authentication framework for Elixir applications. Applications which have been bootstrapped by the igniter installer present since AshAuthentication v4.1.0 and who have used the magic link strategy _or_ are manually revoking tokens are affected by revoked tokens being allowed to verify as valid. Unless one hase implemented any kind of custom token revocation feature in your application, then one will not be affected. The impact here for users using builtin functionality is that magic link tokens are reusable until they expire. With that said, magic link tokens are only valid for 10 minutes, so the surface area for abuse is extremely low here. The flaw is patched in version 4.4.9. Additionally a compile time warning is shown to users with remediation instructions if they upgrade. 4.4.9 ships with an upgrader, so those who use `mix igniter.upgrade ash_authentication` will have the necessary patch applied. Otherwise, one may run the upgrader manually as described in the error message. As a workaround, delete the generated `:revoked?` generic action in the token resource. This will cause it to use the one internal to Ash Authentication which has always been correct. Alternatively, manually make the changes that are included in the patch. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-11T21:33:23.000000Z"}, {"uuid": "6f53024d-9247-4b57-a267-5a164662740b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25513", "type": "seen", "source": "https://t.me/cvedetector/18835", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25513 - Seacms SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25513 \nPublished : Feb. 24, 2025, 10:15 p.m. | 54\u00a0minutes ago \nDescription : Seacms <=13.3\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-25T00:39:09.000000Z"}, {"uuid": "6c84408e-b3bd-4aeb-8289-801a648bee5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25255", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/60161", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-25255\nURL\uff1ahttps://github.com/chjkfbvmvff/CVE-2025-25255\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-11-19T07:52:08.000000Z"}, {"uuid": "584a6ad4-401a-4182-98c7-34390ba66387", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25187", "type": "seen", "source": "https://t.me/cvedetector/17531", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25187 - \"Joplin Cross-Site Scripting (XSS) and Remote Code Execution\"\", \n  \"Content\": \"CVE ID : CVE-2025-25187 \nPublished : Feb. 7, 2025, 11:15 p.m. | 2\u00a0hours, 19\u00a0minutes ago \nDescription : Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks. This vulnerability is caused by adding note titles to the document using React's `dangerouslySetInnerHTML`, without first escaping HTML entities. Joplin lacks a Content-Security-Policy with a restrictive `script-src`. This allows arbitrary JavaScript execution via inline `onclick`/`onload` event handlers in unsanitized HTML. Additionally, Joplin's main window is created with `nodeIntegration` set to `true`, allowing arbitrary JavaScript execution to result in arbitrary code execution. Anyone who 1) receives notes from unknown sources and 2) uses ctrl-p to search is impacted. This issue has been addressed in version 3.1.24 and all users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-08T03:12:10.000000Z"}, {"uuid": "c105fb0b-9e56-4b5c-b58f-c0034a3eac39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25203", "type": "seen", "source": "https://t.me/cvedetector/17776", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25203 - CtrlPanel Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25203 \nPublished : Feb. 11, 2025, 11:15 p.m. | 1\u00a0hour, 7\u00a0minutes ago \nDescription : CtrlPanel is open-source billing software for hosting providers. Prior to version 1.0, a Cross-Site Scripting (XSS) vulnerability exists in the `TicketsController` and `Moderation/TicketsController` due to insufficient input validation on the `priority` field during ticket creation and unsafe rendering of this field in the moderator panel. Version 1.0 contains a patch for the issue. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T01:47:02.000000Z"}, {"uuid": "5204f0a6-d0b4-4f02-8f46-47c052adea55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25525", "type": "seen", "source": "https://t.me/cvedetector/17761", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25525 - H3C FA3010L Access Point Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25525 \nPublished : Feb. 11, 2025, 8:15 p.m. | 2\u00a0hours, 2\u00a0minutes ago \nDescription : Buffer overflow vulnerability in H3C FA3010L access points SWFA1B0V100R005 due to the lack of length verification, which is related to the setting of firewall rules. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T00:04:16.000000Z"}, {"uuid": "85589d2a-bec7-4eb4-9af4-dc50af502645", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25527", "type": "seen", "source": "https://t.me/cvedetector/17760", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25527 - Ruijie RG-NBR2600S Gateway Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25527 \nPublished : Feb. 11, 2025, 8:15 p.m. | 2\u00a0hours, 2\u00a0minutes ago \nDescription : Buffer overflow vulnerability in Ruijie RG-NBR2600S Gateway 10.3(4b12) due to the lack of length verification, which is related to the configuration of source address NAT rules. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T00:04:15.000000Z"}, {"uuid": "e579d26c-051a-4afe-9c18-c750bac0c1c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25530", "type": "seen", "source": "https://t.me/cvedetector/17759", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25530 - Digital China DCBI-Netlog-LAB Gateway Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25530 \nPublished : Feb. 11, 2025, 8:15 p.m. | 2\u00a0hours, 2\u00a0minutes ago \nDescription : Buffer overflow vulnerability in Digital China DCBI-Netlog-LAB Gateway 1.0 due to the lack of length verification, which is related to saving parental control configuration information. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T00:04:14.000000Z"}, {"uuid": "569e6456-69a1-4d8e-8a35-6ddc7ada81b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25529", "type": "seen", "source": "https://t.me/cvedetector/17758", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25529 - Digital China DCBC Gateway Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25529 \nPublished : Feb. 11, 2025, 8:15 p.m. | 2\u00a0hours, 2\u00a0minutes ago \nDescription : Buffer overflow vulnerability in Digital China DCBC Gateway 200-2.1.1 due to the lack of length verification, which is related to the configuration of static NAT rules. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T00:04:13.000000Z"}, {"uuid": "6b69aa30-feec-41ee-add8-dcd03bed440a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25528", "type": "seen", "source": "https://t.me/cvedetector/17757", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25528 - Wavlink WL-WN575A3 Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25528 \nPublished : Feb. 11, 2025, 8:15 p.m. | 2\u00a0hours, 2\u00a0minutes ago \nDescription : Multiple buffer overflow vulnerabilities in Wavlink WL-WN575A3 RPT75A3.V4300, which are caused by not performing strict length checks on user-controlled data. By successfully exploiting the vulnerabilities, attackers can crash the remote devices or execute arbitrary commands without any authorization verification. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T00:04:13.000000Z"}, {"uuid": "d1d4049b-e8a9-4ae6-bb68-4a6c0746d2eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25522", "type": "seen", "source": "https://t.me/cvedetector/17735", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25522 - Linksys WAP610N Remote Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25522 \nPublished : Feb. 11, 2025, 7:15 p.m. | 1\u00a0hour, 1\u00a0minute ago \nDescription : Buffer overflow vulnerability in Linksys WAP610N v1.0.05.002 due to the lack of length verification, which is related to the time setting operation. The attacker can directly control the remote target device by successfully exploiting this vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-11T21:33:24.000000Z"}, {"uuid": "ef48fa6a-23dd-44d8-9f8e-f9a968a97bd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25193", "type": "seen", "source": "https://t.me/cvedetector/17614", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25193 - Netty Windows Environment File Denial of Service (DoS)\", \n  \"Content\": \"CVE ID : CVE-2025-25193 \nPublished : Feb. 10, 2025, 10:15 p.m. | 1\u00a0hour, 29\u00a0minutes ago \nDescription : Netty, an asynchronous, event-driven network application framework, has a vulnerability in versions up to and including 4.1.118.Final. An unsafe reading of environment file could potentially cause a denial of service in Netty. When loaded on an Windows application, Netty attempts to load a file that does not exist. If an attacker creates such a large file, the Netty application crash. A similar issue was previously reported as CVE-2024-47535. This issue was fixed, but the fix was incomplete in that null-bytes were not counted against the input limit. Commit d1fbda62d3a47835d3fb35db8bd42ecc205a5386 contains an updated fix. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-11T01:27:23.000000Z"}, {"uuid": "a6e34f35-e15b-4824-b745-cf99c7748b85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25523", "type": "seen", "source": "https://t.me/cvedetector/17733", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25523 - Trendnet TEG-40128 Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25523 \nPublished : Feb. 11, 2025, 7:15 p.m. | 1\u00a0hour, 1\u00a0minute ago \nDescription : Buffer overflow vulnerability in Trendnet TEG-40128 Web Smart Switch v1(1.00.023) due to the lack of length verification, which is related to the mobile access point setup operation. The attacker can directly control the remote target device by successfully exploiting this vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-11T21:33:22.000000Z"}, {"uuid": "3fd0e183-3dd2-430c-aa46-33757a6cfee6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25524", "type": "seen", "source": "https://t.me/cvedetector/17732", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25524 - TOTOLink X6000R Router Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25524 \nPublished : Feb. 11, 2025, 7:15 p.m. | 1\u00a0hour, 1\u00a0minute ago \nDescription : Buffer overflow vulnerability in TOTOLink X6000R routers V9.4.0cu.652_B20230116 due to the lack of length verification, which is related to the addition of Wi-Fi filtering rules. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-11T21:33:21.000000Z"}, {"uuid": "04fdaabd-071b-485a-8b06-0f9ae9395024", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25281", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4398", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25281\n\ud83d\udd25 CVSS Score: 7.5 (CVSS_V3)\n\ud83d\udd39 Description: An attacker may modify the URL to discover sensitive information about the target network.\n\ud83d\udccf Published: 2025-02-14T00:30:44Z\n\ud83d\udccf Modified: 2025-02-14T00:30:44Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-25281\n2. https://old.outbackpower.com/about-outback/contact/contact-us\n3. https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-17", "creation_timestamp": "2025-02-14T01:16:16.000000Z"}, {"uuid": "44ed6ad4-2bb6-4341-84b7-1be46f8209af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25167", "type": "seen", "source": "Telegram/uVzfu-Fjnbs-4AmfjjumtZTIGvEZepB3bI9F9_pI5TJkXUM", "content": "", "creation_timestamp": "2026-04-01T21:28:09.000000Z"}, {"uuid": "d2a39ef6-55a9-4268-9e4b-fd945b44e64e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25163", "type": "seen", "source": "Telegram/uVzfu-Fjnbs-4AmfjjumtZTIGvEZepB3bI9F9_pI5TJkXUM", "content": "", "creation_timestamp": "2026-04-01T21:28:09.000000Z"}, {"uuid": "e01929d7-d65f-4794-a71d-5e52ec22294b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25243", "type": "seen", "source": "https://t.me/cvedetector/17617", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25243 - SAP Supplier Relationship Management (SRM) File Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-25243 \nPublished : Feb. 11, 2025, 1:15 a.m. | 31\u00a0minutes ago \nDescription : SAP Supplier Relationship Management (Master Data Management Catalog) allows an unauthenticated attacker to use a publicly available servlet to download an arbitrary file over the network without any user interaction. This can reveal highly sensitive information with no impact to integrity or availability. \nSeverity: 8.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-11T03:07:42.000000Z"}, {"uuid": "39707cba-f198-41df-9e8c-033fd849e538", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25241", "type": "seen", "source": "https://t.me/cvedetector/17618", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25241 - Apache Application Missing Authorization Check Allows Employee Information Access\", \n  \"Content\": \"CVE ID : CVE-2025-25241 \nPublished : Feb. 11, 2025, 1:15 a.m. | 31\u00a0minutes ago \nDescription : Due to a missing authorization check, an attacker who is logged in to application can view/ delete \ufffdMy Overtime Requests\ufffd which could allow the attacker to access employee information. This leads to low impact on confidentiality, integrity of the application. There is no impact on availability. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-11T03:07:42.000000Z"}, {"uuid": "dd83e037-8e52-4a67-aae5-2b050685578e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25194", "type": "seen", "source": "https://t.me/cvedetector/17608", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25194 - Lemmy ActivityPub Federation SSRF\", \n  \"Content\": \"CVE ID : CVE-2025-25194 \nPublished : Feb. 10, 2025, 11:15 p.m. | 29\u00a0minutes ago \nDescription : Lemmy, a link aggregator and forum for the fediverse, is vulnerable to server-side request forgery via a dependency on activitypub_federation, a framework for ActivityPub federation in Rust. This vulnerability, which is present in versions 0.6.2 and prior of activitypub_federation and versions 0.19.8 and prior of Lemmy, allows a user to bypass any predefined hardcoded URL path or security anti-Localhost mechanism and perform an arbitrary GET request to any Host, Port and URL using a Webfinger Request. As of time of publication, a fix has not been made available. \nSeverity: 4.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-11T01:27:16.000000Z"}, {"uuid": "2fbbe4fe-8cde-4433-95c8-dcac061df9c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25167", "type": "seen", "source": "Telegram/EgY-3dooiREg-dALgS8idmo8jFkn1Hp5AACRbJP7ZYbsQN4", "content": "", "creation_timestamp": "2026-04-01T21:28:26.000000Z"}, {"uuid": "a5ee0672-a4e0-43e8-8626-e64ec4bae50c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/59240", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-25257 PoC for educational use and/or authorised pentesting.\nURL\uff1ahttps://github.com/mr-r3b00t/CVE-2025-25257\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-11-11T10:13:46.000000Z"}, {"uuid": "413629c3-29b7-47a8-b0d6-2bbf1796791b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25186", "type": "published-proof-of-concept", "source": "https://t.me/cvedetector/17565", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25186 - Apache Net::IMAP Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25186 \nPublished : Feb. 10, 2025, 4:15 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Starting in version 0.3.2 and prior to versions 0.3.8, 0.4.19, and 0.5.6, there is a possibility for denial of service by memory exhaustion in `net-imap`'s response parser.  At any time while the client is connected, a malicious server can send  can send highly compressed `uid-set` data which is automatically read by the client's receiver thread. The response parser uses `Range#to_a` to convert the `uid-set` data into arrays of integers, with no limitation on the expanded size of the ranges. Versions 0.3.8, 0.4.19, 0.5.6, and higher fix this issue. Additional details for proper configuration of fixed versions and backward compatibility are available in the GitHub Security Advisory. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-10T18:45:35.000000Z"}, {"uuid": "c05ddc0f-25c9-4d04-b0c8-d9d6238064b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "published-proof-of-concept", "source": "Telegram/lbg3qz8wK-Srr-k6BvW0hDYmtpTKwvGGzCPXHWNgNmGS9PQ", "content": "", "creation_timestamp": "2025-11-11T15:00:08.000000Z"}, {"uuid": "f917514a-af09-46f3-904f-74f6e4baf0c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25247", "type": "seen", "source": "https://t.me/cvedetector/17553", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25247 - Apache Felix Webconsole Cross-site Scripting\", \n  \"Content\": \"CVE ID : CVE-2025-25247 \nPublished : Feb. 10, 2025, 12:15 p.m. | 1\u00a0hour, 15\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Felix Webconsole.  \n  \nThis issue affects Apache Felix Webconsole 4.x up to 4.9.8 and 5.x up to 5.0.8.  \n  \nUsers are recommended to upgrade to version 4.9.10 or 5.0.10 or higher, which fixes the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-10T14:34:45.000000Z"}, {"uuid": "6499962c-20d1-4de8-af61-a3fc40a91ba0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25183", "type": "seen", "source": "https://t.me/cvedetector/17515", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25183 - LLM vLLM Hash Collision Cache Manipulation\", \n  \"Content\": \"CVE ID : CVE-2025-25183 \nPublished : Feb. 7, 2025, 8:15 p.m. | 1\u00a0hour, 3\u00a0minutes ago \nDescription : vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Maliciously constructed statements can lead to hash collisions, resulting in cache reuse, which can interfere with subsequent responses and cause unintended behavior. Prefix caching makes use of Python's built-in hash() function. As of Python 3.12, the behavior of hash(None) has changed to be a predictable constant value. This makes it more feasible that someone could try exploit hash collisions. The impact of a collision would be using cache that was generated using different content. Given knowledge of prompts in use and predictable hashing behavior, someone could intentionally populate the cache using a prompt known to collide with another prompt in use. This issue has been addressed in version 0.7.2 and all users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 2.6 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-07T23:01:23.000000Z"}, {"uuid": "9e440ddd-e57c-4cb3-93f8-fce7587b2d9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25159", "type": "seen", "source": "https://t.me/cvedetector/17476", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25159 - Robert Kolatzek WP Doodlez Cross-site Scripting\", \n  \"Content\": \"CVE ID : CVE-2025-25159 \nPublished : Feb. 7, 2025, 10:15 a.m. | 51\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in robert_kolatzek WP doodlez allows Stored XSS. This issue affects WP doodlez: from n/a through 1.0.10. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-07T12:08:36.000000Z"}, {"uuid": "f1f91c8e-a3d4-411d-bb9c-d129c42bf728", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25156", "type": "seen", "source": "https://t.me/cvedetector/17475", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25156 - Stanko Metodiev Quote Comments CSRF Vulnerability Allows Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2025-25156 \nPublished : Feb. 7, 2025, 10:15 a.m. | 51\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in Stanko Metodiev Quote Comments allows Stored XSS. This issue affects Quote Comments: from n/a through 2.2.1. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-07T12:08:36.000000Z"}, {"uuid": "159fd2fc-aa6e-43b7-aabd-aa480cec292e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25069", "type": "seen", "source": "https://t.me/cvedetector/17492", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25069 - Apache Kvrocks Cross-Protocol Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25069 \nPublished : Feb. 7, 2025, 1:15 p.m. | 1\u00a0hour, 55\u00a0minutes ago \nDescription : A Cross-Protocol Scripting vulnerability is found in Apache Kvrocks.  \n  \nSince Kvrocks didn't detect if \"Host:\" or \"POST\" appears in RESP requests,  \na valid HTTP request can also be sent to Kvrocks as a valid RESP request   \nand trigger some database operations, which can be\u00a0dangerous when   \nit is chained with SSRF.  \n  \nIt is similiar to\u00a0CVE-2016-10517 in Redis.  \n  \nThis issue affects Apache Kvrocks: from the initial version to the latest version 2.11.0.  \n  \nUsers are recommended to upgrade to version 2.11.1, which fixes the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-07T16:19:42.000000Z"}, {"uuid": "85c686f8-bb4e-418f-8a60-edc1fa53e8e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25145", "type": "seen", "source": "https://t.me/cvedetector/17489", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25145 - Infusionsoft Analytics CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25145 \nPublished : Feb. 7, 2025, 10:15 a.m. | 51\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in jordan.hatch Infusionsoft Analytics allows Cross Site Request Forgery. This issue affects Infusionsoft Analytics: from n/a through 2.0. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-07T12:08:52.000000Z"}, {"uuid": "3715e464-d12c-41a4-92e4-600b0945afd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25144", "type": "seen", "source": "https://t.me/cvedetector/17488", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25144 - Theasys Cross-site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25144 \nPublished : Feb. 7, 2025, 10:15 a.m. | 51\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in theasys Theasys allows Stored XSS. This issue affects Theasys: from n/a through 1.0.1. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-07T12:08:52.000000Z"}, {"uuid": "e39702a2-1e4d-480e-969a-2f26138bff6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25143", "type": "seen", "source": "https://t.me/cvedetector/17487", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25143 - GlobalQuran CSRF Attack\", \n  \"Content\": \"CVE ID : CVE-2025-25143 \nPublished : Feb. 7, 2025, 10:15 a.m. | 51\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in ibasit GlobalQuran allows Cross Site Request Forgery. This issue affects GlobalQuran: from n/a through 1.0. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-07T12:08:51.000000Z"}, {"uuid": "f9d15bc1-b07d-40fb-add3-b23a820106fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25141", "type": "seen", "source": "https://t.me/cvedetector/17486", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25141 - Zankover Fami Sales Popup PHP Remote File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25141 \nPublished : Feb. 7, 2025, 10:15 a.m. | 51\u00a0minutes ago \nDescription : Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in zankover Fami Sales Popup allows PHP Local File Inclusion. This issue affects Fami Sales Popup: from n/a through 2.0.0. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-07T12:08:50.000000Z"}, {"uuid": "7174f9e6-4b52-4baa-8951-de3020dd8db5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25140", "type": "seen", "source": "https://t.me/cvedetector/17485", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25140 - Scriptonite Simple User Profile CSRF Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2025-25140 \nPublished : Feb. 7, 2025, 10:15 a.m. | 51\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in Scriptonite Simple User Profile allows Stored XSS. This issue affects Simple User Profile: from n/a through 1.9. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-07T12:08:49.000000Z"}, {"uuid": "9576191a-4fbc-469c-ab4e-8faf62050b05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25149", "type": "seen", "source": "https://t.me/cvedetector/17484", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25149 - Danillo Nunes Login-box CSRF Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2025-25149 \nPublished : Feb. 7, 2025, 10:15 a.m. | 51\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in Danillo Nunes Login-box allows Stored XSS. This issue affects Login-box: from n/a through 2.0.4. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-07T12:08:46.000000Z"}, {"uuid": "a776989b-bebc-4a84-95f6-a498f2678eae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25147", "type": "seen", "source": "https://t.me/cvedetector/17483", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25147 - Phillip.Gooch Auto SEO CSRF Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2025-25147 \nPublished : Feb. 7, 2025, 10:15 a.m. | 51\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in Phillip.Gooch Auto SEO allows Stored XSS. This issue affects Auto SEO: from n/a through 2.5.6. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-07T12:08:45.000000Z"}, {"uuid": "003ea17a-0434-4630-8df9-28fadeac9984", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25153", "type": "seen", "source": "https://t.me/cvedetector/17482", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25153 - Apache DJMZ Simple Auto Tag CSRF to Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2025-25153 \nPublished : Feb. 7, 2025, 10:15 a.m. | 51\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in djjmz Simple Auto Tag allows Stored XSS. This issue affects Simple Auto Tag: from n/a through 1.1. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-07T12:08:44.000000Z"}, {"uuid": "07da9d8f-107f-4d75-aad8-ac85f8c779b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25152", "type": "seen", "source": "https://t.me/cvedetector/17481", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25152 - LukaszWiecek Smart DoFollow CSRF Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2025-25152 \nPublished : Feb. 7, 2025, 10:15 a.m. | 51\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in LukaszWiecek Smart DoFollow allows Stored XSS. This issue affects Smart DoFollow: from n/a through 1.0.2. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-07T12:08:43.000000Z"}, {"uuid": "a5370122-dcfe-45de-af5e-2a5a2935d1fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25151", "type": "seen", "source": "https://t.me/cvedetector/17480", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25151 - StylemixThemes uListing SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25151 \nPublished : Feb. 7, 2025, 10:15 a.m. | 51\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes uListing allows SQL Injection. This issue affects uListing: from n/a through 2.1.6. \nSeverity: 8.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-07T12:08:42.000000Z"}, {"uuid": "7346e66a-ecfe-4eaa-8701-5187427ed4cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25148", "type": "seen", "source": "https://t.me/cvedetector/17479", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25148 - ElbowRobo Stored XSS CSRF\", \n  \"Content\": \"CVE ID : CVE-2025-25148 \nPublished : Feb. 7, 2025, 10:15 a.m. | 51\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in ElbowRobo Read More Copy Link allows Stored XSS. This issue affects Read More Copy Link: from n/a through 1.0.2. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-07T12:08:38.000000Z"}, {"uuid": "f1167f1a-e911-4fd9-80a0-ed67d212b1ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25163", "type": "seen", "source": "https://t.me/cvedetector/17478", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25163 - Zach Swetz Plugin A/B Image Optimizer Path Traversal\", \n  \"Content\": \"CVE ID : CVE-2025-25163 \nPublished : Feb. 7, 2025, 10:15 a.m. | 51\u00a0minutes ago \nDescription : Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Zach Swetz Plugin A/B Image Optimizer allows Path Traversal. This issue affects Plugin A/B Image Optimizer: from n/a through 3.3. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-07T12:08:38.000000Z"}, {"uuid": "a1c5757b-0761-40be-89bf-98fa6f83b180", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25160", "type": "seen", "source": "https://t.me/cvedetector/17477", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25160 - \"Mark Barnes Style Tweaker CSRF Stored XSS\"\", \n  \"Content\": \"CVE ID : CVE-2025-25160 \nPublished : Feb. 7, 2025, 10:15 a.m. | 51\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in Mark Barnes Style Tweaker allows Stored XSS. This issue affects Style Tweaker: from n/a through 0.11. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-07T12:08:37.000000Z"}, {"uuid": "eeb467de-5dec-409a-9ee6-ba50d675eafe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25155", "type": "seen", "source": "https://t.me/cvedetector/17474", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25155 - Efreja Music Sheet Viewer Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25155 \nPublished : Feb. 7, 2025, 10:15 a.m. | 51\u00a0minutes ago \nDescription : Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in efreja Music Sheet Viewer allows Path Traversal. This issue affects Music Sheet Viewer: from n/a through 4.1. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-07T12:08:32.000000Z"}, {"uuid": "e08d18bd-72af-4797-b4eb-91a71201ea0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25154", "type": "seen", "source": "https://t.me/cvedetector/17473", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25154 - Apache Struts Stored Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF)\", \n  \"Content\": \"CVE ID : CVE-2025-25154 \nPublished : Feb. 7, 2025, 10:15 a.m. | 51\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in scweber Custom Comment Notifications allows Stored XSS. This issue affects Custom Comment Notifications: from n/a through 1.0.8. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-07T12:08:31.000000Z"}, {"uuid": "cb651305-5ef3-408c-8aea-18ac4123f492", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25168", "type": "seen", "source": "https://t.me/cvedetector/17472", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25168 - Blackandwhitedigital BookPress CSRF allows XSS\", \n  \"Content\": \"CVE ID : CVE-2025-25168 \nPublished : Feb. 7, 2025, 10:15 a.m. | 51\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in blackandwhitedigital BookPress \u2013 For Book Authors allows Cross-Site Scripting (XSS). This issue affects BookPress \u2013 For Book Authors: from n/a through 1.2.7. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-07T12:08:31.000000Z"}, {"uuid": "a9b4fa52-0462-435f-b2a9-a106e48f6e8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25167", "type": "seen", "source": "https://t.me/cvedetector/17471", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25167 - Blackandwhitedigital BookPress Missing Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25167 \nPublished : Feb. 7, 2025, 10:15 a.m. | 51\u00a0minutes ago \nDescription : Missing Authorization vulnerability in blackandwhitedigital BookPress \u2013 For Book Authors allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects BookPress \u2013 For Book Authors: from n/a through 1.2.7. \nSeverity: 8.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-07T12:08:30.000000Z"}, {"uuid": "c2a39078-3558-449c-b467-9e570e4ea0a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25166", "type": "seen", "source": "https://t.me/cvedetector/17470", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25166 - Gabrieldarezzo InLocation CSRF Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2025-25166 \nPublished : Feb. 7, 2025, 10:15 a.m. | 51\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in gabrieldarezzo InLocation allows Stored XSS. This issue affects InLocation: from n/a through 1.8. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-07T12:08:29.000000Z"}, {"uuid": "7fcb7ce5-1259-4f26-bc33-459323dfcb0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25662", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4836", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25662\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tenda O4 V3.0 V1.0.0.10(2936) is vulnerable to Buffer Overflow in the function SafeSetMacFilter of the file /goform/setMacFilterList via the argument remark/type/time.\n\ud83d\udccf Published: 2025-02-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-20T22:19:15.554Z\n\ud83d\udd17 References:\n1. https://github.com/jangfan/my-vuln/blob/main/Tenda/O4V3/setMacFilterList.md", "creation_timestamp": "2025-02-20T23:17:13.000000Z"}, {"uuid": "6cbc4c22-7157-4999-b29f-2642f44bc257", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25403", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13858", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25403\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Slims (Senayan Library Management Systems) 9 Bulian V9.6.1 is vulnerable to SQL Injection in admin/modules/master_file/coll_type.php.\n\ud83d\udccf Published: 2025-04-29T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-29T15:51:41.905Z\n\ud83d\udd17 References:\n1. https://github.com/christopherralinanggoman/cve-skripsi/blob/main/my_reports/slims-9-bulian-coll-type-report.md\n2. https://github.com/slims/slims9_bulian/issues/273", "creation_timestamp": "2025-04-29T16:12:55.000000Z"}, {"uuid": "bcdc94c3-a881-43d1-9d84-412127095a68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25823", "type": "seen", "source": "Telegram/-oOPIbhxlOryByHpeFrpeozjdFohi_pHkjd81oDNzz9aLlHa", "content": "", "creation_timestamp": "2025-03-08T04:34:55.000000Z"}, {"uuid": "59bbde76-61d3-4050-97be-da06b2a998b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/44109", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aFortiWeb SQLi to RCE\nURL\uff1ahttps://github.com/0xgh057r3c0n/CVE-2025-25257\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-07-15T10:03:54.000000Z"}, {"uuid": "34664d55-4ada-442b-a0a2-d0b1340721d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25497", "type": "seen", "source": "Telegram/sFZ4jDH9DlMLp4W-4HYAn-kpM9RoUDxchR0ZR4BuwXkhEzGg", "content": "", "creation_timestamp": "2025-03-08T04:34:12.000000Z"}, {"uuid": "5353f89b-5aa4-44dd-b7ce-0db324d04ed9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25294", "type": "seen", "source": "Telegram/gFgc_m98whrEiaktviwszW_cDOTvbwgrI0O3I5rQz-NNH2hD", "content": "", "creation_timestamp": "2025-03-08T04:34:11.000000Z"}, {"uuid": "43834e94-6eec-4716-8393-fe75f7382a88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25191", "type": "seen", "source": "Telegram/t03x6pNx24-eTJshAV_FsHfWCrtfXMGO-U-1q-EL3BMUSY_n", "content": "", "creation_timestamp": "2025-03-08T04:34:11.000000Z"}, {"uuid": "437580a3-cfa0-40c7-93b3-84c6ddea012e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25793", "type": "seen", "source": "Telegram/jUAso2ru7n-Lz0ZwFdRA9eADVYjG8DksVf9dAyr4W0YvpySe", "content": "", "creation_timestamp": "2025-03-08T04:34:11.000000Z"}, {"uuid": "759f6d06-2db3-4549-bb21-e912efc3fa67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2509", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15016", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2509\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Out-of-Bounds Read in Virglrenderer in ChromeOS  16093.57.0 allows a malicious guest VM to achieve arbitrary address access within the crosvm sandboxed process, potentially leading to \nVM escape via crafted vertex elements data triggering an out-of-bounds read in util_format_description.\n\ud83d\udccf Published: 2025-05-06T00:59:32.231Z\n\ud83d\udccf Modified: 2025-05-06T01:01:02.523Z\n\ud83d\udd17 References:\n1. https://issuetracker.google.com/issues/385851796\n2. https://issues.chromium.org/issues/b/385851796", "creation_timestamp": "2025-05-06T01:20:29.000000Z"}, {"uuid": "b0f42006-5723-44ea-ba75-ad057278ffce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25063", "type": "published-proof-of-concept", "source": "Telegram/zgFBnkvVSxRTeAkLtgRFUn68oK3AG1ffjg88xq_I-KMhHIo", "content": "", "creation_timestamp": "2025-08-18T23:00:08.000000Z"}, {"uuid": "9b013ed4-17dc-4f38-959d-1554d5332968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2568", "type": "published-proof-of-concept", "source": "Telegram/PhhScPJ8nIwc2vRijZXtfdgvBVI811MtSflqcGx0gK4a11w", "content": "", "creation_timestamp": "2025-10-05T21:00:12.000000Z"}, {"uuid": "3b6239b7-91f1-4050-a1c4-d761b19e046b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2568", "type": "published-proof-of-concept", "source": "Telegram/sQVIjNjkH2EXm_goy9PFPSmXoZFdoGy6OvI98iStzZ6dE3w", "content": "", "creation_timestamp": "2025-10-06T21:00:04.000000Z"}, {"uuid": "142e2044-a4a1-4696-9f78-8eab8e402697", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25570", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5926", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25570\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Vue Vben Admin 2.10.1 allows unauthorized login to the backend due to an issue with hardcoded credentials.\n\ud83d\udccf Published: 2025-02-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-28T17:20:12.273Z\n\ud83d\udd17 References:\n1. https://github.com/Hackerhan/Vben-Admin", "creation_timestamp": "2025-02-28T17:27:11.000000Z"}, {"uuid": "9541dfdb-718b-4f6f-82f7-2ad866baa361", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25478", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6024", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25478\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The account file upload functionality in Syspass 3.2.x fails to properly handle special characters in filenames. This mismanagement leads to the disclosure of the web application s source code, exposing sensitive information such as the database password.\n\ud83d\udccf Published: 2025-02-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-28T22:19:18.561Z\n\ud83d\udd17 References:\n1. https://github.com/sysentr0py/CVEs/tree/main/CVE-2025-25478", "creation_timestamp": "2025-02-28T23:27:50.000000Z"}, {"uuid": "677ad59b-61e0-4bc5-86f4-0067bb0bce9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25476", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6023", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25476\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A stored cross-site scripting (XSS) vulnerability in SysPass 3.2.x allows a malicious user with elevated privileges to execute arbitrary Javascript code by specifying a malicious XSS payload as a notification type or notification component.\n\ud83d\udccf Published: 2025-02-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-28T22:20:58.947Z\n\ud83d\udd17 References:\n1. https://github.com/sysentr0py/CVEs/tree/main/CVE-2025-25476", "creation_timestamp": "2025-02-28T23:27:50.000000Z"}, {"uuid": "8da58526-b847-44bd-ab42-3eb7f29a293a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25379", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6022", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25379\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Cross Site Request Forgery vulnerability in 07FLYCMS v.1.3.9 allows a remote attacker to execute arbitrary code via the id parameter of the del.html component.\n\ud83d\udccf Published: 2025-02-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-28T22:26:17.682Z\n\ud83d\udd17 References:\n1. https://github.com/R2og/Sun-jialiang/tree/main/9/readme.md", "creation_timestamp": "2025-02-28T23:27:49.000000Z"}, {"uuid": "3c3ef159-4280-4de8-8a2b-9a8d14b10103", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25988", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4498", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25988\n\ud83d\udd25 CVSS Score: 4.2 (CVSS_V3)\n\ud83d\udd39 Description: Cross Site Scripting vulnerability in hooskcms v.1.8 allows a remote attacker to cause a denial of service via the custom Link title parameter and the Title parameter.\n\ud83d\udccf Published: 2025-02-14T18:30:52Z\n\ud83d\udccf Modified: 2025-02-14T21:31:05Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-25988\n2. https://github.com/havok89/Hoosk/issues/67", "creation_timestamp": "2025-02-14T22:10:53.000000Z"}, {"uuid": "a70e17f4-309f-4320-b5d5-769d51e9a4fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25192", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5341", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25192\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: GLPI is a free asset and IT management software package. Prior to version 10.0.18, a low privileged user can enable debug mode and access sensitive information. Version 10.0.18 contains a patch. As a workaround, one may delete the `install/update.php` file.\n\ud83d\udccf Published: 2025-02-25T17:58:20.388Z\n\ud83d\udccf Modified: 2025-02-25T17:58:20.388Z\n\ud83d\udd17 References:\n1. https://github.com/glpi-project/glpi/security/advisories/GHSA-86cx-hcfc-8mm8\n2. https://github.com/glpi-project/glpi/releases/tag/10.0.18", "creation_timestamp": "2025-02-25T18:22:35.000000Z"}, {"uuid": "741c3b89-84bc-4333-b726-eba4acb1caa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25064", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/13526", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aZimbra 10 SQL Injection (CVE-2025-25064) Analysis Article\nURL\uff1ahttps://github.com/yelang123/Zimbra10_SQL_Injection\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-02-15T04:18:59.000000Z"}, {"uuid": "e15c8e5e-7903-4771-aff9-ba3997cd40af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25525", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3923", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25525\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-11T20:15:38.727\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://gist.github.com/XiaoCurry/d797c3cce41678028ff2d20c4e12137e", "creation_timestamp": "2025-02-11T21:12:51.000000Z"}, {"uuid": "3003b705-17fe-45f6-9ea3-35ad31783328", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25526", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3922", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25526\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-11T20:15:38.850\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://gist.github.com/XiaoCurry/5e3770d5e78e0aa5f9d51ba3882c35cd", "creation_timestamp": "2025-02-11T21:12:44.000000Z"}, {"uuid": "483eee0f-329a-4d60-bca6-c6948f1a8b70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25527", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3921", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25527\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-11T20:15:38.973\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://gist.github.com/XiaoCurry/354620285280aca98acba94a9c5fffb6", "creation_timestamp": "2025-02-11T21:12:41.000000Z"}, {"uuid": "6f6454b7-77c3-4972-85a4-59ac8e558e24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25524", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4295", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25524\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-11T19:15:19.110\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://gist.github.com/XiaoCurry/ce1f80afd2d8be8ca543437f16eae96b", "creation_timestamp": "2025-02-13T19:09:46.000000Z"}, {"uuid": "170724f8-0ea8-43ba-a8e5-bafccfcf3356", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25181", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3880", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25181\n\ud83c\udfe2 Vendor: Advantive\n\ud83d\udda5\ufe0f Product: VeraCore\n\ud83d\udd39 Description: A SQL injection vulnerability in timeoutWarning.asp in Advantive VeraCore through 2025.1.0 allows remote attackers to execute arbitrary SQL commands via the PmSess1 parameter.\n\ud83d\udccf Published: 2025-02-03T00:00:00Z\n\ud83d\udd17 References:\n1. https://intezer.com/blog/research/xe-group-exploiting-zero-days/\n2. https://www.cybersecurity-help.cz/vdb/SB2025020546", "creation_timestamp": "2025-02-08T23:20:26.000000Z"}, {"uuid": "86a0e576-fa30-4e10-ab0b-76f7773633a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25530", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3918", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25530\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-11T20:15:39.327\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://gist.github.com/XiaoCurry/570a765f6812b8c53d35f623ee701b19", "creation_timestamp": "2025-02-11T21:12:35.000000Z"}, {"uuid": "64aa0709-e7f7-4235-b0c5-02ca47296c00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25202", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3934", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25202\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: ### Impact\n\nApplications which have been bootstrapped by the new igniter installer (since AshAuthentication v4.1.0) and who have used the magic link strategy, password resets, confirmation, or are manually revoking tokens are affected by revoked tokens being allowed to verify as valid. If you did not use the new installer, then you are absolutely not affected.\n\nAdditionally, unless you have implemented any kind of custom token revocation feature in your application (in which case even cursory testing would have uncovered this issue), then you will not be significantly affected. \n\nThe impact here for users is as follows:\n\n  - For users using the magic link strategy, magic link tokens are reusable until they expire instead of being immediately revoked. By default magic link tokens are valid for 10 minutes.\n  - For users of password resets in the password strategy, password reset tokens are reusable until they expire instead of being immediately revoked. By default password reset tokens are valid for 3 days.\n  - For users of the confirmation add-on, confirmation tokens are reusable until they expire instead of being immediately revoked. By default password reset tokens are valid for 3 days.\n\n### Patches\n\nThe flaw is patched in version 4.4.9. Additionally a compile time warning is shown to users with remediation instructions if they upgrade. 4.4.9 ships with an upgrader, so if you use `mix igniter.upgrade ash_authentication` the necessary patch will be applied for you. Otherwise you can run the upgrader manually as described in the error message\n\n#### Example\n```elixir\n[warning] Warning while compiling Tunez.Accounts.Token:\n\nThe `:jti` and `:token` options to the `:revoked?` action must allow nil values and it must return a `:boolean`.\n\nThis was an error in our igniter installer previous to version 4.4.9, which allowed revoked tokens to be reused.\n\nTo fix this, run the following command in your shell:\n\n    mix ash_authentication.upgrade 4.4.8 4.4.9\n\nOr:\n\n  - remove `allow_nil?: false` from these action arguments, and\n  - ensure that the action returns `:boolean`.\n\n  like so:\n\n    action :revoked?, :boolean do\n      description \"Returns true if a revocation token is found for the provided token\"\n      argument :token, :string, sensitive?: true\n      argument :jti, :string, sensitive?: true\n\n      run AshAuthentication.TokenResource.IsRevoked\n    end\n```\n\n### Workarounds\n\nDelete the generated `:revoked?` generic action in your token resource This will cause it to use the one internal to AshAuthentication which has always been correct. Alternatively,  manually make the changes described above.\n\n### References\n\nSee the `#ash_authentication` channel on the Ash Discord.\n\ud83d\udccf Published: 2025-02-11T18:12:33Z\n\ud83d\udccf Modified: 2025-02-11T21:40:09Z\n\ud83d\udd17 References:\n1. https://github.com/team-alembic/ash_authentication/security/advisories/GHSA-qrm9-f75w-hg4c\n2. https://nvd.nist.gov/vuln/detail/CVE-2025-25202\n3. https://github.com/team-alembic/ash_authentication/commit/2dee55252df26fe3d990ff1199397cdcf1bfea8a\n4. https://github.com/team-alembic/ash_authentication", "creation_timestamp": "2025-02-11T22:07:59.000000Z"}, {"uuid": "6a5e5803-a17a-4f06-9135-0ec3ddbad6e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25528", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3920", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25528\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-11T20:15:39.090\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://gist.github.com/XiaoCurry/87f3a4412c46fa9c27d2f723136920b8", "creation_timestamp": "2025-02-11T21:12:39.000000Z"}, {"uuid": "6f291500-bd94-4f3c-bd31-856d79a93c93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25529", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3919", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25529\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-11T20:15:39.217\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://gist.github.com/XiaoCurry/121e150c1cc100eab2cbd8ba3b55626b", "creation_timestamp": "2025-02-11T21:12:37.000000Z"}, {"uuid": "0c6dae93-2b66-4763-856e-f7b7dcba11b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25897", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4282", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25897\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-13T16:16:49.790\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://github.com/2664521593/mycve/blob/main/TP-Link/BOF_in_TP-Link_TL-WR841ND-V11_3.pdf", "creation_timestamp": "2025-02-13T17:12:40.000000Z"}, {"uuid": "26d19219-e27c-4d73-9347-dbc6b91cee82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25898", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4281", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25898\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-13T16:16:49.867\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://github.com/2664521593/mycve/blob/main/TP-Link/BOF_in_TP-Link_TL-WR841ND-V11_1.pdf", "creation_timestamp": "2025-02-13T17:12:37.000000Z"}, {"uuid": "968abbf0-9387-4e05-8c58-2b86379c781d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25195", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4356", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25195\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-13T22:15:13.100\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://github.com/zulip/zulip/commit/50256f48314250978f521ef439cafa704e056539\n2. https://github.com/zulip/zulip/commit/75be449d456d29fef27e9d1828bafa30174284b4\n3. https://github.com/zulip/zulip/commit/a2a1a7f8d152296c8966f1380872c0ac69e5c87e\n4. https://github.com/zulip/zulip/security/advisories/GHSA-x8cx-3hq5-4wj9", "creation_timestamp": "2025-02-13T23:11:16.000000Z"}, {"uuid": "343bf0c1-40bb-4df6-a8da-65c714aba0c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25354", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4285", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25354\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-13T16:16:49.433\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://github.com/Santoshcyber1/CVE-wirteup/blob/main/Phpgurukul/Land%20record/SQL%20Injection%20contact.pdf", "creation_timestamp": "2025-02-13T17:14:54.000000Z"}, {"uuid": "30d07c93-39d1-4722-83f2-1b2230edf6db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25356", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4284", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25356\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-13T16:16:49.613\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://github.com/Santoshcyber1/CVE-wirteup/blob/main/Phpgurukul/Land%20record/SQL%20Injection%20tadate.pdf", "creation_timestamp": "2025-02-13T17:12:45.000000Z"}, {"uuid": "f444bbfd-6c6c-49b2-85df-95dbbf9107c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25357", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4283", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25357\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-13T16:16:49.700\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://github.com/Santoshcyber1/CVE-wirteup/blob/main/Phpgurukul/Land%20record/SQL%20Injection%20Emails.pdf", "creation_timestamp": "2025-02-13T17:12:42.000000Z"}, {"uuid": "77d7495a-fa1c-4210-a90a-ccb7d01c72f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25287", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4287", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25287\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-13T16:16:49.187\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://github.com/lakejason0/mediawiki-skins-Lakeus/blob/82ad2cd341f85b814a6a0f37969e6210ebf2521d/includes/SkinLakeus.php#L27\n2. https://github.com/lakejason0/mediawiki-skins-Lakeus/blob/82ad2cd341f85b814a6a0f37969e6210ebf2521d/resources/themeDesigner.js\n3. https://github.com/lakejason0/mediawiki-skins-Lakeus/commit/fb79928f06efa47677fff27e0f4755eb32b1c8d9\n4. https://github.com/lakejason0/mediawiki-skins-Lakeus/security/advisories/GHSA-mq77-3q68-v64v", "creation_timestamp": "2025-02-13T17:14:59.000000Z"}, {"uuid": "184042c7-c183-46db-8e0f-8ffd818b8128", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25193", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4455", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25193\n\ud83d\udd25 CVSS Score: 5.4 (CVSS_V3)\n\ud83d\udd39 Description: ### Summary\nAn unsafe reading of environment file could potentially cause a denial of service in Netty.\nWhen loaded on an Windows application, Netty attemps to load a file that does not exist. If an attacker creates such a large file, the Netty application crash.\n\n### Details\nA similar issue was previously reported in https://github.com/netty/netty/security/advisories/GHSA-xq3w-v528-46rv\nThis issue was fixed, but the fix was incomplete in that null-bytes were not counted against the input limit.\n\n\n### PoC\nThe PoC is the same as for https://github.com/netty/netty/security/advisories/GHSA-xq3w-v528-46rv with the detail that the file should only contain null-bytes; 0x00.\nWhen the null-bytes are encountered by the `InputStreamReader`, it will issue replacement characters in its charset decoding, which will fill up the line-buffer in the `BufferedReader.readLine()`, because the replacement character is not a line-break character.\n\n### Impact\nImpact is the same as https://github.com/netty/netty/security/advisories/GHSA-xq3w-v528-46rv\n\ud83d\udccf Published: 2025-02-10T18:14:47Z\n\ud83d\udccf Modified: 2025-02-14T15:02:31Z\n\ud83d\udd17 References:\n1. https://github.com/netty/netty/security/advisories/GHSA-389x-839f-4rhx\n2. https://nvd.nist.gov/vuln/detail/CVE-2025-25193\n3. https://github.com/netty/netty/commit/d1fbda62d3a47835d3fb35db8bd42ecc205a5386\n4. https://github.com/netty/netty", "creation_timestamp": "2025-02-14T15:15:16.000000Z"}, {"uuid": "6b178698-ccbe-4ca1-8a0e-cfbfe558e57f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25990", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4490", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25990\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Cross Site Scripting vulnerability in hooskcms v.1.7.1 allows a remote attacker to obtain sensitive information via the /install/index.php component.\n\ud83d\udccf Published: 2025-02-14T18:30:52Z\n\ud83d\udccf Modified: 2025-02-14T18:30:52Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-25990\n2. https://github.com/havok89/Hoosk/issues/69", "creation_timestamp": "2025-02-14T19:18:14.000000Z"}, {"uuid": "8f8808ad-b129-4e16-8963-993229baba82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25899", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4280", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25899\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-13T16:16:49.953\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://github.com/2664521593/mycve/blob/main/TP-Link/BOF_in_TP-Link_TL-WR841ND-V11_2.pdf", "creation_timestamp": "2025-02-13T17:12:35.000000Z"}, {"uuid": "0a01fa36-c890-46c7-b655-9526c72bf4d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25900", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4279", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25900\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-13T16:16:50.037\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://github.com/2664521593/mycve/blob/main/TP-Link/BOF_in_TP-Link_TL-WR841ND-V11_4.pdf", "creation_timestamp": "2025-02-13T17:12:32.000000Z"}, {"uuid": "36636f89-c0e9-4c44-8b2e-cd6bcc10955c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25901", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4278", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25901\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-13T16:16:50.180\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://github.com/2664521593/mycve/blob/main/TP-Link/BOF_in_TP-Link_TL-WR841ND-V11_5.pdf", "creation_timestamp": "2025-02-13T17:12:29.000000Z"}, {"uuid": "c141677d-604e-41e5-9077-4dd1acce80f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25352", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4286", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25352\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-13T16:16:49.343\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://github.com/Santoshcyber1/CVE-wirteup/blob/main/Phpgurukul/Land%20record/SQL%20Injection%20About.pdf", "creation_timestamp": "2025-02-13T17:14:56.000000Z"}, {"uuid": "ecec7ca8-ee0b-406a-b21e-f5eaa8556cd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25523", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4296", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25523\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-11T19:15:19.000\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://gist.github.com/XiaoCurry/cb190038c9402c9f89681a0e116996f6", "creation_timestamp": "2025-02-13T19:09:50.000000Z"}, {"uuid": "06119466-3781-477f-8df6-0449e3a87af0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25993", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4494", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25993\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: SQL Injection vulnerability in FeMiner wms wms 1.0 allows a remote attacker to obtain sensitive information via the parameter \"itemid.\"\n\ud83d\udccf Published: 2025-02-14T18:30:52Z\n\ud83d\udccf Modified: 2025-02-14T18:30:52Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-25993\n2. https://github.com/FeMiner/wms/issues/21", "creation_timestamp": "2025-02-14T19:18:54.000000Z"}, {"uuid": "b70ffb3c-b437-44ed-b72c-3fa02469462d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25997", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4493", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25997\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Directory Traversal vulnerability in FeMiner wms v.1.0 allows a remote attacker to obtain sensitive information via the databak.php component.\n\ud83d\udccf Published: 2025-02-14T18:30:52Z\n\ud83d\udccf Modified: 2025-02-14T18:30:52Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-25997\n2. https://github.com/FeMiner/wms/issues/22", "creation_timestamp": "2025-02-14T19:18:51.000000Z"}, {"uuid": "2e948de8-9bc3-44b7-a0b8-fb5e7f4fbb5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25991", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4491", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25991\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: SQL Injection vulnerability in hooskcms v.1.7.1 allows a remote attacker to obtain sensitive information via the /install/index.php component.\n\ud83d\udccf Published: 2025-02-14T18:30:52Z\n\ud83d\udccf Modified: 2025-02-14T18:30:52Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-25991\n2. https://github.com/havok89/Hoosk/issues/68", "creation_timestamp": "2025-02-14T19:18:23.000000Z"}, {"uuid": "b34c4c66-76ec-464c-8907-e26ebb4396b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25992", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4500", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25992\n\ud83d\udd25 CVSS Score: 5.0 (CVSS_V3)\n\ud83d\udd39 Description: SQL Injection vulnerability in FeMiner wms 1.0 allows a remote attacker to obtain sensitive information via the inquire_inout_item.php component.\n\ud83d\udccf Published: 2025-02-14T18:30:52Z\n\ud83d\udccf Modified: 2025-02-14T21:31:05Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-25992\n2. https://github.com/FeMiner/wms/issues/19", "creation_timestamp": "2025-02-14T22:10:57.000000Z"}, {"uuid": "79addb19-7211-4727-bcfb-95b51ce089c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25281", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4355", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25281\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-13T22:15:13.263\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://old.outbackpower.com/about-outback/contact/contact-us\n2. https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-17", "creation_timestamp": "2025-02-13T23:11:13.000000Z"}, {"uuid": "bf3e8b29-68ed-4091-b593-a5b5f81a289a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25067", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4397", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25067\n\ud83d\udd25 CVSS Score: 9.8 (CVSS_V3)\n\ud83d\udd39 Description: mySCADA myPRO Manager\n \nis vulnerable to an OS command injection which could allow a remote attacker to execute arbitrary OS commands.\n\ud83d\udccf Published: 2025-02-14T00:30:44Z\n\ud83d\udccf Modified: 2025-02-14T00:30:44Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-25067\n2. https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-16\n3. https://www.myscada.org/contacts\n4. https://www.myscada.org/downloads/mySCADAPROManager", "creation_timestamp": "2025-02-14T01:16:13.000000Z"}, {"uuid": "e2a673af-4c01-4362-b1b6-0584cac368cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25994", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4501", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25994\n\ud83d\udd25 CVSS Score: 5.0 (CVSS_V3)\n\ud83d\udd39 Description: SQL Injection vulnerability in FeMiner wms wms 1.0 allows a remote attacker to obtain sensitive information via the parameters date1, date2, id.\n\ud83d\udccf Published: 2025-02-14T18:30:52Z\n\ud83d\udccf Modified: 2025-02-14T21:31:05Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-25994\n2. https://github.com/FeMiner/wms/issues/20", "creation_timestamp": "2025-02-14T22:10:59.000000Z"}, {"uuid": "8b468e28-62dc-4095-bb04-fd585b8858c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25069", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4411", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25069\n\ud83d\udd25 CVSS Score: 6.4 (CVSS_V3)\n\ud83d\udd39 Description: A Cross-Protocol Scripting vulnerability is found in Apache Kvrocks.\n\nSince Kvrocks didn't detect if \"Host:\" or \"POST\" appears in RESP requests,\na valid HTTP request can also be sent to Kvrocks as a valid RESP request \nand trigger some database operations, which can be\u00a0dangerous when \nit is chained with SSRF.\n\nIt is similiar to\u00a0CVE-2016-10517 in Redis.\n\nThis issue affects Apache Kvrocks: from the initial version to the latest version 2.11.0.\n\nUsers are recommended to upgrade to version 2.11.1, which fixes the issue.\n\ud83d\udccf Published: 2025-02-07T15:32:38Z\n\ud83d\udccf Modified: 2025-02-14T00:30:44Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-25069\n2. https://lists.apache.org/thread/gbxv9gpsskmdzg6z48zm3tvo8cyo9v3t\n3. https://www.cve.org/CVERecord?id=CVE-2016-10517", "creation_timestamp": "2025-02-14T01:17:37.000000Z"}, {"uuid": "c9fa67d8-1ce9-4329-b6ef-59fd4f1df774", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25354", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4507", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25354\n\ud83d\udd25 CVSS Score: 7.1 (CVSS_V3)\n\ud83d\udd39 Description: A SQL Injection was found in /admin/admin-profile.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the contactnumber POST request parameter.\n\ud83d\udccf Published: 2025-02-13T18:32:34Z\n\ud83d\udccf Modified: 2025-02-14T21:31:04Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-25354\n2. https://github.com/Santoshcyber1/CVE-wirteup/blob/main/Phpgurukul/Land%20record/SQL%20Injection%20contact.pdf", "creation_timestamp": "2025-02-14T22:11:09.000000Z"}, {"uuid": "b658d2db-8a97-4567-931c-1c5c22b90f5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25184", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4508", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25184\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: ## Summary\n\n`Rack::CommonLogger` can be exploited by crafting input that includes newline characters to manipulate log entries. The supplied proof-of-concept demonstrates injecting malicious content into logs.\n\n## Details\n\nWhen a user provides the authorization credentials via `Rack::Auth::Basic`, if success, the username will be put in `env['REMOTE_USER']` and later be used by `Rack::CommonLogger` for logging purposes.\n\nThe issue occurs when a server intentionally or unintentionally allows a user creation with the username contain CRLF and white space characters, or the server just want to log every login attempts. If an attacker enters a username with CRLF character, the logger will log the malicious username with CRLF characters into the logfile.\n\n## Impact\n\nAttackers can break log formats or insert fraudulent entries, potentially obscuring real activity or injecting malicious data into log files.\n\n## Mitigation\n\n- Update to the latest version of Rack.\n\ud83d\udccf Published: 2025-02-12T19:18:35Z\n\ud83d\udccf Modified: 2025-02-14T22:16:55Z\n\ud83d\udd17 References:\n1. https://github.com/rack/rack/security/advisories/GHSA-7g2v-jj9q-g3rg\n2. https://nvd.nist.gov/vuln/detail/CVE-2025-25184\n3. https://github.com/rack/rack/commit/074ae244430cda05c27ca91cda699709cfb3ad8e\n4. https://github.com/rack/rack\n5. https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2025-25184.yml", "creation_timestamp": "2025-02-14T23:10:45.000000Z"}, {"uuid": "8f0c46ae-ed39-4991-996a-534eee395701", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25352", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4505", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25352\n\ud83d\udd25 CVSS Score: 7.1 (CVSS_V3)\n\ud83d\udd39 Description: A SQL Injection vulnerability was found in /admin/aboutus.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the pagetitle POST request parameter.\n\ud83d\udccf Published: 2025-02-13T18:32:34Z\n\ud83d\udccf Modified: 2025-02-14T21:31:04Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-25352\n2. https://github.com/Santoshcyber1/CVE-wirteup/blob/main/Phpgurukul/Land%20record/SQL%20Injection%20About.pdf", "creation_timestamp": "2025-02-14T22:11:06.000000Z"}, {"uuid": "4c6c0148-6901-443d-acba-4556f659f86d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25356", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4503", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25356\n\ud83d\udd25 CVSS Score: 7.1 (CVSS_V3)\n\ud83d\udd39 Description: A SQL Injection vulnerability was found in /admin/bwdates-reports-details.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the \" todate\" POST request parameter.\n\ud83d\udccf Published: 2025-02-13T18:32:34Z\n\ud83d\udccf Modified: 2025-02-14T21:31:04Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-25356\n2. https://github.com/Santoshcyber1/CVE-wirteup/blob/main/Phpgurukul/Land%20record/SQL%20Injection%20tadate.pdf", "creation_timestamp": "2025-02-14T22:11:02.000000Z"}, {"uuid": "6c200e03-399e-498b-9bfc-a33839c4709c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25355", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4502", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25355\n\ud83d\udd25 CVSS Score: 7.1 (CVSS_V3)\n\ud83d\udd39 Description: A SQL Injection vulnerability was found in /admin/bwdates-reports-details.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the fromdate POST request parameter.\n\ud83d\udccf Published: 2025-02-13T18:32:34Z\n\ud83d\udccf Modified: 2025-02-14T21:31:04Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-25355\n2. https://github.com/Santoshcyber1/CVE-wirteup/blob/main/Phpgurukul/Land%20record/SQL%20Injection%20fromdate.pdf", "creation_timestamp": "2025-02-14T22:11:00.000000Z"}, {"uuid": "968fc304-2a64-42c0-a84e-91ad1829faee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25877", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4949", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25877\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A vulnerability was found in ITSourcecode Simple ChatBox up to 1.0. This vulnerability affects unknown code of the file /admin.php. The attack can use SQL injection to obtain sensitive data.\n\ud83d\udccf Published: 2025-02-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-21T18:02:55.825Z\n\ud83d\udd17 References:\n1. https://github.com/SticKManII/cve-poc/blob/main/chat-box/1/poc.md", "creation_timestamp": "2025-02-21T18:19:08.000000Z"}, {"uuid": "70a59ab1-f8b0-4559-a5b1-c0d6a7a18f95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25055", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4726", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25055\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: Authentication bypass by spoofing issue exists in FileMegane versions above 1.0.0.0 prior to 3.4.0.0, which may lead to user impersonation. If exploited, restricted file contents may be accessed.\n\ud83d\udccf Published: 2025-02-17T23:56:51.567Z\n\ud83d\udccf Modified: 2025-02-17T23:56:51.567Z\n\ud83d\udd17 References:\n1. https://www.info-brdg.co.jp/support/report/megane/sec20250201.html\n2. https://jvn.jp/en/jp/JVN80527854/", "creation_timestamp": "2025-02-18T03:16:09.000000Z"}, {"uuid": "e6a3738b-90d1-4879-b3c5-5a4822808958", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25221", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4730", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25221\n\ud83d\udd25 CVSS Score: 7.3 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL injection vulnerability in pdf.php. If this vulnerability is exploited, information in a database may be deleted, altered, or retrieved.\n\ud83d\udccf Published: 2025-02-18T00:10:25.747Z\n\ud83d\udccf Modified: 2025-02-18T00:10:25.747Z\n\ud83d\udd17 References:\n1. https://www.luxsoft.eu/?download\n2. https://www.luxsoft.eu/lcforum/viewtopic.php?pid=1984#p1984\n3. https://jvn.jp/en/jp/JVN26024080/", "creation_timestamp": "2025-02-18T04:17:22.000000Z"}, {"uuid": "15edd190-a65b-4eea-819b-6dd48662099f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25222", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4729", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25222\n\ud83d\udd25 CVSS Score: 7.3 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL injection vulnerability in retrieve.php. If this vulnerability is exploited, information in a database may be deleted, altered, or retrieved.\n\ud83d\udccf Published: 2025-02-18T00:11:03.172Z\n\ud83d\udccf Modified: 2025-02-18T00:11:03.172Z\n\ud83d\udd17 References:\n1. https://www.luxsoft.eu/?download\n2. https://www.luxsoft.eu/lcforum/viewtopic.php?pid=1984#p1984\n3. https://jvn.jp/en/jp/JVN26024080/", "creation_timestamp": "2025-02-18T04:17:21.000000Z"}, {"uuid": "89ad3850-00e0-4415-a88a-a74b270e132c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25223", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4728", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25223\n\ud83d\udd25 CVSS Score: 5.8 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N)\n\ud83d\udd39 Description: The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains a path traversal vulnerability in dloader.php. If this vulnerability is exploited, arbitrary files on a server may be obtained.\n\ud83d\udccf Published: 2025-02-18T00:11:36.413Z\n\ud83d\udccf Modified: 2025-02-18T00:11:36.413Z\n\ud83d\udd17 References:\n1. https://www.luxsoft.eu/?download\n2. https://www.luxsoft.eu/lcforum/viewtopic.php?pid=1984#p1984\n3. https://jvn.jp/en/jp/JVN26024080/", "creation_timestamp": "2025-02-18T04:17:21.000000Z"}, {"uuid": "b581f86e-70b7-44fb-8f92-ffe579149558", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25224", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4727", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25224\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains a missing authentication vulnerability in dloader.php. If this vulnerability is exploited, arbitrary files on a server may be obtained.\n\ud83d\udccf Published: 2025-02-18T00:12:21.912Z\n\ud83d\udccf Modified: 2025-02-18T00:12:21.912Z\n\ud83d\udd17 References:\n1. https://www.luxsoft.eu/?download\n2. https://www.luxsoft.eu/lcforum/viewtopic.php?pid=1984#p1984\n3. https://jvn.jp/en/jp/JVN26024080/", "creation_timestamp": "2025-02-18T04:17:20.000000Z"}, {"uuid": "31b4ea29-08a0-48d9-a85e-e6a186876c31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25505", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4922", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25505\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tenda AC6 15.03.05.16_multi is vulnerable to Buffer Overflow in the sub_452A4 function.\n\ud83d\udccf Published: 2025-02-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-21T17:04:32.958Z\n\ud83d\udd17 References:\n1. https://github.com/faqiadegege/IoTVuln/blob/main/tendaAC6_getRootStatus_callback_overflow/detail.md", "creation_timestamp": "2025-02-21T17:18:16.000000Z"}, {"uuid": "d85995bb-3d4c-4e4d-9df3-3096829cafc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25471", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4810", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25471\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: FFmpeg git master before commit fd1772 was discovered to contain a NULL pointer dereference via the component libavformat/mov.c.\n\ud83d\udccf Published: 2025-02-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-20T21:05:48.992Z\n\ud83d\udd17 References:\n1. https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/fd1772b7475d0d5673a5dd314ee78443d0be4cf1\n2. https://trac.ffmpeg.org/ticket/11417", "creation_timestamp": "2025-02-20T21:17:41.000000Z"}, {"uuid": "5753db9e-718c-4448-a6a6-0bbf67bffeeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25472", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4813", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25472\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A buffer overflow in DCMTK git master v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via a crafted DCM file.\n\ud83d\udccf Published: 2025-02-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-20T21:01:51.752Z\n\ud83d\udd17 References:\n1. https://git.dcmtk.org/?p=dcmtk.git;a=commit;h=410ffe2019b9db6a8f4036daac742a6f5e4d36c2", "creation_timestamp": "2025-02-20T21:17:46.000000Z"}, {"uuid": "11b642a1-87cf-42dd-9364-6a2397a1b124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25664", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4830", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25664\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the shareSpeed parameter in the sub_49E098 function.\n\ud83d\udccf Published: 2025-02-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-20T22:28:25.102Z\n\ud83d\udd17 References:\n1. https://github.com/jangfan/my-vuln/blob/main/Tenda/AC8V4/SetIpMacBind.md", "creation_timestamp": "2025-02-20T23:17:05.000000Z"}, {"uuid": "010dcc4a-b2de-4d02-9a5d-56977fb2a978", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25054", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4772", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25054\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Movable Type contains a reflected cross-site scripting vulnerability in the user information edit page. When Multi-Factor authentication plugin is enabled and a user accesses a crafted page while logged in to the affected product, an arbitrary script may be executed on the web browser of the user.\n\ud83d\udccf Published: 2025-02-19T05:52:09.401Z\n\ud83d\udccf Modified: 2025-02-19T05:52:09.401Z\n\ud83d\udd17 References:\n1. https://www.movabletype.org/news/2025/02/mt-842-released.html\n2. https://jvn.jp/en/jp/JVN48742353/", "creation_timestamp": "2025-02-19T08:38:49.000000Z"}, {"uuid": "66e92079-611c-486d-9e60-860baa4edd05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25676", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4833", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25676\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tenda i12 V1.0.0.10(3805) was discovered to contain a buffer overflow via the list parameter in the formwrlSSIDset function.\n\ud83d\udccf Published: 2025-02-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-20T22:23:56.707Z\n\ud83d\udd17 References:\n1. https://github.com/jangfan/my-vuln/blob/main/Tenda/i12V1/wifiSSIDget.md", "creation_timestamp": "2025-02-20T23:17:11.000000Z"}, {"uuid": "44419bc0-67fc-4d36-a095-f0478b5e8fbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25957", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4839", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25957\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Cross Site Scripting vulnerabilities in Xunruicms v.4.6.3 and before allows a remote attacker to escalate privileges via a crafted script.\n\ud83d\udccf Published: 2025-02-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-20T22:15:32.324Z\n\ud83d\udd17 References:\n1. https://github.com/dayrui/xunruicms/issues/5", "creation_timestamp": "2025-02-20T23:17:18.000000Z"}, {"uuid": "2daafa63-a30f-4553-82d0-18a0f6c13825", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25475", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4808", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25475\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A NULL pointer dereference in the component /libsrc/dcrleccd.cc of DCMTK v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via a crafted DICOM file.\n\ud83d\udccf Published: 2025-02-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-20T21:08:21.600Z\n\ud83d\udd17 References:\n1. https://git.dcmtk.org/?p=dcmtk.git;a=commit;h=bffa3e9116abb7038b432443f16b1bd390e80245\n2. https://github.com/DCMTK/dcmtk/commit/bffa3e9116abb7038b432443f16b1bd390e80245", "creation_timestamp": "2025-02-20T21:17:39.000000Z"}, {"uuid": "b0c7ebb9-b7a9-42ea-9029-68809980673d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25960", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4821", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25960\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Cross Site Scripting vulnerability in phpcmsv9 v.9.6.3 allows a remote attacker to escalate privileges via the menu interface of the member center of the background administrator.\n\ud83d\udccf Published: 2025-02-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-20T22:10:42.902Z\n\ud83d\udd17 References:\n1. https://github.com/Abel-Lan/phpcms/issues/2", "creation_timestamp": "2025-02-20T22:17:42.000000Z"}, {"uuid": "9ee57439-9d28-4674-bef8-84824f67a91e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25958", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4820", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25958\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Cross Site Scripting vulnerabilities in phpcmsv9 v.9.6.3 allows a remote attacker to escalate privileges via a crafted script.\n\ud83d\udccf Published: 2025-02-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-20T22:13:13.403Z\n\ud83d\udd17 References:\n1. https://github.com/Abel-Lan/phpcms/issues/1", "creation_timestamp": "2025-02-20T22:17:42.000000Z"}, {"uuid": "e6110e48-2679-4ec3-90f0-73013a8eec5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25667", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4826", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25667\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the urls parameter in the function get_parentControl_list_Info.\n\ud83d\udccf Published: 2025-02-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-20T22:31:13.839Z\n\ud83d\udd17 References:\n1. https://github.com/jangfan/my-vuln/blob/main/Tenda/AC8V4/saveParentControlInfo.md", "creation_timestamp": "2025-02-20T23:16:59.000000Z"}, {"uuid": "e2785e0c-5a4d-43ec-931a-522ea4d0ca4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25663", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4825", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25663\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A vulnerability was found in Tenda AC8V4 V16.03.34.06. Affected is the function SUB_0046AC38 of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk_crypto leads to stack-based buffer overflow.\n\ud83d\udccf Published: 2025-02-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-20T22:32:43.153Z\n\ud83d\udd17 References:\n1. https://github.com/jangfan/my-vuln/blob/main/Tenda/AC8V4/WifiExtraSet.md", "creation_timestamp": "2025-02-20T23:16:58.000000Z"}, {"uuid": "34ea825d-28c9-4e52-baec-b01f947de232", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25679", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4832", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25679\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tenda i12 V1.0.0.10(3805) was discovered to contain a buffer overflow via the index parameter in the formWifiMacFilterSet function.\n\ud83d\udccf Published: 2025-02-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-20T22:25:12.140Z\n\ud83d\udd17 References:\n1. https://github.com/jangfan/my-vuln/blob/main/Tenda/i12V1/WifiMacFilterSet.md", "creation_timestamp": "2025-02-20T23:17:07.000000Z"}, {"uuid": "1428348d-40f6-4bff-8161-cd4c74b1f485", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25678", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4831", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25678\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tenda i12 V1.0.0.10(3805) was discovered to contain a buffer overflow via the funcpara1 parameter in the formSetCfm function.\n\ud83d\udccf Published: 2025-02-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-20T22:27:03.243Z\n\ud83d\udd17 References:\n1. https://github.com/jangfan/my-vuln/blob/main/Tenda/i12V1/setcfm.md", "creation_timestamp": "2025-02-20T23:17:06.000000Z"}, {"uuid": "d9dd8329-5ec9-45db-84ea-ad9a6cc9ea94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25675", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4835", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25675\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tenda AC10 V1.0 V15.03.06.23 has a command injection vulnerablility located in the formexeCommand function. The str variable receives the cmdinput parameter from a POST request and is later assigned to the cmd_buf variable, which is directly used in the doSystemCmd function, causing an arbitrary command execution.\n\ud83d\udccf Published: 2025-02-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-20T22:21:10.807Z\n\ud83d\udd17 References:\n1. https://github.com/jangfan/my-vuln/blob/main/Tenda/AC10V1/formexeCommand.md", "creation_timestamp": "2025-02-20T23:17:12.000000Z"}, {"uuid": "af818063-0eb4-4af3-bc9e-cbba69126cce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25674", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4834", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25674\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tenda AC10 V1.0 V15.03.06.23 is vulnerable to Buffer Overflow in form_fast_setting_wifi_set via the parameter ssid.\n\ud83d\udccf Published: 2025-02-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-20T22:22:44.707Z\n\ud83d\udd17 References:\n1. https://github.com/jangfan/my-vuln/blob/main/Tenda/AC10V1/fast_setting_wifi_set.md", "creation_timestamp": "2025-02-20T23:17:12.000000Z"}, {"uuid": "72d992a5-bf41-4f2c-a6f7-fe7f1615c70d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25632", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6609", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25632\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tenda AC15 v15.03.05.19 is vulnerable to Command Injection via the handler function in /goform/telnet.\n\ud83d\udccf Published: 2025-03-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-05T20:27:43.945Z\n\ud83d\udd17 References:\n1. https://github.com/Pr0b1em/IoT/blob/master/TendaAC15v15.03.05.19telnet.md", "creation_timestamp": "2025-03-05T20:36:44.000000Z"}, {"uuid": "cf7373c4-38dc-4d54-af1b-6dc55d00987d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25634", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6608", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25634\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A vulnerability has been found in Tenda AC15 15.03.05.19 in the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument src leads to stack-based buffer overflow.\n\ud83d\udccf Published: 2025-03-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-05T20:29:59.644Z\n\ud83d\udd17 References:\n1. https://github.com/Pr0b1em/IoT/blob/master/TendaAC15v15.03.05.19GetParentControlInfo.md", "creation_timestamp": "2025-03-05T20:36:43.000000Z"}, {"uuid": "be6f5820-b455-4854-aee7-84629a0e8103", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25507", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4925", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25507\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: There is a RCE vulnerability in Tenda AC6 15.03.05.16_multi. In the formexeCommand function, the parameter cmdinput will cause remote command execution.\n\ud83d\udccf Published: 2025-02-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-21T17:01:37.016Z\n\ud83d\udd17 References:\n1. https://github.com/faqiadegege/IoTVuln/blob/main/tendaAC6_formexecommand_cmdinput_rce/detail.md", "creation_timestamp": "2025-02-21T17:18:21.000000Z"}, {"uuid": "81fb002d-2e9b-42bd-be0f-e8b8b2892f1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25510", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4924", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25510\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tenda AC8 V16.03.34.06 is vulnerable to Buffer Overflow in the get_parentControl_list_Info function.\n\ud83d\udccf Published: 2025-02-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-21T17:03:09.315Z\n\ud83d\udd17 References:\n1. https://github.com/faqiadegege/IoTVuln/blob/main/tendaAC8_get_parentControl_list_Info_urls_overflow/detail.md", "creation_timestamp": "2025-02-21T17:18:21.000000Z"}, {"uuid": "7b705b65-a68c-4d6c-ae2b-14cddf6f6b02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25765", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4935", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25765\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: MRCMS v3.1.2 was discovered to contain an arbitrary file write vulnerability via the component /file/save.do.\n\ud83d\udccf Published: 2025-02-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-21T18:10:45.945Z\n\ud83d\udd17 References:\n1. https://flowus.cn/share/be03dd2c-b760-457a-a919-e388d7566ff2", "creation_timestamp": "2025-02-21T18:18:48.000000Z"}, {"uuid": "492f9fb0-4f2f-451b-8b9e-8789014f32e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25766", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4934", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25766\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An arbitrary file upload vulnerability in the component /file/savefile.do of MRCMS v3.1.2 allows attackers to execute arbitrary code via uploading a crafted .jsp file.\n\ud83d\udccf Published: 2025-02-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-21T18:12:03.911Z\n\ud83d\udd17 References:\n1. https://flowus.cn/share/7097c747-ae3e-4cef-a198-285863698607", "creation_timestamp": "2025-02-21T18:18:47.000000Z"}, {"uuid": "c8931c78-337f-45fb-aa70-6240d45ab590", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25770", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5172", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25770\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Wangmarket v4.10 to v5.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /agency/AgencyUserController.java.\n\ud83d\udccf Published: 2025-02-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-24T17:16:38.730Z\n\ud83d\udd17 References:\n1. https://flowus.cn/share/dddbd17e-e459-46c7-b3f9-9c9a90cee804", "creation_timestamp": "2025-02-24T17:21:32.000000Z"}, {"uuid": "d79f2033-03af-4210-b997-b39d1e6784fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25193", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4939", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25193\n\ud83d\udd25 CVSS Score: 5.5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: Netty, an asynchronous, event-driven network application framework, has a vulnerability in versions up to and including 4.1.118.Final. An unsafe reading of environment file could potentially cause a denial of service in Netty. When loaded on an Windows application, Netty attempts to load a file that does not exist. If an attacker creates such a large file, the Netty application crash. A similar issue was previously reported as CVE-2024-47535. This issue was fixed, but the fix was incomplete in that null-bytes were not counted against the input limit. Commit d1fbda62d3a47835d3fb35db8bd42ecc205a5386 contains an updated fix.\n\ud83d\udccf Published: 2025-02-10T22:02:17.197Z\n\ud83d\udccf Modified: 2025-02-21T18:03:38.211Z\n\ud83d\udd17 References:\n1. https://github.com/netty/netty/security/advisories/GHSA-389x-839f-4rhx\n2. https://github.com/netty/netty/commit/d1fbda62d3a47835d3fb35db8bd42ecc205a5386", "creation_timestamp": "2025-02-21T18:18:54.000000Z"}, {"uuid": "a17cd8c4-ef46-45e8-a86c-7a10808ed88a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25605", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4955", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25605\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Totolink X5000R V9.1.0u.6369_B20230113 is vulnerable to command injection via the apcli_wps_gen_pincode function in mtkwifi.lua.\n\ud83d\udccf Published: 2025-02-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-21T18:44:44.812Z\n\ud83d\udd17 References:\n1. https://github.com/sezangel/IOT-vul/tree/main/Totolink/X5000R/4", "creation_timestamp": "2025-02-21T19:18:34.000000Z"}, {"uuid": "a6e57a88-3bdb-4a0a-8ad6-c6d795ba3736", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25604", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4954", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25604\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Totolink X5000R V9.1.0u.6369_B20230113 is vulnerable to command injection via the vif_disable function in mtkwifi.lua.\n\ud83d\udccf Published: 2025-02-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-21T18:46:49.852Z\n\ud83d\udd17 References:\n1. https://github.com/sezangel/IOT-vul/tree/main/Totolink/X5000R/5", "creation_timestamp": "2025-02-21T19:18:34.000000Z"}, {"uuid": "3a8386d4-579e-49ae-8567-9b7a3d396f54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25875", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4953", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25875\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A vulnerability was found in ITSourcecode Simple ChatBox up to 1.0. This vulnerability affects unknown code of the file /message.php. The attack can use SQL injection to obtain sensitive data.\n\ud83d\udccf Published: 2025-02-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-21T17:51:53.526Z\n\ud83d\udd17 References:\n1. https://github.com/SticKManII/cve-poc/blob/main/chat-box/4/poc.md", "creation_timestamp": "2025-02-21T18:19:12.000000Z"}, {"uuid": "2367fce6-8b4a-4e70-b55a-ffa1360d4c73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25876", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4951", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25876\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A vulnerability was found in ITSourcecode Simple ChatBox up to 1.0. This vulnerability affects unknown code of the file /delete.php. The attack can use SQL injection to obtain sensitive data.\n\ud83d\udccf Published: 2025-02-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-21T18:01:03.709Z\n\ud83d\udd17 References:\n1. https://github.com/SticKManII/cve-poc/blob/main/chat-box/2/poc.md", "creation_timestamp": "2025-02-21T18:19:10.000000Z"}, {"uuid": "0c94fade-f5d0-413e-917b-c3abc24bff0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25460", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5161", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25460\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A stored Cross-Site Scripting (XSS) vulnerability was identified in FlatPress 1.3.1 within the \"Add Entry\" feature. This vulnerability allows authenticated attackers to inject malicious JavaScript payloads into blog posts, which are executed when other users view the posts. The issue arises due to improper input sanitization of the \"TextArea\" field in the blog entry submission form.\n\ud83d\udccf Published: 2025-02-24T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-24T16:01:28.997Z\n\ud83d\udd17 References:\n1. https://github.com/flatpressblog/flatpress\n2. https://github.com/RoNiXxCybSeC0101/CVE-2025-25460", "creation_timestamp": "2025-02-24T16:24:43.000000Z"}, {"uuid": "aef0c8ff-2397-4e35-aec0-a4c7848bf90b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25769", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5201", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25769\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Wangmarket v4.10 to v5.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /controller/UserController.java.\n\ud83d\udccf Published: 2025-02-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-24T17:18:51.996Z\n\ud83d\udd17 References:\n1. https://flowus.cn/share/56c86622-1e4d-47ed-923c-9e37aff00079", "creation_timestamp": "2025-02-24T18:26:45.000000Z"}, {"uuid": "e8bdc602-8266-4dea-830c-37fcf804d7db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25635", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5960", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25635\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the pppoe_dns1 parameter in the formIpv6Setup interface of /bin/boa.\n\ud83d\udccf Published: 2025-02-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-28T18:50:32.682Z\n\ud83d\udd17 References:\n1. https://github.com/SunnyYANGyaya/firmcrosser/blob/main/ToTolink/TOTOLINK-A3002R-formIpv6Setup-pppoe_dns1.md", "creation_timestamp": "2025-02-28T19:27:05.000000Z"}, {"uuid": "71e8675d-f1fc-489d-906b-96f188025b15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25800", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5500", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25800\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: SeaCMS 13.3 was discovered to contain an arbitrary file read vulnerability in the file_get_contents function at admin_safe_file.php.\n\ud83d\udccf Published: 2025-02-26T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-26T15:18:03.838Z\n\ud83d\udd17 References:\n1. http://seacms.com\n2. https://www.seacms.com/\n3. https://github.com/Ka7arotto/Seacms/blob/main/Seacms13.3-lrf-2.md", "creation_timestamp": "2025-02-26T15:26:01.000000Z"}, {"uuid": "fd348f40-a3a8-4827-85f0-b21509d8a0aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25462", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5502", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25462\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A SQL Injection vulnerability was found in /admin/add-propertytype.php in PHPGurukul Land Record System Project in PHP v1.0 allows remote attackers to execute arbitrary code via the propertytype POST request parameter.\n\ud83d\udccf Published: 2025-02-26T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-26T15:10:35.500Z\n\ud83d\udd17 References:\n1. https://github.com/terrasystemlabs/CVE-IDs/blob/main/PHP-Gurukul/Land-record/Land_SQL_Injection.pdf", "creation_timestamp": "2025-02-26T15:26:03.000000Z"}, {"uuid": "aaa96a82-aacf-4d38-a086-9743397dd272", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25949", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6126", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25949\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A stored cross-site scripting (XSS) vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the User ID parameter at /rest/staffResource/update.\n\ud83d\udccf Published: 2025-03-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-03T01:00:39.440Z\n\ud83d\udd17 References:\n1. https://github.com/VvV1per/Vulnerability-Research-CVEs/tree/main/CVE-2024-89636", "creation_timestamp": "2025-03-03T01:29:10.000000Z"}, {"uuid": "86c54761-c340-4faf-b878-c99fb453da1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25295", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5577", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25295\n\ud83d\udd25 CVSS Score: 8.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Label Studio is an open source data labeling tool. A path traversal vulnerability in Label Studio SDK versions prior to 1.0.10 allows unauthorized file access outside the intended directory structure. The flaw exists in the VOC, COCO and YOLO export functionalities. These functions invoke a `download` function on the `label-studio-sdk` python package, which fails to validate file paths when processing image references during task exports. By creating tasks with path traversal sequences in the image field, an attacker can force the application to read files from arbitrary server filesystem locations when exporting projects in any of the mentioned formats. This is authentication-required vulnerability allowing arbitrary file reads from the server filesystem. It may lead to potential exposure of sensitive information like configuration files, credentials, and confidential data. Label Studio versions before 1.16.0 specified SDK versions prior to 1.0.10 as dependencies, and the issue was confirmed in Label Studio version 1.13.2.dev0; therefore, Label Studio users should upgrade to 1.16.0 or newer to mitigate it.\n\ud83d\udccf Published: 2025-02-14T16:50:26.336Z\n\ud83d\udccf Modified: 2025-02-26T19:09:59.018Z\n\ud83d\udd17 References:\n1. https://github.com/HumanSignal/label-studio/security/advisories/GHSA-rgv9-w7jp-m23g\n2. https://github.com/HumanSignal/label-studio-sdk/commit/4a9715c6b0b619371e89c09ea8d1c86ce5c880df", "creation_timestamp": "2025-02-26T19:24:06.000000Z"}, {"uuid": "1a8247af-9d1b-41d6-97ad-e716734d1f85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25730", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5811", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25730\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in Motorola Mobility Droid Razr HD (Model XT926) System Version: 9.18.94.XT926.Verizon.en.US allows physically proximate unauthorized attackers to access USB debugging, leading to control of the host device itself.\n\ud83d\udccf Published: 2025-02-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-27T21:33:31.282Z\n\ud83d\udd17 References:\n1. https://gainsec.com/2025/02/27/cve-2025-25730-developer-options-and-usb-debugging-authorization-bypass/", "creation_timestamp": "2025-02-27T22:26:02.000000Z"}, {"uuid": "10f7dcd1-f74c-4d86-9575-1426d2cf2e31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25324", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5710", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25324\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in Shandong Provincial Big Data Center AiShanDong iOS 5.0.0 allows attackers to access sensitive user information via supplying a crafted link.\n\ud83d\udccf Published: 2025-02-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-27T16:08:16.166Z\n\ud83d\udd17 References:\n1. https://github.com/ZhouZiyi1/Vuls/blob/main/250111-AiShanDong/250111-AiShanDong.pdf", "creation_timestamp": "2025-02-27T16:26:08.000000Z"}, {"uuid": "229c0573-2d09-4a5d-86a0-04eb838dd2f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25761", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5677", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25761\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: HkCms v2.3.2.240702 was discovered to contain an arbitrary file write vulnerability in the component Appcenter.php.\n\ud83d\udccf Published: 2025-02-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-27T14:19:12.312Z\n\ud83d\udd17 References:\n1. https://github.com/147536951/Qianyi-learn/blob/main/Hkcms.pdf", "creation_timestamp": "2025-02-27T14:27:05.000000Z"}, {"uuid": "06efb307-b8d2-476a-b8ee-bd8a869607df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25727", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5813", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25729\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An information disclosure vulnerability in Bosscomm IF740 Firmware versions:11001.7078 & v11001.0000 and System versions: 6.25 & 6.00 allows attackers to obtain hardcoded cleartext credentials via the update or boot process.\n\ud83d\udccf Published: 2025-02-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-27T23:12:46.563Z\n\ud83d\udd17 References:\n1. https://gainsec.com/2025/02/27/cve-2025-25727cve-2025-25728cve-2025-25729-multiple-vulnerabilities-found-in-bosscomm-obd2-tablet/", "creation_timestamp": "2025-02-27T23:25:34.000000Z"}, {"uuid": "867397a9-52e8-49b2-bc19-2d7a45bfe4c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25760", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5678", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25760\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A Server-Side Request Forgery (SSRF) in the component admin_webgather.php of SUCMS v1.0 allows attackers to access internal data and services via a crafted GET request.\n\ud83d\udccf Published: 2025-02-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-27T14:19:10.733Z\n\ud83d\udd17 References:\n1. https://github.com/147536951/Qianyi-learn/blob/main/SUCMS2.pdf", "creation_timestamp": "2025-02-27T14:27:06.000000Z"}, {"uuid": "46629789-8c19-44ae-bb31-230641333326", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25329", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5701", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25329\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in Tencent Technology (Beijing) Company Limited Tencent MicroVision iOS 8.137.0 allows attackers to access sensitive user information via supplying a crafted link.\n\ud83d\udccf Published: 2025-02-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-27T16:19:17.566Z\n\ud83d\udd17 References:\n1. https://github.com/ZhouZiyi1/Vuls/blob/main/250116-TencentMicroVision/250116-TencentMicroVision.pdf", "creation_timestamp": "2025-02-27T16:25:54.000000Z"}, {"uuid": "50e2d027-e3b4-4655-9e68-e190fac7c748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25325", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5709", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25325\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in Yibin Fengguan Network Technology Co., Ltd YuPao DirectHire iOS 8.8.0 allows attackers to access sensitive user information via supplying a crafted link.\n\ud83d\udccf Published: 2025-02-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-27T16:09:09.535Z\n\ud83d\udd17 References:\n1. https://github.com/ZhouZiyi1/Vuls/blob/main/250112-YuPaoDirectHire/250112-YuPaoDirectHire.pdf", "creation_timestamp": "2025-02-27T16:26:04.000000Z"}, {"uuid": "ce811f70-229d-4803-b874-60c6ca12e41f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25323", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5708", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25323\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in Qianjin Network Information Technology (Shanghai) Co., Ltd 51Job iOS 14.22.0 allows attackers to access sensitive user information via supplying a crafted link.\n\ud83d\udccf Published: 2025-02-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-27T16:10:11.211Z\n\ud83d\udd17 References:\n1. https://github.com/ZhouZiyi1/Vuls/blob/main/250111-51Job/250111-51Job.pdf", "creation_timestamp": "2025-02-27T16:26:03.000000Z"}, {"uuid": "6274128d-9e77-48ef-a31a-4953a6effed1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25331", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5716", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25331\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in Beitatong Technology LianJia iOS 9.83.50 allows attackers to access sensitive user information via supplying a crafted link.\n\ud83d\udccf Published: 2025-02-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-27T16:03:29.746Z\n\ud83d\udd17 References:\n1. https://github.com/ZhouZiyi1/Vuls/blob/main/250116-LianJia/250116-LianJia.pdf", "creation_timestamp": "2025-02-27T16:26:14.000000Z"}, {"uuid": "ae6af43e-ea94-4f4c-8205-424f120f7037", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25333", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5715", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25333\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in IKEA CN iOS 4.13.0 allows attackers to access sensitive user information via supplying a crafted link.\n\ud83d\udccf Published: 2025-02-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-27T16:04:31.332Z\n\ud83d\udd17 References:\n1. https://github.com/ZhouZiyi1/Vuls/blob/main/250116-IKEACN/250116-IKEACN.pdf", "creation_timestamp": "2025-02-27T16:26:13.000000Z"}, {"uuid": "9e01a65f-0a96-4d35-93bc-0c0f3a74f0cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25334", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5714", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25334\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in Suning Commerce Group Suning EMall iOS 9.5.198 allows attackers to access sensitive user information via supplying a crafted link.\n\ud83d\udccf Published: 2025-02-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-27T16:05:28.737Z\n\ud83d\udd17 References:\n1. https://github.com/ZhouZiyi1/Vuls/blob/main/250116-SuningEMall/250116-SuningEMall.pdf", "creation_timestamp": "2025-02-27T16:26:12.000000Z"}, {"uuid": "08edf9e9-5bd5-442c-9a12-25eac0e861d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25326", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5712", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25326\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in Merchants Union Consumer Finance Company Limited Merchants Union Finance iOS 6.19.0 allows attackers to access sensitive user information via supplying a crafted link.\n\ud83d\udccf Published: 2025-02-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-27T16:06:43.433Z\n\ud83d\udd17 References:\n1. https://github.com/ZhouZiyi1/Vuls/blob/main/250115-MerchantsUnionFinance/250115-MerchantsUnionFinance.pdf", "creation_timestamp": "2025-02-27T16:26:10.000000Z"}, {"uuid": "d2f32444-0d9f-4460-b0d0-632601a4995d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25330", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5717", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25330\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in Boohee Technology Boohee Health iOS 13.0.13 allows attackers to access sensitive user information via supplying a crafted link.\n\ud83d\udccf Published: 2025-02-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-27T16:01:04.591Z\n\ud83d\udd17 References:\n1. https://github.com/ZhouZiyi1/Vuls/blob/main/250116-BooheeHealth/250116-BooheeHealth.pdf", "creation_timestamp": "2025-02-27T16:26:15.000000Z"}, {"uuid": "9428cd5f-1484-4356-b64b-1c6419684d14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25609", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5958", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25609\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the static_ipv6 parameter in the formIpv6Setup interface of /bin/boa\n\ud83d\udccf Published: 2025-02-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-28T18:53:32.725Z\n\ud83d\udd17 References:\n1. https://github.com/SunnyYANGyaya/firmcrosser/blob/main/ToTolink/TOTOLINK-A3002R-formIpv6Setup-static_ipv6.md", "creation_timestamp": "2025-02-28T19:27:03.000000Z"}, {"uuid": "9a29a5c8-a3ea-4f1f-9744-6d5278613408", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25916", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5906", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25916\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: wuzhicms v4.1.0 has a Cross Site Scripting (XSS) vulnerability in del function in \\coreframe\\app\\member\\admin\\group.php.\n\ud83d\udccf Published: 2025-02-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-28T15:07:54.108Z\n\ud83d\udd17 References:\n1. https://github.com/wuzhicms/wuzhicms/issues/213\n2. https://gist.github.com/A7cc/e28b5790d8b40df8d418d1bd15c25d12", "creation_timestamp": "2025-02-28T15:26:35.000000Z"}, {"uuid": "a5178200-499d-451b-b1d8-8eb55f44897b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25461", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5905", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25461\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A Stored Cross-Site Scripting (XSS) vulnerability exists in SeedDMS 6.0.29. A user or rogue admin with the \"Add Category\" permission can inject a malicious XSS payload into the category name field. When a document is subsequently associated with this category, the payload is stored on the server and rendered without proper sanitization or output encoding. This results in the XSS payload executing in the browser of any user who views the document.\n\ud83d\udccf Published: 2025-02-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-28T15:15:21.571Z\n\ud83d\udd17 References:\n1. https://www.seeddms.org/\n2. https://github.com/RoNiXxCybSeC0101/CVE-2025-25461", "creation_timestamp": "2025-02-28T15:26:34.000000Z"}, {"uuid": "77a5470a-94fe-4d7b-9f85-ee3614a9ce02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25729", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5813", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25729\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An information disclosure vulnerability in Bosscomm IF740 Firmware versions:11001.7078 & v11001.0000 and System versions: 6.25 & 6.00 allows attackers to obtain hardcoded cleartext credentials via the update or boot process.\n\ud83d\udccf Published: 2025-02-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-27T23:12:46.563Z\n\ud83d\udd17 References:\n1. https://gainsec.com/2025/02/27/cve-2025-25727cve-2025-25728cve-2025-25729-multiple-vulnerabilities-found-in-bosscomm-obd2-tablet/", "creation_timestamp": "2025-02-27T23:25:34.000000Z"}, {"uuid": "9af649bf-89a6-484d-95df-f4e530a0725f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25728", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5813", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25729\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An information disclosure vulnerability in Bosscomm IF740 Firmware versions:11001.7078 & v11001.0000 and System versions: 6.25 & 6.00 allows attackers to obtain hardcoded cleartext credentials via the update or boot process.\n\ud83d\udccf Published: 2025-02-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-27T23:12:46.563Z\n\ud83d\udd17 References:\n1. https://gainsec.com/2025/02/27/cve-2025-25727cve-2025-25728cve-2025-25729-multiple-vulnerabilities-found-in-bosscomm-obd2-tablet/", "creation_timestamp": "2025-02-27T23:25:34.000000Z"}, {"uuid": "f65dc80b-e2bd-4cc3-ad44-3ad185ca78f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25477", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5812", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25477\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A host header injection vulnerability in SysPass 3.2x allows an attacker to load malicious JS files from an arbitrary domain which would be executed in the victim's browser.\n\ud83d\udccf Published: 2025-02-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-27T23:14:34.559Z\n\ud83d\udd17 References:\n1. https://github.com/sysentr0py/CVEs/tree/main/CVE-2025-25477", "creation_timestamp": "2025-02-27T23:25:33.000000Z"}, {"uuid": "290b5ab1-8887-4ebc-a56c-a66d094f1c01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25431", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5943", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25431\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Trendnet TEW-929DRU 1.0.0.10 contains a Stored Cross-site Scripting (XSS) vulnerability via the The ssid key of wifi_data parameter on the /captive_portal.htm page.\n\ud83d\udccf Published: 2025-02-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-28T18:07:24.354Z\n\ud83d\udd17 References:\n1. https://instinctive-acapella-fc7.notion.site/Trendnet-TEW-929DRU-XSS-17b15d9d4d26806a90f3d830a6143ebe", "creation_timestamp": "2025-02-28T18:26:24.000000Z"}, {"uuid": "c28ea4d1-c756-4241-8481-898011dee841", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25430", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5942", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25430\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Trendnet TEW-929DRU 1.0.0.10 contains a Stored Cross-site Scripting (XSS) vulnerability via the configname parameter on the /cbi_addcert.htm page.\n\ud83d\udccf Published: 2025-02-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-28T18:07:33.740Z\n\ud83d\udd17 References:\n1. https://instinctive-acapella-fc7.notion.site/Trendnet-TEW-929DRU-XSS-17a15d9d4d2680fbb72ced0a02a64875", "creation_timestamp": "2025-02-28T18:26:24.000000Z"}, {"uuid": "7dceeee4-d560-495e-a248-f502e2cfc155", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25610", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5956", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25610\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the static_gw parameter in the formIpv6Setup interface of /bin/boa.\n\ud83d\udccf Published: 2025-02-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-28T18:56:11.881Z\n\ud83d\udd17 References:\n1. https://github.com/SunnyYANGyaya/firmcrosser/blob/main/ToTolink/TOTOLINK-A3002R-formIpv6Setup-static_gw.md", "creation_timestamp": "2025-02-28T19:26:58.000000Z"}, {"uuid": "0fcad0fd-8892-4096-9136-6cb7a5c021b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25948", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6127", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25948\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Incorrect access control in the component /rest/staffResource/create of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows create and modify user accounts, including an Administrator account.\n\ud83d\udccf Published: 2025-03-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-03T01:00:38.729Z\n\ud83d\udd17 References:\n1. https://github.com/VvV1per/Vulnerability-Research-CVEs/tree/main/CVE-2024-53637", "creation_timestamp": "2025-03-03T01:29:10.000000Z"}, {"uuid": "247e9f85-4f85-4697-a58e-a12bf5d115d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25723", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6021", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25723\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Buffer Overflow vulnerability in GPAC version 2.5 allows a local attacker to execute arbitrary code.\n\ud83d\udccf Published: 2025-02-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-28T22:27:56.266Z\n\ud83d\udd17 References:\n1. https://github.com/gpac/gpac/issues/3089", "creation_timestamp": "2025-02-28T23:27:48.000000Z"}, {"uuid": "a7d99302-baf2-44f3-972b-a74cf5c4fed3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25429", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6025", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25429\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Trendnet TEW-929DRU 1.0.0.10 contains a Stored Cross-site Scripting (XSS) vulnerability via the r_name variable inside the have_same_name function on the /addschedule.htm page.\n\ud83d\udccf Published: 2025-02-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-28T22:18:56.361Z\n\ud83d\udd17 References:\n1. https://instinctive-acapella-fc7.notion.site/Trendnet-TEW-929DRU-XSS-10315d9d4d26801f8985c11a22389e6b", "creation_timestamp": "2025-02-28T23:27:51.000000Z"}, {"uuid": "6915b829-aea7-4f04-956a-b5bcc2e68766", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25724", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6087", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25724\n\ud83d\udd25 CVSS Score: 4 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L)\n\ud83d\udd39 Description: list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.\n\ud83d\udccf Published: 2025-03-02T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-02T01:22:26.132Z\n\ud83d\udd17 References:\n1. https://github.com/Ekkosun/pocs/blob/main/bsdtarbug\n2. https://github.com/libarchive/libarchive/blob/b439d586f53911c84be5e380445a8a259e19114c/tar/util.c#L751-L752\n3. https://gist.github.com/Ekkosun/a83870ce7f3b7813b9b462a395e8ad92", "creation_timestamp": "2025-03-02T02:29:04.000000Z"}, {"uuid": "cc21f485-3185-4a03-b2f5-ec42681f075f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25951", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6124", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25951\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An information disclosure vulnerability in the component /rest/cb/executeBasicSearch of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows attackers to access sensitive user information.\n\ud83d\udccf Published: 2025-03-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-03T01:00:40.878Z\n\ud83d\udd17 References:\n1. https://github.com/VvV1per/Vulnerability-Research-CVEs/tree/main/CVE-2024-89638", "creation_timestamp": "2025-03-03T01:29:08.000000Z"}, {"uuid": "4648d72c-449a-4312-af06-859e01f4365d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25950", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6125", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25950\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Incorrect access control in the component /rest/staffResource/update of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows create and modify user accounts, including an Administrator account.\n\ud83d\udccf Published: 2025-03-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-03T01:00:40.252Z\n\ud83d\udd17 References:\n1. https://github.com/VvV1per/Vulnerability-Research-CVEs/tree/main/CVE-2024-89637", "creation_timestamp": "2025-03-03T01:29:09.000000Z"}, {"uuid": "0546ffff-9ab0-4a89-b020-f992281baff3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25952", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6123", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25952\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An Insecure Direct Object References (IDOR) in the component /getStudemtAllDetailsById?studentId=XX of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows attackers to access sensitive user information via a crafted API request.\n\ud83d\udccf Published: 2025-03-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-03T01:00:41.563Z\n\ud83d\udd17 References:\n1. https://github.com/VvV1per/Vulnerability-Research-CVEs/tree/main/CVE-2024-89639", "creation_timestamp": "2025-03-03T01:29:04.000000Z"}, {"uuid": "a71c01d1-deef-4602-aabf-fce68ecb5669", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25280", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6167", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25280\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: Buffer overflow vulnerability exists in FutureNet AS series (Industrial Routers) and FA series (Protocol Conversion Machine) provided by Century Systems Co., Ltd. If this vulnerability is exploited, a remote unauthenticated attacker may reboot the device by sending a specially crafted request.\n\ud83d\udccf Published: 2025-03-03T08:25:16.938Z\n\ud83d\udccf Modified: 2025-03-03T08:25:16.938Z\n\ud83d\udd17 References:\n1. https://www.centurysys.co.jp/backnumber/common/jvnvu96398949.html\n2. https://jvn.jp/en/vu/JVNVU96398949/", "creation_timestamp": "2025-03-03T09:35:37.000000Z"}, {"uuid": "b01276bf-11b9-4c35-ab26-4735711d34ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25953", "type": "seen", "source": "Telegram/gTZw5fNRQYS08h-ZajmKXcYXak9Qxzesz224FdiejmQtgUhN", "content": "", "creation_timestamp": "2025-03-06T02:16:33.000000Z"}, {"uuid": "e5802ea7-546a-4f63-ae79-f33ec9c8aa52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25791", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6245", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25791\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An arbitrary file upload vulnerability in the plugin installation feature of YZNCMS v2.0.1 allows attackers to execute arbitrary code via uploading a crafted Zip file.\n\ud83d\udccf Published: 2025-02-26T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-03T17:21:33.067Z\n\ud83d\udd17 References:\n1. http://yzncms.com\n2. https://gitee.com/ken678/YZNCMS\n3. https://github.com/Ka7arotto/YZNCMS/blob/main/yzncms-upload.md", "creation_timestamp": "2025-03-03T17:31:27.000000Z"}, {"uuid": "71255e68-ff4b-4a47-ae06-9a4f6423cccf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25204", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6263", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25204\n\ud83d\udd25 CVSS Score: 6.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N)\n\ud83d\udd39 Description: `gh` is GitHub\u2019s official command line tool. Starting in version 2.49.0 and prior to version 2.67.0, under certain conditions, a bug in GitHub's Artifact Attestation cli tool `gh attestation verify` causes it to return a zero exit status when no attestations are present. This behavior is incorrect: When no attestations are present, `gh attestation verify` should return a non-zero exit status code, thereby signaling verification failure. An attacker can abuse this flaw to, for example, deploy malicious artifacts in any system that uses `gh attestation verify`'s exit codes to gatekeep deployments. Users are advised to update `gh` to patched version `v2.67.0` as soon as possible.\n\ud83d\udccf Published: 2025-02-14T16:38:29.038Z\n\ud83d\udccf Modified: 2025-03-03T19:13:28.888Z\n\ud83d\udd17 References:\n1. https://github.com/cli/cli/security/advisories/GHSA-fgw4-v983-mgp8\n2. https://github.com/cli/cli/issues/10418\n3. https://github.com/cli/cli/pull/10421", "creation_timestamp": "2025-03-03T19:30:58.000000Z"}, {"uuid": "81e4ca82-bf47-411c-b3b2-1eb599d46471", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25950", "type": "seen", "source": "Telegram/LnjyeAvwJZTh3Jc9tc_YXlfWG8Jfh8HLDR5AhqYK-Ww9g5pT", "content": "", "creation_timestamp": "2025-03-06T02:16:33.000000Z"}, {"uuid": "12333117-6b09-4f3c-8a1e-b82f2c16fdc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25783", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6449", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25783\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An arbitrary file upload vulnerability in the component admin\\plugin.php of Emlog Pro v2.5.3 allows attackers to execute arbitrary code via uploading a crafted Zip file.\n\ud83d\udccf Published: 2025-02-26T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-04T21:53:53.982Z\n\ud83d\udd17 References:\n1. https://www.emlog.net/\n2. http://emlogpro.com\n3. https://github.com/Ka7arotto/emlog/blob/main/emlog-3.md", "creation_timestamp": "2025-03-04T22:33:19.000000Z"}, {"uuid": "d2536fb4-2f37-4608-ac42-177b2b307f10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25616", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7000", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25616\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows students to modify rules for exams. The affected endpoint is /exams/edit-rule?exam_rule_id=1.\n\ud83d\udccf Published: 2025-03-10T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-10T14:11:02.253Z\n\ud83d\udd17 References:\n1. https://github.com/changeweb/Unifiedtransform\n2. https://github.com/armaansidana2003/CVE-2025-25616", "creation_timestamp": "2025-03-10T14:38:42.000000Z"}, {"uuid": "edb3a3a2-bdc3-417a-aa16-44d08c4e50a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25620", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6997", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25620\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Unifiedtransform 2.0 is vulnerable to Cross Site Scripting (XSS) in the Create assignment function.\n\ud83d\udccf Published: 2025-03-10T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-10T14:24:37.446Z\n\ud83d\udd17 References:\n1. https://github.com/changeweb/Unifiedtransform\n2. https://github.com/armaansidana2003/CVE-2025-25620", "creation_timestamp": "2025-03-10T14:38:40.000000Z"}, {"uuid": "bcf0650a-e931-4d09-ac8c-3a04d7d0f814", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25948", "type": "seen", "source": "Telegram/azVUWhViSI_K8RHTaXs_NFD1GQyckuLjlyY1f5IOr04M6Pdn", "content": "", "creation_timestamp": "2025-03-06T02:16:33.000000Z"}, {"uuid": "6bc33036-749f-4e7e-83dc-ba71086ae269", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25362", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6613", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25362\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A Server-Side Template Injection (SSTI) vulnerability in Spacy-LLM v0.7.2 allows attackers to execute arbitrary code via injecting a crafted payload into the template field.\n\ud83d\udccf Published: 2025-03-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-05T20:12:58.165Z\n\ud83d\udd17 References:\n1. https://github.com/explosion/spacy-llm/issues/492", "creation_timestamp": "2025-03-05T20:36:50.000000Z"}, {"uuid": "2b6895b5-5501-4faf-9988-d83430092e25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25823", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6741", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25823\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A cross-site scripting (XSS) vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the article header at /admin/article.php.\n\ud83d\udccf Published: 2025-02-26T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-06T20:27:13.365Z\n\ud83d\udd17 References:\n1. https://www.emlog.net/\n2. http://emlogpro.com\n3. https://github.com/Ka7arotto/emlog/blob/main/xss-3.md", "creation_timestamp": "2025-03-06T20:34:03.000000Z"}, {"uuid": "ab9c27f4-c568-43c3-9e7c-fc776c4a5f94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25361", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6883", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25361\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An arbitrary file upload vulnerability in the component /cms/CmsWebFileAdminController.java of PublicCMS v4.0.202406 allows attackers to execute arbitrary code via uploading a crafted svg or xml file.\n\ud83d\udccf Published: 2025-03-06T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-07T19:48:51.354Z\n\ud83d\udd17 References:\n1. https://github.com/c0rdXy/POC/blob/master/CVE/PublicCMS/XSS_02/XSS_02.md", "creation_timestamp": "2025-03-07T20:40:30.000000Z"}, {"uuid": "fe5742c6-fa2d-4a1f-a7a8-a12017fe4d8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25615", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7002", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25615\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Unifiedtransform 2.0 is vulnerable to Incorrect Access Control which allows viewing attendance list for all class sections.\n\ud83d\udccf Published: 2025-03-10T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-10T14:09:24.748Z\n\ud83d\udd17 References:\n1. https://github.com/changeweb/Unifiedtransform\n2. https://github.com/armaansidana2003/CVE-2025-25615", "creation_timestamp": "2025-03-10T14:38:48.000000Z"}, {"uuid": "1c3ab05e-d746-4c78-a57c-a485f3c481b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25497", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6730", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25497\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in account management interface in Netsweeper Server v.8.2.6 and earlier (fixed in v.8.2.7) allows unauthorized changes to the \"Account Owner\" field due to client-side-only restrictions and a lack of server-side validation. This vulnerability enables account ownership reassignment to or away from any user.\n\ud83d\udccf Published: 2025-03-06T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-06T19:15:45.961Z\n\ud83d\udd17 References:\n1. https://packetstorm.news/files/id/188626/\n2. https://helpdesk.netsweeper.com/docs/8_2_Docs/8_2_Netsweeper_Docs/Content/Release_Notes/Netsweeper_Release_Notes/8_2_Release_Notes/8_2_7_Release_and_Downloads.htm", "creation_timestamp": "2025-03-06T19:38:14.000000Z"}, {"uuid": "2f19fc98-485b-4a3a-b107-19cfb943dc91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25191", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6765", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25191\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N)\n\ud83d\udd39 Description: Group-Office is an enterprise CRM and groupware tool. This Stored XSS vulnerability exists where user input in the Name field is not properly sanitized before being stored. This vulnerability is fixed in 6.8.100.\n\ud83d\udccf Published: 2025-03-06T18:41:00.761Z\n\ud83d\udccf Modified: 2025-03-06T20:35:12.106Z\n\ud83d\udd17 References:\n1. https://github.com/Intermesh/groupoffice/security/advisories/GHSA-j7p3-v652-p3gf\n2. https://github.com/Intermesh/groupoffice/commit/c5c83e19a5cdf93b0e758726c97597861f1d6eda", "creation_timestamp": "2025-03-06T21:34:36.000000Z"}, {"uuid": "b2a0bdec-8d66-4a72-b495-f676c933e2a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25763", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6746", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25763\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: crmeb CRMEB-KY v5.4.0 and before has a SQL Injection vulnerability at getRead() in /system/SystemDatabackupServices.php\n\ud83d\udccf Published: 2025-03-06T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-06T20:08:14.955Z\n\ud83d\udd17 References:\n1. https://github.com/J-0k3r/sql/blob/main/sql.pdf\n2. https://github.com/J-0k3r/CVE-2025-25763", "creation_timestamp": "2025-03-06T20:34:10.000000Z"}, {"uuid": "e30d9065-ff46-4038-9797-6e14f6237364", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25825", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6770", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25825\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A cross-site scripting (XSS) vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Titile in the article category section.\n\ud83d\udccf Published: 2025-02-26T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-06T20:28:45.751Z\n\ud83d\udd17 References:\n1. https://www.emlog.net/\n2. http://emlogpro.com\n3. https://github.com/Ka7arotto/emlog/blob/main/xss-4.md", "creation_timestamp": "2025-03-06T21:34:43.000000Z"}, {"uuid": "e919d005-cfd6-4351-99c7-9b5815d8f4c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25827", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6768", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25827\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A Server-Side Request Forgery (SSRF) in the component sort.php of Emlog Pro v2.5.4 allows attackers to scan local and internal ports via supplying a crafted URL.\n\ud83d\udccf Published: 2025-02-26T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-06T20:33:30.292Z\n\ud83d\udd17 References:\n1. https://www.emlog.net/\n2. http://emlogpro.com\n3. https://github.com/Ka7arotto/emlog/blob/main/ssrf.md", "creation_timestamp": "2025-03-06T21:34:41.000000Z"}, {"uuid": "5a94e43c-6ed0-44e2-baad-34748b99ef3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25294", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6767", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25294\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. In all Envoy Gateway versions prior to 1.2.7 and 1.3.1 a default Envoy Proxy access log configuration is used. This format is vulnerable to log injection attacks. If the attacker uses a specially crafted user-agent which performs json injection, then he could add and overwrite fields to the access log. This vulnerability is fixed in 1.3.1 and 1.2.7. One can overwrite the old text based default format with JSON formatter by modifying the \"EnvoyProxy.spec.telemetry.accessLog\" setting.\n\ud83d\udccf Published: 2025-03-06T18:46:23.913Z\n\ud83d\udccf Modified: 2025-03-06T20:34:27.649Z\n\ud83d\udd17 References:\n1. https://github.com/envoyproxy/gateway/security/advisories/GHSA-mf24-chxh-hmvj\n2. https://github.com/envoyproxy/gateway/commit/8f48f5199cf1bbb9a8ac0695c5171bfef6c9198a", "creation_timestamp": "2025-03-06T21:34:37.000000Z"}, {"uuid": "6a7f161e-d9cf-46f8-a58d-2dc312a747fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25381", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6884", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25381\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Incorrect access control in the KSRTC AWATAR app of Karnataka State Road Transport Corporation v1.3.0 allows to view sensitive information such as usernames and passwords.\n\ud83d\udccf Published: 2025-03-06T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-07T19:47:26.887Z\n\ud83d\udd17 References:\n1. https://github.com/edwin-0990/CVE_ID/blob/main/CVE-2025-25381/README.md", "creation_timestamp": "2025-03-07T20:40:31.000000Z"}, {"uuid": "a574e7d4-25da-4fa2-adb0-f5ae2478ebda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25940", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7015", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25940\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: VisiCut 2.1 allows code execution via Insecure XML Deserialization in the loadPlfFile method of VisicutModel.java.\n\ud83d\udccf Published: 2025-03-10T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-10T15:36:35.130Z\n\ud83d\udd17 References:\n1. https://github.com/t-oster/VisiCut\n2. https://royblume.github.io/CVE-2025-25940/", "creation_timestamp": "2025-03-10T16:38:10.000000Z"}, {"uuid": "02442aac-f9a5-4dd2-b1fc-c0b587c6d5cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25181", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7023", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25181\n\ud83d\udd25 CVSS Score: 5.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N)\n\ud83d\udd39 Description: A SQL injection vulnerability in timeoutWarning.asp in Advantive VeraCore through 2025.1.0 allows remote attackers to execute arbitrary SQL commands via the PmSess1 parameter.\n\ud83d\udccf Published: 2025-02-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-10T17:17:34.093Z\n\ud83d\udd17 References:\n1. https://advantive.my.site.com/support/s/knowledge\n2. https://intezer.com/blog/research/xe-group-exploiting-zero-days/\n3. https://www.solissecurity.com/en-us/insights/xe-group-from-credit-card-skimming-to-exploiting-zero-days/", "creation_timestamp": "2025-03-10T17:38:20.000000Z"}, {"uuid": "a2402ebf-bad7-4cc6-a5b3-b6c9125f4a6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25977", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7013", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25977\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in canvg v.4.0.2 allows an attacker to execute arbitrary code via the Constructor of the class StyleElement.\n\ud83d\udccf Published: 2025-03-10T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-10T15:56:25.222Z\n\ud83d\udd17 References:\n1. https://github.com/canvg/canvg/issues/1749", "creation_timestamp": "2025-03-10T16:38:05.000000Z"}, {"uuid": "4ff82110-d794-456b-91d3-a44b4ef20bb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25614", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7028", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25614\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Incorrect Access Control in Unifiedtransform 2.0 leads to Privilege Escalation, which allows teachers to update the personal data of fellow teachers.\n\ud83d\udccf Published: 2025-03-10T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-10T19:17:30.257Z\n\ud83d\udd17 References:\n1. https://github.com/changeweb/Unifiedtransform\n2. https://github.com/armaansidana2003/CVE-2025-25614", "creation_timestamp": "2025-03-10T19:38:18.000000Z"}, {"uuid": "c71ecfa6-43c6-49d9-a2a9-841b5ca996b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25242", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7099", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25242\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: SAP NetWeaver Application Server ABAP allows malicious scripts to be executed in the application, potentially leading to a Cross-Site Scripting (XSS) vulnerability. This has no impact on the availability of the application, but it can have some minor impact on its confidentiality and integrity.\n\ud83d\udccf Published: 2025-03-11T00:32:28.733Z\n\ud83d\udccf Modified: 2025-03-11T02:13:11.225Z\n\ud83d\udd17 References:\n1. https://me.sap.com/notes/3562390\n2. https://url.sap/sapsecuritypatchday", "creation_timestamp": "2025-03-11T02:40:07.000000Z"}, {"uuid": "aa6f8c8d-88d1-43c1-aa1d-20bc19628254", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25245", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7102", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25245\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: SAP BusinessObjects Business Intelligence Platform (Web Intelligence) contains a deprecated web application endpoint that is not properly secured. An attacker could take advantage of this by injecting a malicious url in the data returned to the user. On successful exploitation, there could be a limited impact on confidentiality and integrity within the scope of victim\ufffds browser. There is no impact on availability.\n\ud83d\udccf Published: 2025-03-11T00:34:56.115Z\n\ud83d\udccf Modified: 2025-03-11T02:10:07.773Z\n\ud83d\udd17 References:\n1. https://me.sap.com/notes/3557469\n2. https://url.sap/sapsecuritypatchday", "creation_timestamp": "2025-03-11T02:40:12.000000Z"}, {"uuid": "567bf7cf-9903-4981-9289-c1d17430bf3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25244", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7101", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25244\n\ud83d\udd25 CVSS Score: 5.7 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)\n\ud83d\udd39 Description: SAP Business Warehouse (Process Chains) allows an attacker to manipulate the process execution due to missing authorization check. An attacker with display authorization for the process chain object could set one or all processes to be skipped. This means corresponding activities, such as data loading, activation, or deletion, will not be executed as initially modeled. This could lead to unexpected results in business reporting leading to a significant impact on integrity. However, there is no impact on confidentiality or availability.\n\ud83d\udccf Published: 2025-03-11T00:34:42.757Z\n\ud83d\udccf Modified: 2025-03-11T02:12:02.750Z\n\ud83d\udd17 References:\n1. https://me.sap.com/notes/3552144\n2. https://url.sap/sapsecuritypatchday", "creation_timestamp": "2025-03-11T02:40:09.000000Z"}, {"uuid": "49cd8b74-9563-4509-8933-e51ce537d09d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25748", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7194", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25748\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A CSRF vulnerability in the gestione_utenti.php endpoint of HotelDruid 3.0.7 allows attackers to perform unauthorized actions (e.g., modifying user passwords) on behalf of authenticated users by exploiting the lack of origin or referrer validation and the absence of CSRF tokens.\n\ud83d\udccf Published: 2025-03-11T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-11T17:22:36.399Z\n\ud83d\udd17 References:\n1. https://www.huyvo.net/post/cve-2025-25748-cross-site-request-forgery-csrf-vulnerability-in-hoteldruid-3-0-7", "creation_timestamp": "2025-03-11T17:39:58.000000Z"}, {"uuid": "62933625-8186-481a-b7fa-3619f28ac338", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25749", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7193", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25749\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in HotelDruid version 3.0.7 and earlier allows users to set weak passwords due to the lack of enforcement of password strength policies.\n\ud83d\udccf Published: 2025-03-11T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-11T17:24:53.621Z\n\ud83d\udd17 References:\n1. https://www.huyvo.net/post/cve-2025-25749-weak-password-policy-in-hoteldruid-3-0-7", "creation_timestamp": "2025-03-11T17:39:57.000000Z"}, {"uuid": "d9ecc51c-8861-41c4-82df-50d01f2d4d0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25925", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7222", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25925\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A stored cross-scripting (XSS) vulnerability in Openmrs v2.4.3 Build 0ff0ed allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the personName.middleName parameter at /openmrs/admin/patients/shortPatientForm.form.\n\ud83d\udccf Published: 2025-03-11T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-11T19:27:19.617Z\n\ud83d\udd17 References:\n1. http://openmrs.com\n2. https://github.com/johnchd/CVEs/blob/main/OpenMRS/CVE-2025-25925%20-%20P-XSS.md", "creation_timestamp": "2025-03-11T20:21:08.000000Z"}, {"uuid": "33159d6b-4f98-42c9-8f63-e2c230b1f9c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25568", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7318", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25568\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: SoftEtherVPN 5.02.5187 is vulnerable to Use after Free in the Command.c file via the CheckNetworkAcceptThread function.\n\ud83d\udccf Published: 2025-03-12T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-12T15:36:55.709Z\n\ud83d\udd17 References:\n1. https://lzydry.github.io/CVE-2025-25568/", "creation_timestamp": "2025-03-12T15:40:47.000000Z"}, {"uuid": "50344e62-e0c0-4986-aa25-7c0cf3e4d907", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25709", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7325", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25709\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AC:L/AV:N/A:N/C:H/I:N/PR:N/S:U/UI:N)\n\ud83d\udd39 Description: An issue in dtp.ae tNexus Airport View v.2.8 allows a remote attacker to escalate privileges via the addUser and updateUser endpoints\n\ud83d\udccf Published: 2025-03-12T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-12T16:24:23.389Z\n\ud83d\udd17 References:\n1. https://github.com/z5jt/vulnerability-research/tree/main/CVE-2025-25709", "creation_timestamp": "2025-03-12T16:41:00.000000Z"}, {"uuid": "2a4fa8d5-b885-4de2-8476-06b36463d6c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25567", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7321", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25567\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: SoftEther VPN 5.02.5187 is vulnerable to Buffer Overflow in Internat.c via the UniToStrForSingleChars function.\n\ud83d\udccf Published: 2025-03-12T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-12T15:33:37.132Z\n\ud83d\udd17 References:\n1. https://lzydry.github.io/CVE-2025-25567/", "creation_timestamp": "2025-03-12T15:40:49.000000Z"}, {"uuid": "21fa2b29-ef9c-41dd-8753-cb5d489e151b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25975", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7366", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25975\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in parse-git-config v.3.0.0 allows an attacker to obtain sensitive information via the expandKeys function\n\ud83d\udccf Published: 2025-03-12T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-12T18:44:44.554Z\n\ud83d\udd17 References:\n1. https://github.com/jonschlinkert/parse-git-config/issues/14", "creation_timestamp": "2025-03-12T19:41:14.000000Z"}, {"uuid": "b6630547-1cde-42ee-9d0c-ff8c3bf1858e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25293", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7368", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25293\n\ud83d\udd25 CVSS Score: 6.6 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U)\n\ud83d\udd39 Description: ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. Prior to versions 1.12.4 and 1.18.0, ruby-saml is susceptible to remote Denial of Service (DoS) with compressed SAML responses. ruby-saml uses zlib to decompress SAML responses in case they're compressed. It is possible to bypass the message size check with a compressed assertion since the message size is checked before inflation and not after. This issue may lead to remote Denial of Service (DoS). Versions 1.12.4 and 1.18.0 fix the issue.\n\ud83d\udccf Published: 2025-03-12T20:11:08.860Z\n\ud83d\udccf Modified: 2025-03-12T20:36:17.830Z\n\ud83d\udd17 References:\n1. https://github.com/SAML-Toolkits/ruby-saml/security/advisories/GHSA-92rq-c8cf-prrq\n2. https://github.com/omniauth/omniauth-saml/security/advisories/GHSA-hw46-3hmr-x9xv\n3. https://github.com/SAML-Toolkits/ruby-saml/commit/acac9e9cc0b9a507882c614f25d41f8b47be349a\n4. https://github.com/SAML-Toolkits/ruby-saml/commit/e2da4c6dae7dc01a4d9cd221395140a67e2b3eb1\n5. https://github.com/SAML-Toolkits/ruby-saml/releases/tag/v1.12.4\n6. https://github.com/SAML-Toolkits/ruby-saml/releases/tag/v1.18.0", "creation_timestamp": "2025-03-12T20:42:28.000000Z"}, {"uuid": "c45f8215-4b48-4b5d-bebb-f25d7cb3307b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25683", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7336", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25683\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: AlekSIS-Core is vulnerable to Incorrect Access Control. Unauthenticated users can access all PDF files. This affects AlekSIS-Core 3.0, 3.1, 3.1.1, 3.1.2, 3.1.3, 3.1.4, 3.1.5, 3.1.6, 3.2.0 and 3.2.1.\n\ud83d\udccf Published: 2025-03-12T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-12T16:14:39.042Z\n\ud83d\udd17 References:\n1. https://edugit.org/AlekSIS/official/AlekSIS-Core/-/issues/1180\n2. https://aleksis.org/news/2025/01/security-advisory-cve-2025-25683-pdf-files-accessible-without-authentication/", "creation_timestamp": "2025-03-12T16:41:15.000000Z"}, {"uuid": "090b7af8-560b-4a49-8232-b19e00d451d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25774", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7350", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25774\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in Open5GS v2.7.2. When a UE switches between two gNBs and sends a handover request at a specific time, it may cause an exception in the AMF's internal state machine, leading to an AMF crash and resulting in a Denial of Service (DoS).\n\ud83d\udccf Published: 2025-03-12T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-12T16:48:40.910Z\n\ud83d\udd17 References:\n1. https://github.com/open5gs/open5gs/issues/3671\n2. https://github.com/open5gs/open5gs/commit/2e68706f1eea029d5172ccad946e78b352c031d0\n3. https://github.com/guoweifk/BugReport/blob/main/Open5GS%20AMF%20Denial%20of%20Service%20via%20GMM%20State%20Handling%20in%20Handover", "creation_timestamp": "2025-03-12T17:41:40.000000Z"}, {"uuid": "0474a5ed-3358-4ac5-ad0b-f583421eb256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7376", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25291\n\ud83d\udd25 CVSS Score: 8 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U)\n\ud83d\udd39 Description: ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. An authentication bypass vulnerability was found in ruby-saml prior to versions 1.12.4 and 1.18.0 due to a parser differential. ReXML and Nokogiri parse XML differently; the parsers can generate entirely different document structures from the same XML input. That allows an attacker to be able to execute a Signature Wrapping attack. This issue may lead to authentication bypass. Versions 1.12.4 and 1.18.0 fix the issue.\n\ud83d\udccf Published: 2025-03-12T20:16:12.181Z\n\ud83d\udccf Modified: 2025-03-12T20:24:28.868Z\n\ud83d\udd17 References:\n1. https://github.com/SAML-Toolkits/ruby-saml/security/advisories/GHSA-4vc4-m8qh-g8jm\n2. https://github.com/omniauth/omniauth-saml/security/advisories/GHSA-hw46-3hmr-x9xv\n3. https://github.com/SAML-Toolkits/ruby-saml/commit/e76c5b36bac40aedbf1ba7ffaaf495be63328cd9\n4. https://github.com/SAML-Toolkits/ruby-saml/commit/e9c1cdbd0f9afa467b585de279db0cbd0fb8ae97\n5. https://github.com/SAML-Toolkits/ruby-saml/releases/tag/v1.12.4\n6. https://github.com/SAML-Toolkits/ruby-saml/releases/tag/v1.18.0", "creation_timestamp": "2025-03-12T20:42:37.000000Z"}, {"uuid": "b16772dc-8468-4d14-80d6-b8881d68b709", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25292", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7388", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25292\n\ud83d\udd25 CVSS Score: 8.8 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:P)\n\ud83d\udd39 Description: ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. An authentication bypass vulnerability was found in ruby-saml prior to versions 1.12.4 and 1.18.0 due to a parser differential. ReXML and Nokogiri parse XML differently, the parsers can generate entirely different document structures from the same XML input. That allows an attacker to be able to execute a Signature Wrapping attack. This issue may lead to authentication bypass. Versions 1.12.4 and 1.18.0 contain a patch for the issue.\n\ud83d\udccf Published: 2025-03-12T20:53:24.353Z\n\ud83d\udccf Modified: 2025-03-12T21:35:08.259Z\n\ud83d\udd17 References:\n1. https://github.com/SAML-Toolkits/ruby-saml/security/advisories/GHSA-754f-8gm6-c4r2\n2. https://github.com/omniauth/omniauth-saml/security/advisories/GHSA-hw46-3hmr-x9xv\n3. https://github.com/SAML-Toolkits/ruby-saml/commit/e76c5b36bac40aedbf1ba7ffaaf495be63328cd9\n4. https://github.com/SAML-Toolkits/ruby-saml/commit/e9c1cdbd0f9afa467b585de279db0cbd0fb8ae97\n5. https://about.gitlab.com/releases/2025/03/12/patch-release-gitlab-17-9-2-released\n6. https://github.blog/security/sign-in-as-anyone-bypassing-saml-sso-authentication-with-parser-differentials\n7. https://github.com/SAML-Toolkits/ruby-saml/releases/tag/v1.12.4\n8. https://github.com/SAML-Toolkits/ruby-saml/releases/tag/v1.18.0", "creation_timestamp": "2025-03-12T21:40:48.000000Z"}, {"uuid": "4ce106bc-99d1-4f6e-8df5-f3424c8a9cb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25873", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7577", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25873\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Cross Site Request Forgery vulnerability in Open Panel OpenAdmin v.0.3.4 allows a remote attacker to escalate privileges via the Change Root Password function\n\ud83d\udccf Published: 2025-03-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-14T15:36:02.615Z\n\ud83d\udd17 References:\n1. https://openpanel.com/docs/\n2. https://packetstorm.news/files/id/189597", "creation_timestamp": "2025-03-14T15:43:28.000000Z"}, {"uuid": "e21804cb-83ee-4f4f-b7c0-607a41049208", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25064", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7608", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25064\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: SQL injection vulnerability in the ZimbraSync Service SOAP endpoint in Zimbra Collaboration 10.0.x before 10.0.12 and 10.1.x before 10.1.4 due to insufficient sanitization of a user-supplied parameter. Authenticated attackers can exploit this vulnerability by manipulating a specific parameter in the request, allowing them to inject arbitrary SQL queries that could retrieve email metadata.\n\ud83d\udccf Published: 2025-02-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-14T17:22:58.099Z\n\ud83d\udd17 References:\n1. https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories\n2. https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.4#Security_Fixes\n3. https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.12#Security_Fixes", "creation_timestamp": "2025-03-14T17:48:53.000000Z"}, {"uuid": "6d62f9b2-e682-40ac-b0f1-89315004cd44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25225", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7691", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25225\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A privilege escalation vulnerability in the Hikashop component versions 1.0.0-5.1.3 for Joomla allows authenticated attackers (administrator) to escalate their privileges to Super Admin Permissions.\n\ud83d\udccf Published: 2025-03-15T18:06:41.769Z\n\ud83d\udccf Modified: 2025-03-15T18:06:41.769Z\n\ud83d\udd17 References:\n1. https://www.hikashop.com/\n2. https://github.com/AdamWallwork/CVEs/tree/main/2025/CVE-2025-25225", "creation_timestamp": "2025-03-15T18:45:18.000000Z"}, {"uuid": "e29d8cd8-e02d-407c-83b5-615beb4c646d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2556", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8249", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2556\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as problematic was found in Audi UTR Dashcam 2.0. Affected by this vulnerability is an unknown functionality of the component Video Stream Handler. The manipulation leads to hard-coded credentials. The attack can only be initiated within the local network. The exploit has been disclosed to the public and may be used. Upgrading to version 2.89 and 2.90 is able to address this issue. It is recommended to upgrade the affected component. The vendor was contacted early about these issues and acted very professional. Version 2.89 is fixing this issue for new customers and 2.90 is going to fix it for existing customers.\n\ud83d\udccf Published: 2025-03-20T18:00:08.572Z\n\ud83d\udccf Modified: 2025-03-20T18:00:08.572Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300169\n2. https://vuldb.com/?ctiid.300169\n3. https://vuldb.com/?submit.513392\n4. https://github.com/geo-chen/Audi/blob/main/README.md#finding-3-rtsp-and-ftp-wide-open", "creation_timestamp": "2025-03-20T18:20:46.000000Z"}, {"uuid": "84c20669-d0f3-4b2d-8224-9d0bf6ecec7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25618", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7784", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25618\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Incorrect Access Control in Unifiedtransform 2.0 leads to Privilege Escalation allowing the change of Section Name and Room Number by Teachers.\n\ud83d\udccf Published: 2025-03-17T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-17T14:19:37.838Z\n\ud83d\udd17 References:\n1. https://github.com/changeweb/Unifiedtransform\n2. https://github.com/armaansidana2003/CVE-2025-25618", "creation_timestamp": "2025-03-17T14:52:16.000000Z"}, {"uuid": "f9fc7c9d-4b8e-46eb-ac05-667e6fd8d060", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25928", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7846", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25928\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A Cross-Site Request Forgery (CSRF) in the component /admin/users/user.form of Openmrs 2.4.3 Build 0ff0ed allows attackers to execute arbitrary operations via a crafted request. In this case, an attacker could elevate a low-privileged account to an administrative role by leveraging the CSRF vulnerability at the /admin/users/user.form endpoint.\n\ud83d\udccf Published: 2025-03-11T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-17T18:55:54.103Z\n\ud83d\udd17 References:\n1. https://github.com/johnchd/CVEs/blob/main/OpenMRS/CVE-2025-25928%20-%20CSRF%20PrivEsc.md", "creation_timestamp": "2025-03-17T19:47:59.000000Z"}, {"uuid": "7444c0b4-5f09-4e63-9e70-686efd11cd29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25595", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7924", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25595\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A lack of rate limiting in the login page of Safe App version a3.0.9 allows attackers to bypass authentication via a brute force attack.\n\ud83d\udccf Published: 2025-03-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-18T16:38:58.712Z\n\ud83d\udd17 References:\n1. https://pastebin.com/t8FthPaF\n2. https://play.google.com/store/apps/details?id=com.iitb.cse.arkenstone.safe_v2", "creation_timestamp": "2025-03-18T16:51:12.000000Z"}, {"uuid": "ba026a28-2a0c-4ba8-828f-911061b6fb1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25740", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7819", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25740\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the PSK parameter in the SetQuickVPNSettings module.\n\ud83d\udccf Published: 2025-02-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-17T18:42:31.026Z\n\ud83d\udd17 References:\n1. https://dear-sunshine-ba5.notion.site/D-Link-DIR-853-2-1812386a66448036a1cce259beb30b04", "creation_timestamp": "2025-03-17T19:34:11.000000Z"}, {"uuid": "e33b2fef-d561-438b-bbcd-f6ca5c711883", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25621", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7783", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25621\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows teachers to take attendance of fellow teachers. This affected endpoint is /courses/teacher/index?teacher_id=2&semester_id=1.\n\ud83d\udccf Published: 2025-03-17T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-17T14:21:45.846Z\n\ud83d\udd17 References:\n1. https://github.com/changeweb/Unifiedtransform\n2. https://github.com/armaansidana2003/CVE-2025-25621", "creation_timestamp": "2025-03-17T14:52:15.000000Z"}, {"uuid": "3a4a47c1-63fe-464b-808f-119daef6812f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25612", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7782", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25612\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: FS Inc S3150-8T2F prior to version S3150-8T2F_2.2.0D_135103 is vulnerable to Cross Site Scripting (XSS) in the Time Range Configuration functionality of the administration interface. An attacker can inject malicious JavaScript into the \"Time Range Name\" field, which is improperly sanitized. When this input is saved, it is later executed in the browser of any user accessing the affected page, including administrators, resulting in arbitrary script execution in the user's browser.\n\ud83d\udccf Published: 2025-03-17T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-17T14:25:41.396Z\n\ud83d\udd17 References:\n1. http://fs.com\n2. https://github.com/secmuzz/CVE-2025-25612/", "creation_timestamp": "2025-03-17T14:51:41.000000Z"}, {"uuid": "23baeacd-ce48-4764-bae8-41412a6e5cc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25914", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7837", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25914\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: SQL injection vulnerability in Online Exam Mastering System v.1.0 allows a remote attacker to execute arbitrary code via the fid parameter\n\ud83d\udccf Published: 2025-03-17T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-17T19:37:32.773Z\n\ud83d\udd17 References:\n1. https://github.com/872323857/CVE/blob/main/online-exam-mastering-system_sqlinject.md", "creation_timestamp": "2025-03-17T19:47:49.000000Z"}, {"uuid": "a9e8eae1-74dd-42aa-9e0e-2110d1d523e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25042", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7980", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25042\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: A vulnerability in the AOS-CX REST interface could allow an authenticated remote attacker with low privileges to view sensitive information. Successful exploitation could allow an attacker to read encrypted credentials of other users on the switch, potentially leading to further unauthorized access or data breaches.\n\ud83d\udccf Published: 2025-03-18T19:02:02.192Z\n\ud83d\udccf Modified: 2025-03-18T19:27:35.020Z\n\ud83d\udd17 References:\n1. https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04818en_us&docLocale=en_US", "creation_timestamp": "2025-03-18T19:48:53.000000Z"}, {"uuid": "8ed39e46-ad5d-485f-a838-6ba446ec3a1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25220", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7896", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25220\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in +F FS010M versions prior to V2.0.1_1101. If this vulnerability is exploited, an arbitrary OS command may be executed by a remote authenticated attacker.\n\ud83d\udccf Published: 2025-03-18T08:26:13.758Z\n\ud83d\udccf Modified: 2025-03-18T08:26:13.758Z\n\ud83d\udd17 References:\n1. https://fsi-plusf.jp/news/25031701.html\n2. https://jvn.jp/en/jp/JVN11230428/", "creation_timestamp": "2025-03-18T08:57:23.000000Z"}, {"uuid": "61defe13-8b10-409c-a124-092669a6a141", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25625", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7946", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25625\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A stored cross-site scripting vulnerability exists in FS model S3150-8T2F switches running firmware s3150-8t2f-switch-fsos-220d_118101 and web firmware v2.2.2, which allows an authenticated web interface user to bypass input filtering on user names, and stores un-sanitized HTML and Javascript on the device. Pages which then present the user name without encoding special characters will then cause the injected code to be parsed by the browsers of other users accessing the web interface.\n\ud83d\udccf Published: 2025-03-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-18T16:48:28.206Z\n\ud83d\udd17 References:\n1. https://github.com/whitewhale-dmb/Vulnerability-Research/tree/main/CVE-2025-25625", "creation_timestamp": "2025-03-18T17:48:43.000000Z"}, {"uuid": "4e86b37b-8f13-4723-aea0-2972cb703b9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25598", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8055", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25598\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Incorrect access control in the scheduled tasks console of Inova Logic CUSTOMER MONITOR (CM) v3.1.757.1 allows attackers to escalate privileges via placing a crafted executable into a scheduled task.\n\ud83d\udccf Published: 2025-03-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-19T13:51:54.520Z\n\ud83d\udd17 References:\n1. https://github.com/quriusfox/vulnerability-research/tree/main/CVE-2025-25598", "creation_timestamp": "2025-03-19T14:16:47.000000Z"}, {"uuid": "970c666d-3f1b-42bc-bd19-eefda1046968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25040", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7985", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25040\n\ud83d\udd25 CVSS Score: 3.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: A vulnerability has been identified in the port ACL functionality of AOS-CX software running on the HPE Aruba Networking CX 9300 Switch Series only and affects: \n\n     - AOS-CX 10.14.xxxx : All patches\n     - AOS-CX 10.15.xxxx : 10.15.1000 and below \nThe vulnerability is specific to traffic originated by the CX 9300 switch platform and could allow an attacker to bypass ACL rules applied to routed ports on egress. As a result, port ACLs are not correctly enforced, which could lead to unauthorized traffic flow and violations of security policies. Egress VLAN ACLs and Routed VLAN ACLs are not affected by this vulnerability.\n\ud83d\udccf Published: 2025-03-18T18:59:54.510Z\n\ud83d\udccf Modified: 2025-03-18T19:24:02.485Z\n\ud83d\udd17 References:\n1. https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04818en_us&docLocale=en_US", "creation_timestamp": "2025-03-18T19:49:01.000000Z"}, {"uuid": "c186c6ae-fb50-4d1d-9dfe-29817720e4ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2548", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8232", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2548\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as problematic, was found in D-Link DIR-618 and DIR-605L 2.02/3.02. Affected is an unknown function of the file /goform/formSetDomainFilter. The manipulation leads to improper access controls. The attack can only be initiated within the local network. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.\n\ud83d\udccf Published: 2025-03-20T15:31:26.534Z\n\ud83d\udccf Modified: 2025-03-20T15:31:26.534Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300162\n2. https://vuldb.com/?ctiid.300162\n3. https://vuldb.com/?submit.516790\n4. https://lavender-bicycle-a5a.notion.site/D-Link-DIR-618-formSetDomainFilter-1b053a41781f80ffa989c54c391636f6?pvs=4\n5. https://lavender-bicycle-a5a.notion.site/D-Link-DIR-605L-formSetDomainFilter-1b153a41781f80498fcdf9d675df9b39?pvs=4\n6. https://www.dlink.com/", "creation_timestamp": "2025-03-20T16:18:24.000000Z"}, {"uuid": "eee5a880-e04d-48ee-8713-9f8934a53328", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2555", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8250", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2555\n\ud83d\udd25 CVSS Score: 2.1 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as problematic has been found in Audi Universal Traffic Recorder App 2.0. Affected is an unknown function of the component FTP Credentials. The manipulation leads to use of hard-coded password. Attacking locally is a requirement. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 2.89 and 2.90 is able to address this issue. It is recommended to upgrade the affected component. The vendor was contacted early about these issues and acted very professional. Version 2.89 is fixing this issue for new customers and 2.90 is going to fix it for existing customers.\n\ud83d\udccf Published: 2025-03-20T18:00:07.109Z\n\ud83d\udccf Modified: 2025-03-20T18:00:07.109Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300168\n2. https://vuldb.com/?ctiid.300168\n3. https://vuldb.com/?submit.513391\n4. https://github.com/geo-chen/Audi/blob/main/README.md#finding-2-hardcoded-credentials-in-audi-universal-traffic-recorder-app", "creation_timestamp": "2025-03-20T18:20:47.000000Z"}, {"uuid": "ead4dc3e-cba5-4145-8313-90d2bfb0311c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25684", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8147", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25684\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A lack of validation in the path parameter (/download) of GL-INet Beryl AX GL-MT3000 v4.7.0 allows attackers to download arbitrary files from the device's file system via a crafted POST request.\n\ud83d\udccf Published: 2025-03-17T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-19T19:33:00.267Z\n\ud83d\udd17 References:\n1. https://medium.com/@tfortinsec/multiple-path-traversal-vulnerabilities-in-the-beryl-ax-gl-mt300-router-e7f856d14af9", "creation_timestamp": "2025-03-19T20:18:18.000000Z"}, {"uuid": "96a888bb-1728-4687-9c58-6807ff142777", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25565", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8128", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25565\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: SoftEther VPN 5.02.5187 is vulnerable to Buffer Overflow in the Command.c file via the PtMakeCert and PtMakeCert2048 functions.\n\ud83d\udccf Published: 2025-03-12T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-19T18:57:37.047Z\n\ud83d\udd17 References:\n1. https://lzydry.github.io/CVE-2025-25565/", "creation_timestamp": "2025-03-19T19:18:22.000000Z"}, {"uuid": "5ab35900-2eac-4a0f-820b-7c05d38b88ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2536", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8126", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2536\n\ud83d\udd25 CVSS Score: 5.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N)\n\ud83d\udd39 Description: Cross-site scripting (XSS) vulnerability on Liferay Portal 7.4.3.82 through 7.4.3.128, and Liferay DXP 2024.Q3.0, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 update 82 through update 92 in the Frontend JS module's layout-taglib/__liferay__/index.js allows remote attackers to inject arbitrary web script or HTML via toastData parameter\n\ud83d\udccf Published: 2025-03-19T19:00:42.808Z\n\ud83d\udccf Modified: 2025-03-19T19:00:42.808Z\n\ud83d\udd17 References:\n1. https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-2536", "creation_timestamp": "2025-03-19T19:18:20.000000Z"}, {"uuid": "9361935f-8971-4777-82f7-df8a61d5888f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2587", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8330", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2587\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, was found in Jinher OA C6 1.0. This affects an unknown part of the file IncentivePlanFulfillAppprove.aspx. The manipulation of the argument httpOID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-21T12:00:08.867Z\n\ud83d\udccf Modified: 2025-03-21T12:00:08.867Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300567\n2. https://vuldb.com/?ctiid.300567\n3. https://vuldb.com/?submit.516025\n4. https://flowus.cn/share/75512a54-e78f-4bfb-80e7-236521b43a02?code=HC3R4E", "creation_timestamp": "2025-03-21T12:22:06.000000Z"}, {"uuid": "fb1dbad0-93d8-4ca0-a1e1-3149c4a678e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2505", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8203", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2505\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Age Gate plugin for WordPress is vulnerable to Local PHP File Inclusion in all versions up to, and including, 3.5.3 via the 'lang' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary PHP files on the server, allowing the execution of code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other \u201csafe\u201d file types can be uploaded and included.\n\ud83d\udccf Published: 2025-03-20T07:29:57.851Z\n\ud83d\udccf Modified: 2025-03-20T14:51:26.885Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/d6ac2996-098f-474c-b44e-78d5af7b503a?source=cve\n2. https://plugins.trac.wordpress.org/browser/age-gate/trunk/vendor/agegate/common/src/Settings.php#L27\n3. https://plugins.trac.wordpress.org/changeset/3258075/", "creation_timestamp": "2025-03-20T15:18:13.000000Z"}, {"uuid": "50466cda-ed2a-4696-b10d-3fc4f2d81b86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2546", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8201", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2546\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as problematic was found in D-Link DIR-618 and DIR-605L 2.02/3.02. This vulnerability affects unknown code of the file /goform/formAdvFirewall of the component Firewall Service. The manipulation leads to improper access controls. The attack needs to be approached within the local network. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.\n\ud83d\udccf Published: 2025-03-20T15:00:20.920Z\n\ud83d\udccf Modified: 2025-03-20T15:00:20.920Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300160\n2. https://vuldb.com/?ctiid.300160\n3. https://vuldb.com/?submit.516788\n4. https://lavender-bicycle-a5a.notion.site/D-Link-DIR-618-formAdvFirewall-1b053a41781f801ca1a5e09bb83a22c5?pvs=4\n5. https://lavender-bicycle-a5a.notion.site/D-Link-DIR-605L-formAdvFirewall-1b153a41781f80aca28ec11da787f0e8?pvs=4\n6. https://www.dlink.com/", "creation_timestamp": "2025-03-20T15:18:12.000000Z"}, {"uuid": "163f5340-876b-4460-b176-bdb50ce07ac5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2585", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8312", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2585\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: EBM Maintenance Center From EBM Technologies has a SQL Injection vulnerability, allowing remote attackers with regular privileges to inject arbitrary SQL commands to read, modify, and delete database contents.\n\ud83d\udccf Published: 2025-03-21T02:02:22.600Z\n\ud83d\udccf Modified: 2025-03-21T02:02:22.600Z\n\ud83d\udd17 References:\n1. https://www.twcert.org.tw/tw/cp-132-10021-8786e-1.html\n2. https://www.twcert.org.tw/en/cp-139-10022-8e28e-2.html", "creation_timestamp": "2025-03-21T02:18:45.000000Z"}, {"uuid": "0cf36a07-2932-401e-9f7c-683fdd85f0af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2565", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8221", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2565\n\ud83d\udd25 CVSS Score: 5.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N)\n\ud83d\udd39 Description: The data exposure vulnerability in Liferay Portal 7.4.0 through 7.4.3.126, and Liferay DXP 2024.Q3.0, 2024.Q2.0 through 2024.Q2.12, 2024.Q1.1 through 2024.Q1.12, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92 allows an unauthorized user to obtain entry data from forms.\n\ud83d\udccf Published: 2025-03-20T16:10:06.826Z\n\ud83d\udccf Modified: 2025-03-20T16:10:06.826Z\n\ud83d\udd17 References:\n1. https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2025-2565", "creation_timestamp": "2025-03-20T16:18:07.000000Z"}, {"uuid": "d4e7ab3e-a521-495d-a320-e3e04c44b0f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2551", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8235", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2551\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in D-Link DIR-618 and DIR-605L 2.02/3.02. It has been classified as problematic. This affects an unknown part of the file /goform/formSetPortTr. The manipulation leads to improper access controls. Access to the local network is required for this attack. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.\n\ud83d\udccf Published: 2025-03-20T17:00:09.378Z\n\ud83d\udccf Modified: 2025-03-20T17:00:09.378Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300165\n2. https://vuldb.com/?ctiid.300165\n3. https://vuldb.com/?submit.516793\n4. https://lavender-bicycle-a5a.notion.site/D-Link-DIR-618-formSetPortTr-1b053a41781f8000a9ded17aa2f587cc?pvs=4\n5. https://lavender-bicycle-a5a.notion.site/D-Link-DIR-605L-formSetPortTr-1b153a41781f809d95c8e39c6c31c348?pvs=4\n6. https://www.dlink.com/", "creation_timestamp": "2025-03-20T17:18:43.000000Z"}, {"uuid": "7ef6ab58-738d-491d-8a2e-e7127e45f5ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2552", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8234", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2552\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in D-Link DIR-618 and DIR-605L 2.02/3.02. It has been declared as problematic. This vulnerability affects unknown code of the file /goform/formTcpipSetup. The manipulation leads to improper access controls. Access to the local network is required for this attack to succeed. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.\n\ud83d\udccf Published: 2025-03-20T17:00:21.588Z\n\ud83d\udccf Modified: 2025-03-20T17:00:21.588Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300166\n2. https://vuldb.com/?ctiid.300166\n3. https://vuldb.com/?submit.516794\n4. https://lavender-bicycle-a5a.notion.site/D-Link-DIR-618-formTcpipSetup-1b053a41781f80fbbf94fda0c3b5ebfa?pvs=4\n5. https://lavender-bicycle-a5a.notion.site/D-Link-DIR-605L-formTcpipSetup-1b153a41781f80a7967ae08c81147a39?pvs=4\n6. https://www.dlink.com/", "creation_timestamp": "2025-03-20T17:18:42.000000Z"}, {"uuid": "7554927b-ad7c-4abd-af14-2d32da750caa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2547", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8233", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2547\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as problematic, has been found in D-Link DIR-618 and DIR-605L 2.02/3.02. This issue affects some unknown processing of the file /goform/formAdvNetwork. The manipulation leads to improper access controls. The attack can only be done within the local network. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.\n\ud83d\udccf Published: 2025-03-20T15:31:14.499Z\n\ud83d\udccf Modified: 2025-03-20T15:31:14.499Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300161\n2. https://vuldb.com/?ctiid.300161\n3. https://vuldb.com/?submit.516789\n4. https://lavender-bicycle-a5a.notion.site/D-Link-DIR-618-formAdvNetwork-1b053a41781f8085a4e8d3c1d1de5f56?pvs=4\n5. https://lavender-bicycle-a5a.notion.site/D-Link-DIR-605L-formAdvNetwork-1b153a41781f80109325dbc96ffc0295?pvs=4\n6. https://www.dlink.com/", "creation_timestamp": "2025-03-20T16:18:24.000000Z"}, {"uuid": "3b803fee-235b-4680-a510-69de7b766544", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2549", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8242", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2549\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability has been found in D-Link DIR-618 and DIR-605L 2.02/3.02 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /goform/formSetPassword. The manipulation leads to improper access controls. The attack needs to be done within the local network. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.\n\ud83d\udccf Published: 2025-03-20T16:31:05.861Z\n\ud83d\udccf Modified: 2025-03-20T16:31:05.861Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300163\n2. https://vuldb.com/?ctiid.300163\n3. https://vuldb.com/?submit.516791\n4. https://lavender-bicycle-a5a.notion.site/D-Link-DIR-618-formSetPassword-1b053a41781f8021b704f7dfeb1fcd09?pvs=4\n5. https://lavender-bicycle-a5a.notion.site/D-Link-DIR-605L-formSetPassword-1b153a41781f803d8166f9b551b30cd4?pvs=4\n6. https://www.dlink.com/", "creation_timestamp": "2025-03-20T17:18:50.000000Z"}, {"uuid": "65524dfe-6406-4c79-b911-1b09682041b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2550", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8241", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2550\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in D-Link DIR-618 and DIR-605L 2.02/3.02 and classified as problematic. Affected by this issue is some unknown functionality of the file /goform/formSetDDNS of the component DDNS Service. The manipulation leads to improper access controls. The attack needs to be initiated within the local network. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.\n\ud83d\udccf Published: 2025-03-20T16:31:08.092Z\n\ud83d\udccf Modified: 2025-03-20T16:31:08.092Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300164\n2. https://vuldb.com/?ctiid.300164\n3. https://vuldb.com/?submit.516792\n4. https://lavender-bicycle-a5a.notion.site/D-Link-DIR-618-formSetDDNS-1b053a41781f80659702da9a589e4f4a?pvs=4\n5. https://lavender-bicycle-a5a.notion.site/D-Link-DIR-605L-formSetDDNS-1b153a41781f80feb80bd24afc8f83d5?pvs=4\n6. https://www.dlink.com/", "creation_timestamp": "2025-03-20T17:18:49.000000Z"}, {"uuid": "5d7f5130-4ee1-413b-8372-053373c7b5f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2598", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8382", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2598\n\ud83d\udd25 CVSS Score: 5.7 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: When the AWS Cloud Development Kit (AWS CDK) Command Line Interface (AWS CDK CLI) is used with a credential plugin which returns an expiration property with the retrieved AWS credentials, the credentials are printed to the console output. To mitigate this issue, users should upgrade to version 2.178.2 or later and ensure any forked or derivative code is patched to incorporate the new fixes.\n\ud83d\udccf Published: 2025-03-21T14:14:29.040Z\n\ud83d\udccf Modified: 2025-03-21T16:27:39.401Z\n\ud83d\udd17 References:\n1. https://aws.amazon.com/security/security-bulletins/AWS-2025-005/\n2. https://github.com/aws/aws-cdk/security/advisories/GHSA-v63m-x9r9-8gqp", "creation_timestamp": "2025-03-21T17:19:21.000000Z"}, {"uuid": "486ab2dd-2d61-4ed4-99fa-1120888eddb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2553", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8258", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2553\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in D-Link DIR-618 and DIR-605L 2.02/3.02. It has been rated as problematic. This issue affects some unknown processing of the file /goform/formVirtualServ. The manipulation leads to improper access controls. The attack needs to be approached within the local network. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.\n\ud83d\udccf Published: 2025-03-20T17:31:14.449Z\n\ud83d\udccf Modified: 2025-03-20T17:44:27.251Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300167\n2. https://vuldb.com/?ctiid.300167\n3. https://vuldb.com/?submit.516795\n4. https://lavender-bicycle-a5a.notion.site/D-Link-DIR-618-formVirtualServ-1b053a41781f80b28443daabf03c0825?pvs=4\n5. https://lavender-bicycle-a5a.notion.site/D-Link-DIR-605L-formVirtualServ-1b153a41781f80b98645c3f7f4c5f4ae?pvs=4\n6. https://www.dlink.com/", "creation_timestamp": "2025-03-20T18:20:55.000000Z"}, {"uuid": "0c820047-eca5-4852-bd8a-9ba7299e05a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2574", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8288", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2574\n\ud83d\udd25 CVSS Score: 2.1 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L)\n\ud83d\udd39 Description: Out-of-bounds array write in Xpdf 4.05 and earlier, due to incorrect integer overflow checking in the PostScript function interpreter code.\n\ud83d\udccf Published: 2025-03-20T21:07:46.499Z\n\ud83d\udccf Modified: 2025-03-20T21:07:46.499Z\n\ud83d\udd17 References:\n1. https://www.xpdfreader.com/security-bug/CVE-2025-2574.html", "creation_timestamp": "2025-03-20T21:18:35.000000Z"}, {"uuid": "5ae3ec23-98ff-48d8-a0ae-62579d449ab9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2584", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8327", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2584\n\ud83d\udd25 CVSS Score: 2.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in WebAssembly wabt 1.0.36. It has been declared as critical. This vulnerability affects the function BinaryReaderInterp::GetReturnCallDropKeepCount of the file wabt/src/interp/binary-reader-interp.cc. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-21T07:31:03.732Z\n\ud83d\udccf Modified: 2025-03-21T07:31:03.732Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300544\n2. https://vuldb.com/?ctiid.300544\n3. https://vuldb.com/?submit.515406\n4. https://github.com/WebAssembly/wabt/issues/2557\n5. https://github.com/WebAssembly/wabt/issues/2557#issue-2900405517", "creation_timestamp": "2025-03-21T08:20:50.000000Z"}, {"uuid": "34e5dada-13e9-4308-b206-5ac5f39fa29a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2592", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8337", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2592\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. This issue affects the function CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The patch is named 2690e354da0c681db000cfd892a55226788f2743. It is recommended to apply a patch to fix this issue.\n\ud83d\udccf Published: 2025-03-21T14:00:18.480Z\n\ud83d\udccf Modified: 2025-03-21T14:00:18.480Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300575\n2. https://vuldb.com/?ctiid.300575\n3. https://vuldb.com/?submit.517782\n4. https://github.com/assimp/assimp/issues/6010\n5. https://github.com/assimp/assimp/pull/6052\n6. https://github.com/assimp/assimp/issues/6010#issue-2877368110\n7. https://github.com/assimp/assimp/commit/2690e354da0c681db000cfd892a55226788f2743", "creation_timestamp": "2025-03-21T14:19:08.000000Z"}, {"uuid": "03d056bf-4099-439a-af88-644f02deafd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2581", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8314", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2581\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability has been found in xmedcon 0.25.0 and classified as problematic. Affected by this vulnerability is the function malloc of the component DICOM File Handler. The manipulation leads to integer underflow. The attack can be launched remotely. Upgrading to version 0.25.1 is able to address this issue. It is recommended to upgrade the affected component.\n\ud83d\udccf Published: 2025-03-21T05:00:22.250Z\n\ud83d\udccf Modified: 2025-03-21T05:00:22.250Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300541\n2. https://vuldb.com/?ctiid.300541\n3. https://vuldb.com/?submit.522216\n4. https://xmedcon.sourceforge.io/Main/New", "creation_timestamp": "2025-03-21T05:18:39.000000Z"}, {"uuid": "efc0baff-8182-4de3-951e-c5da75d51261", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2589", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8333", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2589\n\ud83d\udd25 CVSS Score: 5.1 (cvssV4_0, Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in code-projects Human Resource Management System 1.0.1 and classified as critical. This issue affects the function Index of the file \\handler\\Account.go. The manipulation of the argument user_cookie leads to improper authorization. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-21T12:31:04.867Z\n\ud83d\udccf Modified: 2025-03-21T12:31:04.867Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300569\n2. https://vuldb.com/?ctiid.300569\n3. https://vuldb.com/?submit.517343\n4. https://github.com/38279/1/issues/1\n5. https://code-projects.org/", "creation_timestamp": "2025-03-21T13:19:08.000000Z"}, {"uuid": "d94d76fd-d30c-458c-87fd-dc6303b5d481", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2590", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8332", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2590\n\ud83d\udd25 CVSS Score: 4.8 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in code-projects Human Resource Management System 1.0.1. It has been classified as problematic. Affected is the function UpdateRecruitmentById of the file \\handler\\recruitment.go. The manipulation of the argument c leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-21T13:00:08.940Z\n\ud83d\udccf Modified: 2025-03-21T13:00:08.940Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300570\n2. https://vuldb.com/?ctiid.300570\n3. https://vuldb.com/?submit.517344\n4. https://github.com/38279/1/issues/2\n5. https://code-projects.org/", "creation_timestamp": "2025-03-21T13:19:06.000000Z"}, {"uuid": "2d283d32-9578-4d51-b71f-b642d1dcb365", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2582", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8325", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2582\n\ud83d\udd25 CVSS Score: 5.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in SimpleMachines SMF 2.1.4 and classified as problematic. Affected by this issue is some unknown functionality of the file ManageAttachments.php. The manipulation of the argument Notice leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure.\n\ud83d\udccf Published: 2025-03-21T06:31:04.195Z\n\ud83d\udccf Modified: 2025-03-21T06:31:04.195Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300542\n2. https://vuldb.com/?ctiid.300542\n3. https://vuldb.com/?submit.511999\n4. https://github.com/Fewword/Poc/blob/main/smf/smf-poc3.md\n5. https://github.com/Fewword/Poc/blob/main/smf/smf-poc4.md", "creation_timestamp": "2025-03-21T07:19:55.000000Z"}, {"uuid": "52f3f95d-a1a9-499c-96f4-774b86c48535", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2583", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8324", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2583\n\ud83d\udd25 CVSS Score: 5.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in SimpleMachines SMF 2.1.4. It has been classified as problematic. This affects an unknown part of the file ManageNews.php. The manipulation of the argument subject/message leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure.\n\ud83d\udccf Published: 2025-03-21T06:31:06.127Z\n\ud83d\udccf Modified: 2025-03-21T06:31:06.127Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300543\n2. https://vuldb.com/?ctiid.300543\n3. https://vuldb.com/?submit.512001\n4. https://github.com/Fewword/Poc/blob/main/smf/smf-poc5.md\n5. https://github.com/Fewword/Poc/blob/main/smf/smf-poc6.md", "creation_timestamp": "2025-03-21T07:19:51.000000Z"}, {"uuid": "6e2c25c4-55e5-40aa-bcaf-d71c129b3c71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2588", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8329", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2588\n\ud83d\udd25 CVSS Score: 4.8 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability has been found in Hercules Augeas 1.14.1 and classified as problematic. This vulnerability affects the function re_case_expand of the file src/fa.c. The manipulation of the argument re leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-21T12:00:10.758Z\n\ud83d\udccf Modified: 2025-03-21T12:00:10.758Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300568\n2. https://vuldb.com/?ctiid.300568\n3. https://vuldb.com/?submit.517281\n4. https://github.com/hercules-team/augeas/issues/852\n5. https://github.com/hercules-team/augeas/issues/852#issue-2905999609", "creation_timestamp": "2025-03-21T12:22:05.000000Z"}, {"uuid": "96c29e31-cbb9-4dcb-9ad0-a514fe2e2d10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2597", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8331", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2597\n\ud83d\udd25 CVSS Score: 5.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N)\n\ud83d\udd39 Description: Reflected Cross-Site Scripting (XSS) in ITIUM 6050 version 5.5.5.2-b3526 from Impact Technologies. This vulnerability could allow an attacker to execute malicious Javascript code via GET and POST requests to the \u2018/index.php\u2019 endpoint and injecting code into the \u2018id_session.\n\ud83d\udccf Published: 2025-03-21T11:50:02.392Z\n\ud83d\udccf Modified: 2025-03-21T11:50:02.392Z\n\ud83d\udd17 References:\n1. https://www.incibe.es/en/incibe-cert/notices/aviso/reflected-cross-site-scripting-xss-vulnerability-itium-6050", "creation_timestamp": "2025-03-21T12:22:07.000000Z"}, {"uuid": "257359d2-aa1d-46ae-882d-2e68ad570de3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25589", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8343", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25589\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An XML external entity (XXE) injection vulnerability in the component /weixin/aes/XMLParse.java of yimioa before v2024.07.04 allows attackers to execute arbitrary code via supplying a crafted XML file.\n\ud83d\udccf Published: 2025-03-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-21T13:35:19.864Z\n\ud83d\udd17 References:\n1. https://gitee.com/r1bbit/yimioa/issues/IBI81R", "creation_timestamp": "2025-03-21T14:19:16.000000Z"}, {"uuid": "2a06a5a6-53a9-42f6-9b47-00187465ac68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25685", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8342", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25685\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in GL-INet Beryl AX GL-MT3000 v4.7.0. Attackers are able to download arbitrary files from the device's file system via adding symbolic links on an external drive used as a samba share.\n\ud83d\udccf Published: 2025-03-17T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-21T13:41:40.604Z\n\ud83d\udd17 References:\n1. https://medium.com/@tfortinsec/multiple-path-traversal-vulnerabilities-in-the-beryl-ax-gl-mt300-router-e7f856d14af9", "creation_timestamp": "2025-03-21T14:19:15.000000Z"}, {"uuid": "a12865ba-f040-4f1a-b974-8eeac130b378", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2591", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8345", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2591\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as problematic was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function MDLImporter::InternReadFile_Quake1 of the file code/AssetLib/MDL/MDLLoader.cpp. The manipulation of the argument skinwidth/skinheight leads to divide by zero. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The patch is identified as ab66a1674fcfac87aaba4c8b900b315ebc3e7dbd. It is recommended to apply a patch to fix this issue.\n\ud83d\udccf Published: 2025-03-21T13:31:08.439Z\n\ud83d\udccf Modified: 2025-03-21T13:31:08.439Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300574\n2. https://vuldb.com/?ctiid.300574\n3. https://vuldb.com/?submit.517781\n4. https://github.com/assimp/assimp/issues/6009\n5. https://github.com/assimp/assimp/pull/6047\n6. https://github.com/assimp/assimp/issues/6009#issue-2877367021\n7. https://github.com/assimp/assimp/pull/6047/commits/ab66a1674fcfac87aaba4c8b900b315ebc3e7dbd", "creation_timestamp": "2025-03-21T14:19:21.000000Z"}, {"uuid": "1fdb43cb-aa63-4038-bbaf-1e2be6b8f50f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2538", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8348", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2538\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A specific type of ArcGIS Enterprise deployment, is vulnerable to a Password Recovery Exploitation vulnerability in Portal, that could allow an attacker to reset the password on the built in admin account.\n\ud83d\udccf Published: 2025-03-20T20:50:02.928Z\n\ud83d\udccf Modified: 2025-03-21T15:14:57.145Z\n\ud83d\udd17 References:\n1. https://www.esri.com/arcgis-blog/products/trust-arcgis/administration/portal-for-arcgis-security-2025-update-1-patch/", "creation_timestamp": "2025-03-21T15:19:26.000000Z"}, {"uuid": "aba3fa43-8986-4148-ac17-a4ccc6bc65f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25374", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8754", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25374\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In NASA cFS (Core Flight System) Aquila, it is possible to put the onboard software in a state that will prevent the launch of any external application, causing a platform denial of service.\n\ud83d\udccf Published: 2025-03-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-25T20:13:07.514Z\n\ud83d\udd17 References:\n1. https://visionspace.com/nasa-cfs-version-aquila-software-vulnerability-assessment/", "creation_timestamp": "2025-03-25T20:24:19.000000Z"}, {"uuid": "dfbc92a4-8379-49c7-a4b3-f29d963ddc16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25500", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8386", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25500\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in CosmWasm prior to v2.2.0 allows attackers to bypass capability restrictions in blockchains by exploiting a lack of runtime capability validation. This allows attackers to deploy a contract without capability enforcement, and execute unauthorized actions on the blockchain.\n\ud83d\udccf Published: 2025-03-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-21T16:21:14.200Z\n\ud83d\udd17 References:\n1. https://gist.github.com/H3T76/8096a6ff9410f3a6d9a25db1a68ae657#file-cve-2025-25500", "creation_timestamp": "2025-03-21T17:19:28.000000Z"}, {"uuid": "63cd7997-bcc4-484d-8ad2-c373195902f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25680", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8445", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25680\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: LSC Smart Connect LSC Indoor PTZ Camera 7.6.32 is contains a RCE vulnerability in the tuya_ipc_direct_connect function of the anyka_ipc process. The vulnerability allows arbitrary code execution through the Wi-Fi configuration process when a specially crafted QR code is presented to the camera.\n\ud83d\udccf Published: 2025-03-11T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-21T20:44:34.654Z\n\ud83d\udd17 References:\n1. https://github.com/Yasha-ops/LSC_Indoor_PTZ_Camera-RCE\n2. https://github.com/Yasha-ops/vulnerability-research/tree/master/CVE-2025-25680", "creation_timestamp": "2025-03-21T21:22:05.000000Z"}, {"uuid": "e720d988-b40c-4704-8800-3ad0a4bf6f4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25035", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8411", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25035\n\ud83d\udd25 CVSS Score: 7.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation Cross-site Scripting vulnerability in Jalios JPlatform 10 allows for Reflected XSS and Stored XSS.This issue affects JPlatform 10: before 10.0.8 (SP8), before 10.0.7 (SP7), before 10.0.6 (SP6) and Jalios Workplace 6.2, Jalios Workplace 6.1, Jalios Workplace 6.0, and Jalios Workplace 5.3 to 5.5\n\ud83d\udccf Published: 2025-03-21T19:02:39.718Z\n\ud83d\udccf Modified: 2025-03-21T19:02:39.718Z\n\ud83d\udd17 References:\n1. https://community.jalios.com/jcms/jc1_893720/en/security-alert-2025-02-19\n2. https://issues.jalios.com/browse/JCMS-11259\n3. https://issues.jalios.com/browse/JCMS-11246\n4. https://issues.jalios.com/browse/JCMS-11248\n5. https://vulncheck.com/advisories/jalios-jplatform-xss", "creation_timestamp": "2025-03-21T19:19:41.000000Z"}, {"uuid": "b43df0da-d081-4a0e-ae60-d8b1ef480138", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25036", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8428", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25036\n\ud83d\udd25 CVSS Score: 6.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N)\n\ud83d\udd39 Description: Improper Restriction of XML External Entity Reference vulnerability in Jalios JPlatform allows XML Injection.This issue affects all versions of JPlatform 10 before 10.0.8 (SP8).\n\ud83d\udccf Published: 2025-03-21T19:27:12.472Z\n\ud83d\udccf Modified: 2025-03-21T19:50:06.001Z\n\ud83d\udd17 References:\n1. https://community.jalios.com/jcms/jc1_893720/en/security-alert-2025-02-19\n2. https://issues.jalios.com/browse/JCMS-11250\n3. https://vulncheck.com/advisories/jalios-jplatform-xxe", "creation_timestamp": "2025-03-21T20:24:51.000000Z"}, {"uuid": "cd74657a-4281-4a6c-ac5f-e0045b858ecd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25372", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8758", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25372\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: NASA cFS (Core Flight System) Aquila is vulnerable to segmentation fault via sending a malicious telecommand to the Memory Management Module.\n\ud83d\udccf Published: 2025-03-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-25T20:11:52.909Z\n\ud83d\udd17 References:\n1. https://visionspace.com/nasa-cfs-version-aquila-software-vulnerability-assessment/", "creation_timestamp": "2025-03-25T20:24:22.000000Z"}, {"uuid": "566738a8-5a53-4dd9-b97b-bd32e7e50bf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25373", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8756", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25373\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Memory Management Module of NASA cFS (Core Flight System) Aquila has insecure permissions, which can be exploited to gain an RCE on the platform.\n\ud83d\udccf Published: 2025-03-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-25T20:12:31.653Z\n\ud83d\udd17 References:\n1. https://visionspace.com/nasa-cfs-version-aquila-software-vulnerability-assessment/", "creation_timestamp": "2025-03-25T20:24:21.000000Z"}, {"uuid": "70cac831-b580-45c1-8c39-5428e3ba5609", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2530", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8660", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2530\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_0, Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Luxion KeyShot DAE File Parsing Access of Uninitialized Pointer Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of dae files. The issue results from the lack of proper initialization of a pointer prior to accessing it. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-23698.\n\ud83d\udccf Published: 2025-03-25T14:16:48.906Z\n\ud83d\udccf Modified: 2025-03-25T14:16:48.906Z\n\ud83d\udd17 References:\n1. https://www.zerodayinitiative.com/advisories/ZDI-25-173/", "creation_timestamp": "2025-03-25T14:24:12.000000Z"}, {"uuid": "c1615fdb-26a9-4a38-922f-ab4a6902cb61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2531", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8659", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2531\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_0, Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Luxion KeyShot DAE File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of dae files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-23704.\n\ud83d\udccf Published: 2025-03-25T14:17:00.616Z\n\ud83d\udccf Modified: 2025-03-25T14:17:00.616Z\n\ud83d\udd17 References:\n1. https://www.zerodayinitiative.com/advisories/ZDI-25-174/", "creation_timestamp": "2025-03-25T14:24:11.000000Z"}, {"uuid": "559ba094-e597-4f92-9357-ed60371a3fb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2573", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8796", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2573\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Amazing service box Addons For WPBakery Page Builder (formerly Visual Composer) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.\n\ud83d\udccf Published: 2025-03-26T02:23:48.765Z\n\ud83d\udccf Modified: 2025-03-26T02:23:48.765Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/a4f6ce4d-6ca5-4a62-ae84-9dd190fc0392?source=cve\n2. https://plugins.trac.wordpress.org/browser/amazing-service-box-visual-composer-addons/trunk/asb_addon.php#L114\n3. https://plugins.trac.wordpress.org/browser/amazing-service-box-visual-composer-addons/trunk/asb_addon.php#L45\n4. https://wordpress.org/plugins/amazing-service-box-visual-composer-addons/#developers", "creation_timestamp": "2025-03-26T03:25:10.000000Z"}, {"uuid": "4c9ab4fb-1742-4928-af0c-7344a9267e88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2559", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8636", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2559\n\ud83d\udd25 CVSS Score: 4.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A flaw was found in Keycloak. When the configuration uses JWT tokens for authentication, the tokens are cached until expiration. If a client uses JWT tokens with an excessively long expiration time, for example, 24 or 48 hours, the cache can grow indefinitely, leading to an OutOfMemoryError. This issue could result in a denial of service condition, preventing legitimate users from accessing the system.\n\ud83d\udccf Published: 2025-03-25T08:20:57.666Z\n\ud83d\udccf Modified: 2025-03-25T08:20:57.666Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2025-2559\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2353868", "creation_timestamp": "2025-03-25T09:24:25.000000Z"}, {"uuid": "6de0f41e-c5b5-46ee-bd9d-31d8f2c62ab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2510", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8635", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2510\n\ud83d\udd25 CVSS Score: 5.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Frndzk Expandable Bottom Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'text' parameter in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.\n\ud83d\udccf Published: 2025-03-25T08:22:12.860Z\n\ud83d\udccf Modified: 2025-03-25T08:22:12.860Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/4261c81e-13a2-4022-8048-aeb0ea4e9ee4?source=cve\n2. https://wordpress.org/plugins/frndzk-expandable-bottom-bar/#developers", "creation_timestamp": "2025-03-25T09:24:24.000000Z"}, {"uuid": "af4311c8-14f5-465e-a7b4-e1ea7dc90b8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2542", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8642", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2542\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Your Simple SVG Support plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.\n\ud83d\udccf Published: 2025-03-25T09:22:02.466Z\n\ud83d\udccf Modified: 2025-03-25T09:22:02.466Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/1aa9d836-4e13-4c6a-b1e6-a8f984805842?source=cve\n2. https://plugins.trac.wordpress.org/browser/your-simple-svg-support/tags/1.0.0/your-simple-svg-support.php#L16\n3. https://plugins.trac.wordpress.org/browser/your-simple-svg-support/tags/1.0.0/your-simple-svg-support.php#L20\n4. https://wordpress.org/plugins/your-simple-svg-support/#developers\n5. https://plugins.trac.wordpress.org/changeset/3259951/", "creation_timestamp": "2025-03-25T10:24:35.000000Z"}, {"uuid": "b39086d3-0b3e-4ad5-8afa-bd8b71d2176e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2532", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8658", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2532\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_0, Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Luxion KeyShot USDC File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of usdc files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-23709.\n\ud83d\udccf Published: 2025-03-25T14:17:11.135Z\n\ud83d\udccf Modified: 2025-03-25T14:17:11.135Z\n\ud83d\udd17 References:\n1. https://www.zerodayinitiative.com/advisories/ZDI-25-175/", "creation_timestamp": "2025-03-25T14:24:10.000000Z"}, {"uuid": "a779719f-a876-4c24-9c2d-859a429287dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2576", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8797", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2576\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Ayyash Studio \u2014 The kick-start kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.\n\ud83d\udccf Published: 2025-03-26T02:23:48.216Z\n\ud83d\udccf Modified: 2025-03-26T02:23:48.216Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/634fa1ed-ad6b-4875-b6f9-f20add39dc80?source=cve\n2. https://plugins.trac.wordpress.org/browser/ayyash-studio/tags/1.0.3/includes/Importer/Wxr/StudioImporter.php#L351\n3. https://plugins.trac.wordpress.org/browser/ayyash-studio/tags/1.0.3/includes/Importer/Wxr/StudioImporter.php#L37\n4. https://wordpress.org/plugins/ayyash-studio/#developers", "creation_timestamp": "2025-03-26T03:25:11.000000Z"}, {"uuid": "13026402-def8-4d26-b8b4-4a8e86cd1885", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25048", "type": "seen", "source": "Telegram/6CGzjFKL8BBZ93B4_c4n6USDwm6My37dTeXU4KfyfW6TL8I", "content": "", "creation_timestamp": "2026-01-09T03:04:28.000000Z"}, {"uuid": "fc9c0980-1201-45e2-9a44-f35100eddec5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25371", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8759", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25371\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: NASA cFS (Core Flight System) Aquila is vulnerable to path traversal in the OSAL module, allowing the override of any arbitrary file on the system.\n\ud83d\udccf Published: 2025-03-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-25T20:10:44.149Z\n\ud83d\udd17 References:\n1. https://visionspace.com/nasa-cfs-version-aquila-software-vulnerability-assessment/", "creation_timestamp": "2025-03-25T20:24:26.000000Z"}, {"uuid": "29df056d-e2e3-4c90-aa2d-82427c0aab4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2562", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8916", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2562\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Insufficient logging in the autotyping feature in Devolutions Remote Desktop Manager on Windows allows an authenticated user to use a stored password without generating a corresponding log event, via the use of the autotyping functionality.\n\n\n\n\n\n\n\nThis issue affects Remote Desktop Manager versions from 2025.1.24 through 2025.1.25, and all versions up to 2024.3.29.\n\ud83d\udccf Published: 2025-03-26T17:24:37.280Z\n\ud83d\udccf Modified: 2025-03-26T18:18:25.425Z\n\ud83d\udd17 References:\n1. https://devolutions.net/security/advisories/DEVO-2025-0005/", "creation_timestamp": "2025-03-26T18:25:22.000000Z"}, {"uuid": "12044f06-a4a0-4365-a21f-e804a79fe2e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2528", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8952", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2528\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Improper authorization in application password policy in Devolutions Remote Desktop Manager on Windows allows an authenticated user to \nuse a configuration different from the one mandated by the system administrators.\n\n\n\n\n\nThis issue affects Remote Desktop Manager versions from 2025.1.24 through 2025.1.25, and all versions up to 2024.3.29.\n\ud83d\udccf Published: 2025-03-26T17:20:00.521Z\n\ud83d\udccf Modified: 2025-03-26T18:55:36.027Z\n\ud83d\udd17 References:\n1. https://devolutions.net/security/advisories/DEVO-2025-0005/", "creation_timestamp": "2025-03-26T19:26:31.000000Z"}, {"uuid": "86df8bd3-fddf-421a-ab94-952fc3524169", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2578", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9292", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2578\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: The Booking for Appointments and Events Calendar \u2013 Amelia plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.2.19 via the 'wpAmeliaApiCall' function. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website.\n\ud83d\udccf Published: 2025-03-28T07:33:04.467Z\n\ud83d\udccf Modified: 2025-03-28T07:33:04.467Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/6806e07b-96bf-43ad-a3ac-2105e7449e3c?source=cve\n2. https://plugins.trac.wordpress.org/browser/ameliabooking/trunk/ameliabooking.php#L172\n3. https://plugins.trac.wordpress.org/browser/ameliabooking/trunk/src/Application/Commands/Entities/GetEntitiesCommandHandler.php#L127\n4. https://plugins.trac.wordpress.org/changeset/3261318/", "creation_timestamp": "2025-03-28T08:27:38.000000Z"}, {"uuid": "372491c1-14c0-4c7f-8e4b-8346fa191d60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2516", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9120", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2516\n\ud83d\udd25 CVSS Score: 9.5 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/U:Amber)\n\ud83d\udd39 Description: The use of a weak cryptographic key pair in the signature verification process in WPS Office (Kingsoft) on Windows allows an attacker who successfully recovered the private key to sign components.\n\nAs older versions of WPS Office did not validate the update server's certificate, an Adversary-In-The-Middle attack was possible allowing updates to be hijacked.\n\ud83d\udccf Published: 2025-03-27T14:29:22.907Z\n\ud83d\udccf Modified: 2025-03-27T15:15:56.127Z\n\ud83d\udd17 References:\n1. https://www.welivesecurity.com/en/eset-research/nspx30-sophisticated-aitm-enabled-implant-evolving-since-2005/", "creation_timestamp": "2025-03-27T15:26:54.000000Z"}, {"uuid": "8f182b15-5d24-4ce4-91a9-996a98a0ddef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25579", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9489", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25579\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Command Injection in /bin/boa via bandstr.\n\ud83d\udccf Published: 2025-03-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-28T21:35:32.239Z\n\ud83d\udd17 References:\n1. https://github.com/regainer27/totolink_A3002R_remote_command_exec\n2. https://gist.github.com/regainer27/0abf6f56eae3fa2826d2551e22c2ace3", "creation_timestamp": "2025-03-28T22:28:28.000000Z"}, {"uuid": "70d75d89-9d92-41b3-8103-4374b31ec1e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25100", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9409", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25100\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) vulnerability in victoracano Cazamba allows Reflected XSS.This issue affects Cazamba: from n/a through 1.2.\n\ud83d\udccf Published: 2025-03-27T14:02:48.228Z\n\ud83d\udccf Modified: 2025-03-28T17:00:44.985Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/cazamba/vulnerability/wordpress-cazamba-plugin-1-2-csrf-to-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-03-28T17:28:51.000000Z"}, {"uuid": "297cca49-66d8-459e-8166-f0be4721edff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25211", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9590", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25211\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Weak password requirements issue exists in CHOCO TEI WATCHER mini (IB-MCT001) all versions. If this issue is exploited, a brute-force attack may allow an attacker unauthorized access and login.\n\ud83d\udccf Published: 2025-03-31T04:49:19.439Z\n\ud83d\udccf Modified: 2025-03-31T04:49:19.439Z\n\ud83d\udd17 References:\n1. https://www.inaba.co.jp/files/chocomini_vulnerability.pdf\n2. https://jvn.jp/en/vu/JVNVU91154745/\n3. https://www.cisa.gov/news-events/ics-advisories/icsa-25-084-04\n4. https://www.nozominetworks.com/blog/unpatched-vulnerabilities-in-production-line-cameras-may-allow-remote-surveillance-hinder-stoppage-recording", "creation_timestamp": "2025-03-31T05:31:19.000000Z"}, {"uuid": "404980da-c5d4-4491-a882-6b311547b97f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2586", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9641", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2586\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A flaw was found in the OpenShift Lightspeed Service, which is vulnerable to unauthenticated API request flooding. Repeated queries to non-existent endpoints inflate metrics storage and processing, consuming excessive resources. This issue can lead to monitoring system degradation, increased disk usage, and potential service unavailability. Since the issue does not require authentication, an external attacker can exhaust CPU, RAM, and disk space, impacting both application and cluster stability.\n\ud83d\udccf Published: 2025-03-31T11:33:24.980Z\n\ud83d\udccf Modified: 2025-03-31T11:58:41.259Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2025-2586\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2353998", "creation_timestamp": "2025-03-31T12:31:52.000000Z"}, {"uuid": "85d1dcce-5e34-43a9-b590-7ce2e2801b05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25041", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9960", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25041\n\ud83d\udd25 CVSS Score: 5.5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)\n\ud83d\udd39 Description: A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow malicious users to overwrite arbitrary files as NT AUTHORITY\\SYSTEM (root). A successful exploit could allow the creation of a Denial-of-Service (DoS) condition affecting the Microsoft Windows Operating System. This vulnerability does not affect Linux and Android based clients.\n\ud83d\udccf Published: 2025-04-01T16:45:53.717Z\n\ud83d\udccf Modified: 2025-04-01T16:45:53.717Z\n\ud83d\udd17 References:\n1. https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04841en_us&docLocale=en_US", "creation_timestamp": "2025-04-01T17:32:42.000000Z"}, {"uuid": "0b653ef8-7b5b-411c-99c2-c53b255ca380", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25060", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10028", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25060\n\ud83d\udd25 CVSS Score: 8.2 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N)\n\ud83d\udd39 Description: Missing authentication for critical function vulnerability exists in AssetView and AssetView CLOUD. If exploited, the files on the server where the product is running may be obtained and/or deleted by a remote unauthenticated attacker.\n\ud83d\udccf Published: 2025-04-02T03:20:54.826Z\n\ud83d\udccf Modified: 2025-04-02T03:20:54.826Z\n\ud83d\udd17 References:\n1. https://www.hammock.jp/assetview/info/250325.html\n2. https://jvn.jp/en/jp/JVN26321838/", "creation_timestamp": "2025-04-02T03:35:36.000000Z"}, {"uuid": "262f758c-b690-423a-a58f-411d8835e080", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2513", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10043", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2513\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Smart Icons For WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Editor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.\n\ud83d\udccf Published: 2025-04-02T09:21:43.968Z\n\ud83d\udccf Modified: 2025-04-02T09:21:43.968Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/7f5d8eac-fca9-4222-9a5f-a12748d298ec?source=cve\n2. https://plugins.trac.wordpress.org/browser/smartifw/tags/1.0.4/includes/media.php#L3\n3. https://plugins.trac.wordpress.org/browser/smartifw/tags/1.0.4/smart_icons_for_wordpress.php#L86\n4. https://wordpress.org/plugins/smartifw/#developers", "creation_timestamp": "2025-04-02T09:34:28.000000Z"}, {"uuid": "07e052b7-aed3-4c29-854f-c2c7af0cd1cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25000", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10374", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25000\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)\n\ud83d\udd39 Description: Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.\n\ud83d\udccf Published: 2025-04-03T23:59:59.775Z\n\ud83d\udccf Modified: 2025-04-03T23:59:59.775Z\n\ud83d\udd17 References:\n1. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-25000", "creation_timestamp": "2025-04-04T00:35:16.000000Z"}, {"uuid": "2ef2c2c5-b097-45c8-92a4-b8ceba21e817", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25001", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10373", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25001\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C)\n\ud83d\udd39 Description: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.\n\ud83d\udccf Published: 2025-04-04T00:00:13.527Z\n\ud83d\udccf Modified: 2025-04-04T00:00:13.527Z\n\ud83d\udd17 References:\n1. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-25001", "creation_timestamp": "2025-04-04T00:35:15.000000Z"}, {"uuid": "ded8f047-892d-4306-baab-9469d2e19a6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25061", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10379", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25061\n\ud83d\udd25 CVSS Score: 5.8 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N)\n\ud83d\udd39 Description: Unintended proxy or intermediary ('Confused Deputy') issue exists in HMI ViewJet C-more series and HMI GC-A2 series, which may allow a remote unauthenticated attacker to use the product as an intermediary for FTP bounce attack.\n\ud83d\udccf Published: 2025-04-04T02:10:08.271Z\n\ud83d\udccf Modified: 2025-04-04T02:10:08.271Z\n\ud83d\udd17 References:\n1. https://www.electronics.jtekt.co.jp/en/topics/202503207271/\n2. https://www.electronics.jtekt.co.jp/en/topics/202503207269/\n3. https://jvn.jp/en/jp/JVN17260367/", "creation_timestamp": "2025-04-04T02:35:17.000000Z"}, {"uuid": "941200b8-fa08-4030-9cbf-28495d86deb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2544", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10592", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2544\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The AI Content Pipelines plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.\n\ud83d\udccf Published: 2025-04-05T01:44:45.428Z\n\ud83d\udccf Modified: 2025-04-05T01:44:45.428Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/b93214ec-5738-4f10-b48c-1d74aad52acb?source=cve\n2. https://plugins.trac.wordpress.org/browser/ai-content-pipelines/tags/1.6/includes/generate-scheduled-content.php#L42\n3. https://plugins.trac.wordpress.org/browser/ai-content-pipelines/tags/1.6/includes/generate-scheduled-content.php#L44\n4. https://plugins.trac.wordpress.org/browser/ai-content-pipelines/tags/1.6/includes/generate-scheduled-content.php#L47\n5. https://wordpress.org/plugins/ai-content-pipelines/#developers", "creation_timestamp": "2025-04-05T02:36:35.000000Z"}, {"uuid": "0c70d261-99f0-44f7-ae03-610a8bcd7cca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25053", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11034", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25053\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: OS command injection vulnerability in the WEB UI (the setting page) exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If exploited, an arbitrary OS command may be executed by a remote attacker who can log in to the product.\n\ud83d\udccf Published: 2025-04-09T09:03:09.322Z\n\ud83d\udccf Modified: 2025-04-09T09:03:09.322Z\n\ud83d\udd17 References:\n1. https://www.inaba.co.jp/abaniact/news/security_20250404.pdf\n2. https://jvn.jp/en/vu/JVNVU93925742/", "creation_timestamp": "2025-04-09T09:47:38.000000Z"}, {"uuid": "b8394db4-1403-4ae2-aa85-664240c9c197", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25056", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11033", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25056\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Cross-site request forgery vulnerability exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If a user views a malicious page while logged in, unintended operations may be performed.\n\ud83d\udccf Published: 2025-04-09T09:03:14.758Z\n\ud83d\udccf Modified: 2025-04-09T09:03:14.758Z\n\ud83d\udd17 References:\n1. https://www.inaba.co.jp/abaniact/news/security_20250404.pdf\n2. https://jvn.jp/en/vu/JVNVU93925742/", "creation_timestamp": "2025-04-09T09:47:37.000000Z"}, {"uuid": "ea30cb45-af7f-41dc-9d0b-fdcb274df1b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2525", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10822", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2525\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Streamit theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'st_Authentication_Controller::edit_profile' function in all versions up to, and including, 4.0.1. This makes it possible for authenticated attackers, with subscriber-level and above permissions, to upload arbitrary files on the affected site's server which may make remote code execution possible.\n\ud83d\udccf Published: 2025-04-08T01:44:21.589Z\n\ud83d\udccf Modified: 2025-04-08T01:44:21.589Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/83a58119-d0ed-47fe-93d1-1aa1def2cf44?source=cve\n2. https://themeforest.net/item/streamit-video-streaming-wordpress-theme/29772881\n3. https://documentation.iqonic.design/streamit/change-log/streamit-v4-0/", "creation_timestamp": "2025-04-08T02:45:44.000000Z"}, {"uuid": "2eee72cf-dca3-40c4-ad2e-97266e1b2c41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25013", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11017", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25013\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: Improper restriction of environment variables in Elastic Defend can lead to exposure of sensitive information such as API keys and tokens via automatic transmission of unfiltered environment variables to the stack.\n\ud83d\udccf Published: 2025-04-08T22:16:00.886Z\n\ud83d\udccf Modified: 2025-04-08T22:16:00.886Z\n\ud83d\udd17 References:\n1. https://discuss.elastic.co/t/elastic-defend-8-17-3-security-update-esa-2025-05/376921", "creation_timestamp": "2025-04-08T22:46:45.000000Z"}, {"uuid": "388883d7-f229-4d5d-9083-950c01333a9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25227", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10942", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25227\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Insufficient state checks lead to a vector that allows to bypass 2FA checks.\n\ud83d\udccf Published: 2025-04-08T16:24:18.330Z\n\ud83d\udccf Modified: 2025-04-08T16:24:18.330Z\n\ud83d\udd17 References:\n1. https://developer.joomla.org/security-centre/964-20250402-core-mfa-authentication-bypass.html", "creation_timestamp": "2025-04-08T16:46:31.000000Z"}, {"uuid": "1c48802f-a4ff-4e43-84cf-fb93ad58a3db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25226", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10941", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25226\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Improper handling of identifiers lead to a SQL injection vulnerability in the quoteNameStr method of the database package. Please note: the affected method is a protected method. It has no usages in the original packages in neither the 2.x nor 3.x branch and therefore the vulnerability in question can not be exploited when using the original database class. However, classes extending the affected class might be affected, if the vulnerable method is used.\n\ud83d\udccf Published: 2025-04-08T16:24:34.710Z\n\ud83d\udccf Modified: 2025-04-08T16:24:34.710Z\n\ud83d\udd17 References:\n1. https://developer.joomla.org/security-centre/963-20250401-framework-sql-injection-vulnerability-in-quotenamestr-method-of-database-package.html", "creation_timestamp": "2025-04-08T16:46:30.000000Z"}, {"uuid": "90cad3dc-0ab0-45e9-951e-310f94d485e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2519", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10821", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2519\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The Sreamit theme for WordPress is vulnerable to arbitrary file downloads in all versions up to, and including, 4.0.1. This is due to insufficient file validation in the 'st_send_download_file' function. This makes it possible for authenticated attackers, with subscriber-level access and above, to download arbitrary files.\n\ud83d\udccf Published: 2025-04-08T01:44:21.955Z\n\ud83d\udccf Modified: 2025-04-08T01:44:21.955Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/fd28c405-ed2f-435a-806c-1fc43cac0f80?source=cve\n2. https://themeforest.net/item/streamit-video-streaming-wordpress-theme/29772881\n3. https://documentation.iqonic.design/streamit/change-log/streamit-v4-0/", "creation_timestamp": "2025-04-08T02:45:43.000000Z"}, {"uuid": "f9067aa3-1577-43b8-aa29-0036f5503f7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2568", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10896", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2568\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The Vayu Blocks \u2013 Gutenberg Blocks for WordPress & WooCommerce plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on the 'vayu_blocks_get_toggle_switch_values_callback' and 'vayu_blocks_save_toggle_switch_callback' function in versions 1.0.4 to 1.2.1. This makes it possible for unauthenticated attackers to read plugin options and update any option with a key name ending in '_value'.\n\ud83d\udccf Published: 2025-04-08T11:11:30.860Z\n\ud83d\udccf Modified: 2025-04-08T11:11:30.860Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/27ca93a1-3dfc-4bbd-834a-1c04d9e22ebf?source=cve\n2. https://plugins.trac.wordpress.org/browser/vayu-blocks/trunk/inc/function.php#L126\n3. https://plugins.trac.wordpress.org/browser/vayu-blocks/trunk/inc/function.php#L133\n4. https://plugins.trac.wordpress.org/browser/vayu-blocks/trunk/inc/function.php#L139\n5. https://plugins.trac.wordpress.org/browser/vayu-blocks/trunk/inc/function.php#L182\n6. https://plugins.trac.wordpress.org/changeset/3263702/", "creation_timestamp": "2025-04-08T11:46:22.000000Z"}, {"uuid": "17f99728-4f9d-4410-b06f-4593cffc7992", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25362", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11003", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25362\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A Server-Side Template Injection (SSTI) vulnerability in Spacy-LLM v0.7.2 allows attackers to execute arbitrary code via injecting a crafted payload into the template field.\n\ud83d\udccf Published: 2025-03-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-08T20:35:57.417Z\n\ud83d\udd17 References:\n1. https://github.com/explosion/spacy-llm/issues/492\n2. https://www.hacktivesecurity.com/blog/2025/04/01/cve-2025-25362-old-vulnerabilities-new-victims-breaking-llm-prompts-with-ssti/", "creation_timestamp": "2025-04-08T20:46:47.000000Z"}, {"uuid": "97b7dcb2-e67c-4253-af5a-ad526efc3099", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25213", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11032", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25213\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)\n\ud83d\udd39 Description: Improper restriction of rendered UI layers or frames issue exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If a user views and clicks on the content on the malicious page while logged in, unintended operations may be performed.\n\ud83d\udccf Published: 2025-04-09T09:03:20.081Z\n\ud83d\udccf Modified: 2025-04-09T09:03:20.081Z\n\ud83d\udd17 References:\n1. https://www.inaba.co.jp/abaniact/news/security_20250404.pdf\n2. https://jvn.jp/en/vu/JVNVU93925742/", "creation_timestamp": "2025-04-09T09:47:33.000000Z"}, {"uuid": "6e6b275b-ae64-46e1-8b0c-ac871b49f8ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25023", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11082", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25023\n\ud83d\udd25 CVSS Score: 4.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: IBM Security Guardium 11.4 and 12.1 could allow a privileged user to read any file on the system due to incorrect privilege assignment.\n\ud83d\udccf Published: 2025-04-09T14:07:13.339Z\n\ud83d\udccf Modified: 2025-04-09T14:27:18.440Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7230467", "creation_timestamp": "2025-04-09T14:48:36.000000Z"}, {"uuid": "3783fb9f-4f4a-4423-a501-4b28832f8118", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2575", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11414", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2575\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Z Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Note: This requires Royal Shop theme to be installed.\n\ud83d\udccf Published: 2025-04-11T11:11:57.129Z\n\ud83d\udccf Modified: 2025-04-11T11:11:57.129Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e0f7bba4-76c3-4904-bd96-2074147b33f5?source=cve\n2. https://plugins.trac.wordpress.org/browser/z-companion/trunk/import/importer/wxr-importer.php#L149\n3. https://plugins.trac.wordpress.org/browser/z-companion/trunk/import/importer/wxr-importer.php#L63\n4. https://plugins.trac.wordpress.org/browser/z-companion/trunk/import/inc/importer.php#L148\n5. https://plugins.trac.wordpress.org/browser/z-companion/trunk/import/inc/importer.php#L62\n6. https://wordpress.org/plugins/z-companion/#developers\n7. https://plugins.trac.wordpress.org/changeset/3270130/", "creation_timestamp": "2025-04-11T11:50:43.000000Z"}, {"uuid": "a63defa5-9daf-4028-90f0-84750e3542e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2541", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11415", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2541\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The WP Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.6.22 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.\n\ud83d\udccf Published: 2025-04-11T11:11:56.437Z\n\ud83d\udccf Modified: 2025-04-11T11:11:56.437Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/dcc68b62-7dd1-47d4-bbc5-d0237b7c85e7?source=cve\n2. https://plugins.trac.wordpress.org/browser/wedevs-project-manager/tags/2.6.20/core/WP/Frontend.php#L209\n3. https://wordpress.org/plugins/wedevs-project-manager/#developers\n4. https://plugins.trac.wordpress.org/changeset/3268509/", "creation_timestamp": "2025-04-11T11:50:44.000000Z"}, {"uuid": "e512375a-ef62-46f5-aa7a-8205bc790249", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25458", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11941", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25458\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via serverName2.\n\ud83d\udccf Published: 2025-04-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-15T22:25:31.914Z\n\ud83d\udd17 References:\n1. https://github.com/xyqer1/Tenda-AC10-AdvSetMacMtuWan-serverName2-StackOverflow\n2. https://gist.github.com/xyqer1/d195ea1eb37ba1cc5f709b1d4fc1a2c6", "creation_timestamp": "2025-04-15T22:55:40.000000Z"}, {"uuid": "5fbafba8-2e7b-4913-a164-60854c31ac41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25984", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12545", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25984\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in Macro-video Technologies Co.,Ltd V380E6_C1 IP camera (Hw_HsAKPIQp_WF_XHR) 1020302 allows a physically proximate attacker to execute arbitrary code via UART component.\n\ud83d\udccf Published: 2025-04-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-18T20:31:36.279Z\n\ud83d\udd17 References:\n1. https://github.com/vladko312/Research_v380_IP_camera\n2. https://github.com/vladko312/Research_v380_IP_camera/blob/main/CVE-2025-25984.md", "creation_timestamp": "2025-04-18T20:59:27.000000Z"}, {"uuid": "39d4034c-003b-431f-bffa-d0dbc46c9207", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2563", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11583", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2563\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The User Registration & Membership  WordPress plugin before 4.1.2 does not prevent users to set their account role when the Membership Addon is enabled, leading to a privilege escalation issue and allowing unauthenticated users to gain admin privileges\n\ud83d\udccf Published: 2025-04-14T06:00:09.509Z\n\ud83d\udccf Modified: 2025-04-14T06:00:09.509Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/2c0f62a1-9510-4f90-a297-17634e6c8b75/", "creation_timestamp": "2025-04-14T06:53:47.000000Z"}, {"uuid": "d2e751b4-ec15-4b2b-813c-999e0e7f28b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25456", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11905", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25456\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via mac2.\n\ud83d\udccf Published: 2025-04-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-15T20:34:29.442Z\n\ud83d\udd17 References:\n1. https://github.com/xyqer1/Tenda-AC10-AdvSetMacMtuWan-mac2-StackOverflow\n2. https://gist.github.com/xyqer1/ab1e6a2bd369aaada0666639c843aff0", "creation_timestamp": "2025-04-15T20:55:06.000000Z"}, {"uuid": "bf112c0d-5531-44c6-a404-1e840bf2348c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2572", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11655", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2572\n\ud83d\udd25 CVSS Score: 5.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: In WhatsUp Gold versions released before 2024.0.3, a \n\ndatabase manipulation \n\nvulnerability allows an unauthenticated attacker to modify the contents of\u00a0WhatsUp.dbo.WrlsMacAddressGroup.\n\ud83d\udccf Published: 2025-04-14T16:06:45.424Z\n\ud83d\udccf Modified: 2025-04-14T16:06:45.424Z\n\ud83d\udd17 References:\n1. https://www.progress.com/network-monitoring\n2. https://docs.progress.com/bundle/whatsupgold-release-notes-24-0/page/WhatsUp-Gold-2024.0-Release-Notes.html", "creation_timestamp": "2025-04-14T16:53:53.000000Z"}, {"uuid": "cac9ea07-1edb-4dcc-b730-7131b5ce6f13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25034", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-25)", "content": "", "creation_timestamp": "2026-04-25T00:00:00.000000Z"}, {"uuid": "ccf26ccd-e5de-4942-ae5d-b016fa31fab4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25453", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11942", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25453\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via serviceName2.\n\ud83d\udccf Published: 2025-04-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-15T22:24:06.493Z\n\ud83d\udd17 References:\n1. https://github.com/xyqer1/Tenda-AC10-AdvSetMacMtuWan-serviceName2-StackOverflow\n2. https://gist.github.com/xyqer1/84dc6d8b3f92597d1d597b2799c2c45f", "creation_timestamp": "2025-04-15T22:55:41.000000Z"}, {"uuid": "adab6074-351d-47b7-94ee-e367c876e1a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25455", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12291", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25455\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via wanMTU2.\n\ud83d\udccf Published: 2025-04-17T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-17T17:51:55.484Z\n\ud83d\udd17 References:\n1. https://github.com/xyqer1/Tenda-AC10-AdvSetMacMtuWan-wanMTU2-StackOverflow\n2. https://gist.github.com/xyqer1/6c865a9ec44b4797e78b6765cd5c84e5", "creation_timestamp": "2025-04-17T17:57:21.000000Z"}, {"uuid": "60783a97-3839-4f78-8478-e9d8c0565344", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25457", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12265", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25457\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via cloneType2.\n\ud83d\udccf Published: 2025-04-17T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-17T15:48:58.702Z\n\ud83d\udd17 References:\n1. https://github.com/xyqer1/Tenda-AC10-AdvSetMacMtuWan-cloneType2-StackOverflow\n2. https://gist.github.com/xyqer1/f69ebbdec019cacf5870ea55e25780a4", "creation_timestamp": "2025-04-17T15:57:51.000000Z"}, {"uuid": "fbdd4efb-6d85-459e-845d-7dd96ff5100b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25454", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12301", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25454\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via wanSpeed2.\n\ud83d\udccf Published: 2025-04-17T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-17T17:33:25.900Z\n\ud83d\udd17 References:\n1. https://github.com/xyqer1/Tenda-AC10-AdvSetMacMtuWan-wanSpeed2-StackOverflow\n2. https://gist.github.com/xyqer1/491bfd8b9b0868977dca66ab6ce238d2", "creation_timestamp": "2025-04-17T17:57:36.000000Z"}, {"uuid": "c907ef68-a4a3-46d0-8949-536212d8dabc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25948", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12425", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25948\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Incorrect access control in the component /rest/staffResource/create of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows create and modify user accounts, including an Administrator account.\n\ud83d\udccf Published: 2025-03-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-18T13:52:45.571Z\n\ud83d\udd17 References:\n1. https://github.com/VvV1per/Vulnerability-Research-CVEs/tree/main/CVE-2024-53637\n2. https://github.com/VvV1per/Vulnerability-Research-CVEs/tree/main/CVE-2025-25948", "creation_timestamp": "2025-04-18T13:58:26.000000Z"}, {"uuid": "bd816442-31cc-4563-8028-8e498f58f61b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2517", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12666", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2517\n\ud83d\udd25 CVSS Score: 2.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N)\n\ud83d\udd39 Description: Reference to Expired Domain Vulnerability in OpenText\u2122 ArcSight Enterprise Security Manager.\n\ud83d\udccf Published: 2025-04-21T14:26:04.804Z\n\ud83d\udccf Modified: 2025-04-21T14:55:54.336Z\n\ud83d\udd17 References:\n1. https://portal.microfocus.com/s/article/KM000040103", "creation_timestamp": "2025-04-21T15:02:45.000000Z"}, {"uuid": "f9cb8edd-1258-4e08-96f7-717fdfab281c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25983", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12540", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25983\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in Macro-video Technologies Co.,Ltd V380 Pro android application 2.1.44 and V380 Pro android application 2.1.64 allows an attacker to obtain sensitive information via the QE code based sharing component.\n\ud83d\udccf Published: 2025-04-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-18T20:37:54.776Z\n\ud83d\udd17 References:\n1. https://github.com/vladko312/Research_v380_IP_camera\n2. https://github.com/vladko312/Research_v380_IP_camera/blob/main/CVE-2025-25983.md", "creation_timestamp": "2025-04-18T20:59:23.000000Z"}, {"uuid": "77007e61-b215-4849-b4e8-24be96a334a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25985", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12546", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25985\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in Macro-video Technologies Co.,Ltd V380E6_C1 IP camera (Hw_HsAKPIQp_WF_XHR) 1020302 allows a physically proximate attacker to execute arbitrary code via the /mnt/mtd/mvconf/wifi.ini and /mnt/mtd/mvconf/user_info.ini components.\n\ud83d\udccf Published: 2025-04-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-18T20:26:40.767Z\n\ud83d\udd17 References:\n1. https://github.com/vladko312/Research_v380_IP_camera\n2. https://github.com/vladko312/Research_v380_IP_camera/blob/main/CVE-2025-25985.md", "creation_timestamp": "2025-04-18T20:59:28.000000Z"}, {"uuid": "0d44d6c1-6d40-4a4b-ae28-d27985fcf59a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25228", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12635", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25228\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A SQL injection in VirtueMart component 1.0.0 - 4.4.7 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands in the product management area in backend.\n\ud83d\udccf Published: 2025-04-21T07:16:45.498Z\n\ud83d\udccf Modified: 2025-04-21T07:20:56.546Z\n\ud83d\udd17 References:\n1. https://virtuemart.net/\n2. https://github.com/AdamWallwork/CVEs/tree/main/2025/CVE-2025-25228", "creation_timestamp": "2025-04-21T08:01:24.000000Z"}, {"uuid": "d3bd8233-8388-40ff-89b8-dcc71d8544bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2582", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12642", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2582\n\ud83d\udd25 CVSS Score: 5.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in SimpleMachines SMF 2.1.4 and classified as problematic. Affected by this issue is some unknown functionality of the file ManageAttachments.php. The manipulation of the argument Notice leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The vendor does not declare this issue a security vulnerability due to authentication requirements before being able to access any feature in the software that allows file modification.\n\ud83d\udccf Published: 2025-03-21T06:31:04.195Z\n\ud83d\udccf Modified: 2025-04-21T12:41:42.523Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300542\n2. https://vuldb.com/?ctiid.300542\n3. https://vuldb.com/?submit.511999\n4. https://github.com/Fewword/Poc/blob/main/smf/smf-poc3.md\n5. https://github.com/Fewword/Poc/blob/main/smf/smf-poc4.md", "creation_timestamp": "2025-04-21T13:02:40.000000Z"}, {"uuid": "8d23f205-7f44-439b-8624-310489eba365", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2583", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12641", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2583\n\ud83d\udd25 CVSS Score: 5.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in SimpleMachines SMF 2.1.4. It has been classified as problematic. This affects an unknown part of the file ManageNews.php. The manipulation of the argument subject/message leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The vendor does not declare this issue a security vulnerability due to authentication requirements before being able to access any feature in the software that allows file modification.\n\ud83d\udccf Published: 2025-03-21T06:31:06.127Z\n\ud83d\udccf Modified: 2025-04-21T12:41:44.675Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300543\n2. https://vuldb.com/?ctiid.300543\n3. https://vuldb.com/?submit.512001\n4. https://github.com/Fewword/Poc/blob/main/smf/smf-poc5.md\n5. https://github.com/Fewword/Poc/blob/main/smf/smf-poc6.md", "creation_timestamp": "2025-04-21T13:02:39.000000Z"}, {"uuid": "09ef315d-c6f3-4322-b988-af74921d9474", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2594", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12808", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2594\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The User Registration & Membership  WordPress plugin before 4.1.3 does not properly validate data in an AJAX action when the Membership Addon is enabled, allowing attackers to authenticate as any user, including administrators, by simply using the target account's user ID.\n\ud83d\udccf Published: 2025-04-22T06:00:06.896Z\n\ud83d\udccf Modified: 2025-04-22T06:00:06.896Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/1c1be47a-d5c0-4ac1-b9fd-475b382a7d8f/", "creation_timestamp": "2025-04-22T07:03:22.000000Z"}, {"uuid": "7ba6375a-8540-4584-ae04-3520e306a629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2595", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13016", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2595\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: An unauthenticated remote attacker can bypass the user management in CODESYS Visualization and read visualization template files or static elements by means of forced browsing.\n\ud83d\udccf Published: 2025-04-23T07:54:00.430Z\n\ud83d\udccf Modified: 2025-04-23T07:54:00.430Z\n\ud83d\udd17 References:\n1. https://certvde.com/en/advisories/VDE-2025-027", "creation_timestamp": "2025-04-23T08:05:47.000000Z"}, {"uuid": "45d58f7c-abf8-4007-a65b-308215a8c368", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25953", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13070", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25953\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 was discovered to contain an Azure JWT access token exposure. This vulnerability allows authenticated attackers to escalate privileges and access sensitive information.\n\ud83d\udccf Published: 2025-03-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-23T15:54:32.495Z\n\ud83d\udd17 References:\n1. https://github.com/VvV1per/Vulnerability-Research-CVEs/tree/main/CVE-2024-89640\n2. https://github.com/VvV1per/Vulnerability-Research-CVEs/tree/main/CVE-2025-25953", "creation_timestamp": "2025-04-23T16:04:35.000000Z"}, {"uuid": "1f81a508-7d86-441e-a7bf-b327bea38b7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25045", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13160", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25045\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: IBM InfoSphere Information 11.7 Server authenticated user to obtain sensitive information when a detailed technical error message is returned in a request.  This information could be used in further attacks against the system.\n\ud83d\udccf Published: 2025-04-23T22:23:10.087Z\n\ud83d\udccf Modified: 2025-04-23T22:23:10.087Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7231332", "creation_timestamp": "2025-04-23T23:05:05.000000Z"}, {"uuid": "78f2c08a-61d9-4f40-9054-1bc16ed2b5b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2558", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13190", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2558\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The-wound WordPress theme through 0.0.1 does not validate some parameters before using them to generate paths passed to include function/s, allowing unauthenticated users to perform LFI attacks and download arbitrary file from the server\n\ud83d\udccf Published: 2025-04-24T06:00:07.297Z\n\ud83d\udccf Modified: 2025-04-24T06:00:07.297Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/6a8e1c89-a01d-4347-91fc-ba454784b153/", "creation_timestamp": "2025-04-24T06:05:34.000000Z"}, {"uuid": "9ba3ddc5-d585-41fc-9f15-d7f6bd0fc3f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25046", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13159", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25046\n\ud83d\udd25 CVSS Score: 3.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: IBM InfoSphere Information Server 11.7\u00a0DataStage Flow Designer\u00a0\n\ntransmits sensitive information via URL or query parameters that could be exposed to an unauthorized actor using man in the middle techniques.\n\ud83d\udccf Published: 2025-04-23T22:24:43.269Z\n\ud83d\udccf Modified: 2025-04-23T22:24:43.269Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7231333", "creation_timestamp": "2025-04-23T23:05:04.000000Z"}, {"uuid": "0d9bf4f2-6ffa-4465-b27d-c4fb662cb7a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2543", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13206", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2543\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Advanced Accordion Gutenberg Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 5.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.\n\ud83d\udccf Published: 2025-04-24T08:23:48.921Z\n\ud83d\udccf Modified: 2025-04-24T08:23:48.921Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/79752ac3-cb5f-4d86-be58-c4b892e4edd6?source=cve\n2. https://plugins.trac.wordpress.org/browser/advanced-accordion-block/tags/4.8.2/advanced-accordion-block.php#L363\n3. https://plugins.trac.wordpress.org/browser/advanced-accordion-block/tags/4.8.2/advanced-accordion-block.php#L364\n4. https://plugins.trac.wordpress.org/browser/advanced-accordion-block/tags/4.8.2/advanced-accordion-block.php#L369\n5. https://wordpress.org/plugins/advanced-accordion-block/#developers", "creation_timestamp": "2025-04-24T09:12:20.000000Z"}, {"uuid": "d7181449-e486-4581-9a2c-667c0e4e42cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2579", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13203", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2579\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Lottie Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via File uploads in all versions up to, and including, 1.1.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the uploaded file.\n\ud83d\udccf Published: 2025-04-24T08:23:50.232Z\n\ud83d\udccf Modified: 2025-04-24T08:23:50.232Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/b85b314d-a155-4cec-95c9-0db4b9d8e59b?source=cve\n2. https://plugins.trac.wordpress.org/browser/embed-lottie-player/tags/1.1.8/plugin.php#L82\n3. https://plugins.trac.wordpress.org/browser/embed-lottie-player/tags/1.1.8/plugin.php#L130\n4. https://wordpress.org/plugins/embed-lottie-player/#developers", "creation_timestamp": "2025-04-24T09:12:18.000000Z"}, {"uuid": "80eba3c9-6c2b-4bbb-a638-9d7931201e89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2563", "type": "published-proof-of-concept", "source": "Telegram/pmzKbihchBYeJvBnkfYLk5LESIxSAVi0zGHv3QahmixU_js", "content": "", "creation_timestamp": "2026-04-20T09:00:05.000000Z"}, {"uuid": "78ea81b0-909d-4b5d-b710-d4e44e7cb30e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2563", "type": "published-proof-of-concept", "source": "Telegram/T_t278HVRV5FNiuWOcnHRGLAtJdDH1ZkJoft_1GQHmwS1uI", "content": "", "creation_timestamp": "2026-04-20T03:00:09.000000Z"}, {"uuid": "a8b7aa43-8186-4389-bb29-a5a143ad5f27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2545", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14844", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2545\n\ud83d\udd25 CVSS Score: 2.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Vulnerability in Best Practical Solutions, LLC's Request Tracker v5.0.7, where the Triple DES (3DES) cryptographic algorithm is used within SMIME code to encrypt S/MIME emails. Triple DES is considered obsolete and insecure due to its susceptibility to birthday attacks, which could compromise the confidentiality of encrypted messages.\n\ud83d\udccf Published: 2025-05-05T11:28:43.668Z\n\ud83d\udccf Modified: 2025-05-05T11:29:41.545Z\n\ud83d\udd17 References:\n1. https://www.incibe.es/en/incibe-cert/notices/aviso/cryptographic-algorithm-not-recommended-request-tracker-best-practical", "creation_timestamp": "2025-05-05T12:20:45.000000Z"}, {"uuid": "e5e322a8-24ce-402b-9ae0-587040c86057", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25014", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15177", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25014\n\ud83d\udd25 CVSS Score: 9.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: A Prototype pollution vulnerability in Kibana leads to arbitrary code execution via crafted HTTP requests to machine learning and reporting endpoints.\n\ud83d\udccf Published: 2025-05-06T17:30:45.197Z\n\ud83d\udccf Modified: 2025-05-06T17:48:59.583Z\n\ud83d\udd17 References:\n1. https://discuss.elastic.co/t/kibana-8-17-6-8-18-1-or-9-0-1-security-update-esa-2025-07/377868", "creation_timestamp": "2025-05-06T18:21:33.000000Z"}, {"uuid": "b066e930-f577-4412-b20b-d5a417fb9a7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25062", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15184", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25062\n\ud83d\udd25 CVSS Score: 4.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: An XSS issue was discovered in Backdrop CMS 1.28.x before 1.28.5 and 1.29.x before 1.29.3. It doesn't sufficiently isolate long text content when the CKEditor 5 rich text editor is used. This allows a potential attacker to craft specialized HTML and JavaScript that may be executed when an administrator attempts to edit a piece of content. This vulnerability is mitigated by the fact that an attacker must have the ability to create long text content (such as through the node or comment forms) and an administrator must edit (not view) the content that contains the malicious content. This problem only exists when using the CKEditor 5 module.\n\ud83d\udccf Published: 2025-02-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-06T17:21:48.887Z\n\ud83d\udd17 References:\n1. https://backdropcms.org/security/backdrop-sa-core-2025-001\n2. https://medium.com/@rudranshsinghrajpurohit/cve-2025-25062-stored-cross-site-scripting-xss-in-backdrop-cms-5073df76612b\n3. https://www.getastra.com/blog/vulnerability/cve-2025-25062stored-cross-site-scripting-xss-in-backdrop-cms-v1-28-2/", "creation_timestamp": "2025-05-06T18:21:40.000000Z"}, {"uuid": "3ae98753-2a13-49d6-8047-820dd054092a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2563", "type": "published-proof-of-concept", "source": "Telegram/56SNjB68nyULYTdkaeIILQI4ytkQLoACBGmTDoXIf258Id4", "content": "", "creation_timestamp": "2026-04-18T11:00:12.000000Z"}, {"uuid": "15b4607a-b883-47af-8c93-13a266a022ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2563", "type": "published-proof-of-concept", "source": "Telegram/O7yR2b4OLQp6kid0WdGHPQvQVIbLyZOFm8IdlAgSGDL0FUM", "content": "", "creation_timestamp": "2026-04-18T15:00:07.000000Z"}, {"uuid": "c945b5bf-4e3a-459c-853f-5871c2009a4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25370", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16402", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25370\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in realme GT 2 (RMX3311) running Android 14 with realme UI 5.0 allows a physically proximate attacker to obtain sensitive information via the show app only setting function.\n\ud83d\udccf Published: 2025-05-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-14T20:01:46.307Z\n\ud83d\udd17 References:\n1. http://realme.com\n2. https://gist.github.com/krl5/4eeed04a065287489c2e606e6d48c1bc", "creation_timestamp": "2025-05-14T20:32:31.000000Z"}, {"uuid": "ac8c1072-3af0-4647-b4ea-05c26d4e8cbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25173", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19715", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25173\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FasterThemes FastBook allows Stored XSS. This issue affects FastBook: from n/a through 1.1.\n\ud83d\udccf Published: 2025-06-27T11:52:46.174Z\n\ud83d\udccf Modified: 2025-06-27T13:41:44.926Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/fastbook-responsive-appointment-booking-and-scheduling-system/vulnerability/wordpress-fastbook-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-06-27T13:50:53.000000Z"}, {"uuid": "56413d09-5b39-43cb-88f7-e152a3ec0420", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2524", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16807", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2524\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Ninja Forms  WordPress plugin before 3.10.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-05-19T06:00:05.132Z\n\ud83d\udccf Modified: 2025-05-19T06:00:05.132Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/6e89ad2b-f12e-4b49-b34e-8da7d30629cd/", "creation_timestamp": "2025-05-19T06:38:51.000000Z"}, {"uuid": "15de97bd-f710-47cd-ad23-4606ac8dfa0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2560", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16806", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2560\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Ninja Forms  WordPress plugin before 3.10.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-05-19T06:00:05.453Z\n\ud83d\udccf Modified: 2025-05-19T06:00:05.453Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/2adaa55a-4a6d-40ca-ae19-fcb82420894a/", "creation_timestamp": "2025-05-19T06:38:50.000000Z"}, {"uuid": "e5d8e3cb-17dd-465c-ba18-a0de549ae4b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2561", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16805", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2561\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Ninja Forms  WordPress plugin before 3.10.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-05-19T06:00:05.777Z\n\ud83d\udccf Modified: 2025-05-19T06:00:05.777Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/4a2074a3-a479-4473-92fb-04397f20dd86/", "creation_timestamp": "2025-05-19T06:38:50.000000Z"}, {"uuid": "18abdcfc-b8ff-437f-9f50-31b032038374", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25539", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17167", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25539\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Local File Inclusion vulnerability in Vasco v3.14and before allows a remote attacker to obtain sensitive information via help menu.\n\ud83d\udccf Published: 2025-05-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-21T17:00:04.370Z\n\ud83d\udd17 References:\n1. https://drive.google.com/drive/folders/1Va0QP5TtsRprk-pXL3bUfCwTSjYbqnLK?usp=sharing\n2. https://gist.github.com/sornram9254/15eb12579b7acda8ba021217366960bd", "creation_timestamp": "2025-05-21T17:43:24.000000Z"}, {"uuid": "aedeacb1-1124-41bf-a2a7-24ba46947223", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25215", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18343", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25215\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: An arbitrary free vulnerability exists in the cv_close functionality of \nDell ControlVault3 prior to 5.15.10.14 and Dell ControlVault3 Plus prior to 6.2.26.36. A specially crafted ControlVault API call \ncan lead to an arbitrary free. An attacker can forge a fake session to \ntrigger this vulnerability\n\ud83d\udccf Published: 2025-06-13T21:26:58.869Z\n\ud83d\udccf Modified: 2025-06-13T21:26:58.869Z\n\ud83d\udd17 References:\n1. https://www.dell.com/support/kbdoc/en-us/000276106/dsa-2025-053", "creation_timestamp": "2025-06-13T21:36:55.000000Z"}, {"uuid": "e86701a5-2c9f-4723-9607-97416f71fd2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25032", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18122", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25032\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2, 12.0.3, and 12.0.4 could allow an authenticated user to cause a denial of service by sending a specially crafted request that would exhaust memory resources.\n\ud83d\udccf Published: 2025-06-11T17:26:35.867Z\n\ud83d\udccf Modified: 2025-06-11T17:48:54.567Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7234674", "creation_timestamp": "2025-06-11T18:35:13.000000Z"}, {"uuid": "17cbfd09-0ac3-407a-9df6-8f9c26add7d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25050", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18344", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25050\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: An out-of-bounds write vulnerability exists in the \ncv_upgrade_sensor_firmware functionality of Dell ControlVault3 prior to 5.15.10.14 and Dell ControlVault 3 Plus prior to 6.2.26.36.\n A specially crafted ControlVault API call can lead to an out-of-bounds \nwrite. An attacker can issue an API call to trigger this vulnerability.\n\ud83d\udccf Published: 2025-06-13T21:03:18.087Z\n\ud83d\udccf Modified: 2025-06-13T21:03:18.087Z\n\ud83d\udd17 References:\n1. https://www.dell.com/support/kbdoc/en-us/000276106/dsa-2025-053", "creation_timestamp": "2025-06-13T21:36:56.000000Z"}, {"uuid": "03543d2a-8f4e-4d2a-9c89-f56107afbbe4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25264", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18437", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25264\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: An unauthenticated remote attacker can take advantage of the current overly permissive CORS policy to gain access and read the responses, potentially exposing sensitive data or enabling further attacks.\n\ud83d\udccf Published: 2025-06-16T09:45:31.613Z\n\ud83d\udccf Modified: 2025-06-16T09:45:31.613Z\n\ud83d\udd17 References:\n1. https://certvde.com/en/advisories/VDE-2025-018/", "creation_timestamp": "2025-06-16T10:39:09.000000Z"}, {"uuid": "85b1ea3b-244e-40f2-90d7-6ab97e47f86e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25265", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18436", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25265\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: A web application for configuring the controller is accessible at a specific path. It contains an endpoint that allows an unauthenticated remote attacker to read files from the system\u2019s file structure.\n\ud83d\udccf Published: 2025-06-16T09:46:13.998Z\n\ud83d\udccf Modified: 2025-06-16T09:46:13.998Z\n\ud83d\udd17 References:\n1. https://certvde.com/en/advisories/VDE-2025-018/", "creation_timestamp": "2025-06-16T10:39:08.000000Z"}, {"uuid": "ef5b2d6f-d141-4efc-a004-bb58b8395766", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25038", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19262", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25038\n\ud83d\udd25 CVSS Score: 9.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: An OS command injection vulnerability exists in MiniDVBLinux version 5.4 and earlier. The system\u2019s web-based management interface fails to properly sanitize user-supplied input before passing it to operating system commands. A remote unauthenticated attacker can exploit this vulnerability to execute arbitrary commands as the root user, potentially compromising the entire device.\n\ud83d\udccf Published: 2025-06-20T18:36:09.946Z\n\ud83d\udccf Modified: 2025-06-23T20:34:31.585Z\n\ud83d\udd17 References:\n1. https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5717.php\n2. https://www.exploit-db.com/exploits/51096\n3. https://www.fortiguard.com/encyclopedia/ips/52454\n4. https://cxsecurity.com/issue/WLB-2022100039\n5. https://packetstormsecurity.com/files/168744/\n6. https://www.minidvblinux.de\n7. https://vulncheck.com/advisories/minidvblinux-command-injection", "creation_timestamp": "2025-06-23T20:47:20.000000Z"}, {"uuid": "56c87348-5fd2-4138-af0c-28b9d2d844e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25037", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19263", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25037\n\ud83d\udd25 CVSS Score: 9.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: An information disclosure vulnerability exists in Aquatronica Controller System firmware versions <= 5.1.6 and web interface versions <= 2.0. The tcp.php endpoint fails to restrict unauthenticated access, allowing remote attackers to issue crafted POST requests and retrieve sensitive configuration data, including plaintext administrative credentials. Exploitation of this flaw can lead to full compromise of the system, enabling unauthorized manipulation of connected devices and aquarium parameters.\n\ud83d\udccf Published: 2025-06-20T18:35:19.243Z\n\ud83d\udccf Modified: 2025-06-23T20:33:15.219Z\n\ud83d\udd17 References:\n1. https://www.zeroscience.mk/en/vulnerabilities/ZSL-2024-5824.php\n2. https://www.exploit-db.com/exploits/52028\n3. https://fortiguard.fortinet.com/encyclopedia/ips/56008\n4. https://www.aquatronica.com\n5. https://vulncheck.com/advisories/aquatronica-controller-system-credential-leak", "creation_timestamp": "2025-06-23T20:47:21.000000Z"}, {"uuid": "d604fe66-6af4-4437-b1cd-856fee28b582", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25905", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19469", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25905\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Cross-Site Scripting (XSS) vulnerability in CADClick v1.13.0 and before allows remote attackers to inject arbitrary web script or HTML via the \"tree\" parameter.\n\ud83d\udccf Published: 2025-06-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-25T15:15:57.025Z\n\ud83d\udd17 References:\n1. https://support.cadclick.com\n2. https://4pace.com/en/products/cadclick\n3. https://medium.com/@mdjab3r/cve-2025-25905-ffff82c635f2", "creation_timestamp": "2025-06-25T15:52:15.000000Z"}, {"uuid": "29323caf-d335-40c7-b58a-0f45fad44c12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25206", "type": "seen", "source": "https://t.me/cvedetector/18129", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25206 - eLabFTW Privilege Escalation Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-25206 \nPublished : Feb. 14, 2025, 5:15 p.m. | 1\u00a0hour, 2\u00a0minutes ago \nDescription : eLabFTW is an open source electronic lab notebook for research labs. Prior to version 5.1.15, an incorrect input validation could allow an authenticated user to read sensitive information, including login token or other content stored in the database. This could lead to privilege escalation if cookies are enabled (default setting). Users must upgrade to eLabFTW version 5.1.15 to receive a fix. No known workarounds are available. \nSeverity: 8.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-14T19:57:07.000000Z"}, {"uuid": "47185e3f-58cf-4ae1-85f8-b8f9f335e694", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25204", "type": "seen", "source": "https://t.me/cvedetector/18128", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25204 - GitHub gh Artifact Attestation Verification Exit Code Spoofing Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25204 \nPublished : Feb. 14, 2025, 5:15 p.m. | 1\u00a0hour, 2\u00a0minutes ago \nDescription : `gh` is GitHub\u2019s official command line tool. Starting in version 2.49.0 and prior to version 2.67.0, under certain conditions, a bug in GitHub's Artifact Attestation cli tool `gh attestation verify` causes it to return a zero exit status when no attestations are present. This behavior is incorrect: When no attestations are present, `gh attestation verify` should return a non-zero exit status code, thereby signaling verification failure. An attacker can abuse this flaw to, for example, deploy malicious artifacts in any system that uses `gh attestation verify`'s exit codes to gatekeep deployments. Users are advised to update `gh` to patched version `v2.67.0` as soon as possible. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-14T19:57:03.000000Z"}, {"uuid": "a3463000-cde3-4187-9d2b-af978665fb0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25668", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4829", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25668\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the shareSpeed parameter in the sub_47D878 function.\n\ud83d\udccf Published: 2025-02-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-20T22:29:47.052Z\n\ud83d\udd17 References:\n1. https://github.com/jangfan/my-vuln/blob/main/Tenda/AC8V4/setMacFilterCfg.md", "creation_timestamp": "2025-02-20T23:17:04.000000Z"}, {"uuid": "9e8d07ce-2cd1-4895-83d9-54c94eab031e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25759", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5679", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25759\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in the component admin_template.php of SUCMS v1.0 allows attackers to execute a directory traversal and arbitrary file deletion via a crafted GET request.\n\ud83d\udccf Published: 2025-02-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-27T14:19:09.821Z\n\ud83d\udd17 References:\n1. https://github.com/147536951/Qianyi-learn/blob/main/SUCMS.pdf", "creation_timestamp": "2025-02-27T14:27:09.000000Z"}, {"uuid": "a15b7874-3e6f-455b-9fd9-d21444c7f053", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25878", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4938", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25878\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A vulnerability was found in ITSourcecode Simple ChatBox up to 1.0. This vulnerability affects unknown code of the file /del.php. The attack can use SQL injection to obtain sensitive data.\n\ud83d\udccf Published: 2025-02-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-21T18:04:07.730Z\n\ud83d\udd17 References:\n1. https://github.com/SticKManII/cve-poc/blob/main/chat-box/3/poc.md", "creation_timestamp": "2025-02-21T18:18:50.000000Z"}, {"uuid": "6db1bfcc-168a-45bd-9ac4-95f719f852d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25953", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6122", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25953\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 was discovered to contain an Azure JWT access token exposure. This vulnerability allows authenticated attackers to escalate privileges and access sensitive information.\n\ud83d\udccf Published: 2025-03-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-03T01:00:42.276Z\n\ud83d\udd17 References:\n1. https://github.com/VvV1per/Vulnerability-Research-CVEs/tree/main/CVE-2024-89640", "creation_timestamp": "2025-03-03T01:29:04.000000Z"}, {"uuid": "f8ecb75d-7dac-4ea2-b9d1-dd7c40d1ce54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25288", "type": "seen", "source": "https://t.me/cvedetector/18146", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25288 - Octokit Plugin Paginate Rest ReDoS Attack\", \n  \"Content\": \"CVE ID : CVE-2025-25288 \nPublished : Feb. 14, 2025, 8:15 p.m. | 2\u00a0hours, 13\u00a0minutes ago \nDescription : @octokit/plugin-paginate-rest is the Octokit plugin to paginate REST API endpoint responses. For versions starting in 1.0.0 and prior to 11.4.1 of the npm package `@octokit/plugin-paginate-rest`, when calling `octokit.paginate.iterator()`, a specially crafted `octokit` instance\u2014particularly with a malicious `link` parameter in the `headers` section of the `request`\u2014can trigger a ReDoS attack. Version 11.4.1 contains a fix for the issue. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-15T00:08:48.000000Z"}, {"uuid": "cb39ee5b-f5f7-4398-9554-e14ebe8bcd0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25285", "type": "seen", "source": "https://t.me/cvedetector/18145", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25285 - Octokit/Endpoint Regular Expression Denial of Service (ReDoS)\", \n  \"Content\": \"CVE ID : CVE-2025-25285 \nPublished : Feb. 14, 2025, 8:15 p.m. | 2\u00a0hours, 13\u00a0minutes ago \nDescription : @octokit/endpoint turns REST API endpoints into generic request options. Starting in version 4.1.0 and prior to version 10.1.3, by crafting specific `options` parameters, the `endpoint.parse(options)` call can be triggered, leading to a regular expression denial-of-service (ReDoS) attack. This causes the program to hang and results in high CPU utilization. The issue occurs in the `parse` function within the `parse.ts` file of the npm package `@octokit/endpoint`. Version 10.1.3 contains a patch for the issue. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-15T00:08:47.000000Z"}, {"uuid": "2770dcd5-64e4-47fa-ad48-87d6b283dd7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25290", "type": "seen", "source": "https://t.me/cvedetector/18144", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25290 - GitHub Octokit Regular Expression Denial of Service (ReDoS)\", \n  \"Content\": \"CVE ID : CVE-2025-25290 \nPublished : Feb. 14, 2025, 8:15 p.m. | 2\u00a0hours, 13\u00a0minutes ago \nDescription : @octokit/request sends parameterized requests to GitHub\u2019s APIs with sensible defaults in browsers and Node. Starting in version 1.0.0 and prior to version 9.2.1, the regular expression `/<([^]+)>; rel=\"deprecation\"/` used to match the `link` header in HTTP responses is vulnerable to a ReDoS (Regular Expression Denial of Service) attack. This vulnerability arises due to the unbounded nature of the regex's matching behavior, which can lead to catastrophic backtracking when processing specially crafted input. An attacker could exploit this flaw by sending a malicious `link` header, resulting in excessive CPU usage and potentially causing the server to become unresponsive, impacting service availability. Version 9.2.1 fixes the issue. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-15T00:08:43.000000Z"}, {"uuid": "920d2d52-6653-4d76-94ca-4b9d4ad18a91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25289", "type": "seen", "source": "https://t.me/cvedetector/18143", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25289 - Octokit Regular Expression Denial of Service (ReDoS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25289 \nPublished : Feb. 14, 2025, 8:15 p.m. | 2\u00a0hours, 13\u00a0minutes ago \nDescription : @octokit/request-error is an error class for Octokit request errors. Starting in version 1.0.0 and prior to version 6.1.7, a Regular Expression Denial of Service (ReDoS) vulnerability exists in the processing of HTTP request headers. By sending an authorization header containing an excessively long sequence of spaces followed by a newline and \"@\", an attacker can exploit inefficient regular expression processing, leading to excessive resource consumption. This can significantly degrade server performance or cause a denial-of-service (DoS) condition, impacting availability. Version 6.1.7 contains a fix for the issue. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-15T00:08:42.000000Z"}, {"uuid": "66b107ee-985a-45e4-999e-925717937a26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25287", "type": "seen", "source": "https://t.me/cvedetector/18024", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25287 - MediaWiki Lakeus Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2025-25287 \nPublished : Feb. 13, 2025, 4:16 p.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : Lakeus is a simple skin made for MediaWiki. Starting in version 1.8.0 and prior to versions 1.3.1+REL1.39, 1.3.1+REL1.42, and 1.4.0, Lakeus is vulnerable to store cross-site scripting via malicious system messages, though editing the messages requires high privileges. Those with `(editinterface)` rights can edit system messages that are improperly handled in order to send raw HTML. In the case of `lakeus-footermessage`, this will affect all users if the server is configured to link back to this repository. Otherwise, the system messages in themeDesigner.js are only used when the user enables it in their preferences. Versions 1.3.1+REL1.39, 1.3.1+REL1.42, and 1.4.0 contain a patch. \nSeverity: 4.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T18:50:29.000000Z"}, {"uuid": "e6b18cc7-9ed9-4317-b7ef-2565a83b21b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2526", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10823", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2526\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Streamit theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.0.2. This is due to the plugin not properly validating a user's identity prior to updating their details like email in the 'st_Authentication_Controller::edit_profile' function. This makes it possible for unauthenticated attackers to change arbitrary user's email addresses, including administrators, and leverage that to reset the user's password and gain access to their account.\n\ud83d\udccf Published: 2025-04-08T01:44:20.971Z\n\ud83d\udccf Modified: 2025-04-08T01:44:20.971Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/057abffb-1c52-49ca-8791-ca44f0c5a011?source=cve\n2. https://themeforest.net/item/streamit-video-streaming-wordpress-theme/29772881\n3. https://documentation.iqonic.design/streamit/change-log/streamit-v4-0/", "creation_timestamp": "2025-04-08T02:45:45.000000Z"}, {"uuid": "bba054df-f668-4e3a-8c43-6769e2871b65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25304", "type": "seen", "source": "https://t.me/cvedetector/18142", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25304 - Vega Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25304 \nPublished : Feb. 14, 2025, 8:15 p.m. | 2\u00a0hours, 13\u00a0minutes ago \nDescription : Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. Prior to version 5.26.0 of vega and 5.4.2 of vega-selections, the `vlSelectionTuples` function can be used to call JavaScript functions, leading to cross-site scripting.`vlSelectionTuples` calls multiple functions that can be controlled by an attacker, including one call with an attacker-controlled argument. This can be used to call `Function()` with arbitrary JavaScript and the resulting function can be called with `vlSelectionTuples` or using a type coercion to call `toString` or `valueOf`. Version 5.26.0 of vega and 5.4.2 of vega-selections fix this issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-15T00:08:42.000000Z"}, {"uuid": "b95d678c-79e5-4041-a029-b4667fe4f97a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25297", "type": "seen", "source": "https://t.me/cvedetector/18141", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25297 - Label Studio SSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25297 \nPublished : Feb. 14, 2025, 8:15 p.m. | 2\u00a0hours, 13\u00a0minutes ago \nDescription : Label Studio is an open source data labeling tool. Prior to version 1.16.0, Label Studio's S3 storage integration feature contains a Server-Side Request Forgery (SSRF) vulnerability in its endpoint configuration. When creating an S3 storage connection, the application allows users to specify a custom S3 endpoint URL via the s3_endpoint parameter. This endpoint URL is passed directly to the boto3 AWS SDK without proper validation or restrictions on the protocol or destination. The vulnerability allows an attacker to make the application send HTTP requests to arbitrary internal services by specifying them as the S3 endpoint. When the storage sync operation is triggered, the application attempts to make S3 API calls to the specified endpoint, effectively making HTTP requests to the target service and returning the response in error messages. This SSRF vulnerability enables attackers to bypass network segmentation and access internal services that should not be accessible from the external network. The vulnerability is particularly severe because error messages from failed requests contain the full response body, allowing data exfiltration from internal services. Version 1.16.0 contains a patch for the issue. \nSeverity: 8.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-15T00:08:41.000000Z"}, {"uuid": "ea8f7b7f-613d-489f-bef2-9e04f6a27417", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2598", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/60601", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aTesting if AWS exploit CVE-2025-2598 still works\nURL\uff1ahttps://github.com/Catnip-Express-Maxim/AWSTESTEXPLOIT\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-11-23T19:20:55.000000Z"}, {"uuid": "395bc315-f756-4aa0-b234-78b74dc3678a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25252", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/60472", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-25252-POC\nURL\uff1ahttps://github.com/mbanyamer/MSC-EvilTwin-Local-Privilege-Escalation\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-11-22T10:11:00.000000Z"}, {"uuid": "db674fac-2cfe-4ce8-900e-683eb318e815", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25296", "type": "seen", "source": "https://t.me/cvedetector/18140", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25296 - Label Studio Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25296 \nPublished : Feb. 14, 2025, 8:15 p.m. | 2\u00a0hours, 13\u00a0minutes ago \nDescription : Label Studio is an open source data labeling tool. Prior to version 1.16.0, Label Studio's `/projects/upload-example` endpoint allows injection of arbitrary HTML through a `GET` request with an appropriately crafted `label_config` query parameter. By crafting a specially formatted XML label config with inline task data containing malicious HTML/JavaScript, an attacker can achieve Cross-Site Scripting (XSS). While the application has a Content Security Policy (CSP), it is only set in report-only mode, making it ineffective at preventing script execution. The vulnerability exists because the upload-example endpoint renders user-provided HTML content without proper sanitization on a GET request. This allows attackers to inject and execute arbitrary JavaScript in victims' browsers by getting them to visit a maliciously crafted URL. This is considered vulnerable because it enables attackers to execute JavaScript in victims' contexts, potentially allowing theft of sensitive data, session hijacking, or other malicious actions. Version 1.16.0 contains a patch for the issue. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-15T00:08:40.000000Z"}, {"uuid": "c9652248-26d7-424d-a978-6b8565f4b28e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25252", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/58082", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-25252-POC\nURL\uff1ahttps://github.com/iptables6cv/CVE-2025-25252-POC\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-11-03T08:54:03.000000Z"}, {"uuid": "7d516201-f8f9-4158-9a42-b3a13170fd7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25295", "type": "seen", "source": "https://t.me/cvedetector/18127", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25295 - Label Studio Path Traversal File Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25295 \nPublished : Feb. 14, 2025, 5:15 p.m. | 1\u00a0hour, 2\u00a0minutes ago \nDescription : Label Studio is an open source data labeling tool. A path traversal vulnerability in Label Studio SDK versions prior to 1.0.10 allows unauthorized file access outside the intended directory structure. The flaw exists in the VOC, COCO and YOLO export functionalities. These functions invoke a `download` function on the `label-studio-sdk` python package, which fails to validate file paths when processing image references during task exports. By creating tasks with path traversal sequences in the image field, an attacker can force the application to read files from arbitrary server filesystem locations when exporting projects in any of the mentioned formats. This is authentication-required vulnerability allowing arbitrary file reads from the server filesystem. It may lead to potential exposure of sensitive information like configuration files, credentials, and confidential data. Label Studio versions before 1.16.0 specified SDK versions prior to 1.0.10 as dependencies, and the issue was confirmed in Label Studio version 1.13.2.dev0; therefore, Label Studio users should upgrade to 1.16.0 or newer to mitigate it. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-14T19:57:02.000000Z"}, {"uuid": "a13c37db-0b90-40c2-b5bc-4abb32834b4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25988", "type": "seen", "source": "https://t.me/cvedetector/18126", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25988 - Hooskcms Cross-Site Scripting Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2025-25988 \nPublished : Feb. 14, 2025, 5:15 p.m. | 1\u00a0hour, 2\u00a0minutes ago \nDescription : Cross Site Scripting vulnerability in hooskcms v.1.8 allows a remote attacker to cause a denial of service via the custom Link title parameter and the Title parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-14T19:57:01.000000Z"}, {"uuid": "a667beec-c29f-42aa-81a5-98ad2c4d22c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25994", "type": "seen", "source": "https://t.me/cvedetector/18125", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25994 - FeMiner wms SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25994 \nPublished : Feb. 14, 2025, 5:15 p.m. | 1\u00a0hour, 2\u00a0minutes ago \nDescription : SQL Injection vulnerability in FeMiner wms wms 1.0 allows a remote attacker to obtain sensitive information via the parameters date1, date2, id. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-14T19:57:00.000000Z"}, {"uuid": "60657d14-1272-40ce-b358-27a6a8449580", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25198", "type": "published-proof-of-concept", "source": "Telegram/sHgA-eh7Ixai0xpiEbF_fK8-0YyKLTE6GOn4mKGdY4CpWPE", "content": "", "creation_timestamp": "2025-10-14T09:00:05.000000Z"}, {"uuid": "3f72dfb6-5be0-4000-b8ea-b63467abf026", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25993", "type": "seen", "source": "https://t.me/cvedetector/18124", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25993 - FeMiner wms SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-25993 \nPublished : Feb. 14, 2025, 5:15 p.m. | 1\u00a0hour, 2\u00a0minutes ago \nDescription : SQL Injection vulnerability in FeMiner wms wms 1.0 allows a remote attacker to obtain sensitive information via the parameter \"itemid.\" \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-14T19:56:59.000000Z"}, {"uuid": "3420d8aa-fea9-4a3c-9c3d-054582ae2ffd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25992", "type": "seen", "source": "https://t.me/cvedetector/18123", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25992 - FeMiner wms SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-25992 \nPublished : Feb. 14, 2025, 5:15 p.m. | 1\u00a0hour, 2\u00a0minutes ago \nDescription : SQL Injection vulnerability in FeMiner wms 1.0 allows a remote attacker to obtain sensitive information via the inquire_inout_item.php component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-14T19:56:55.000000Z"}, {"uuid": "60adcf48-e0cb-420c-97bc-2613b3f8b9c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25991", "type": "seen", "source": "https://t.me/cvedetector/18122", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25991 - HooskCMS SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25991 \nPublished : Feb. 14, 2025, 5:15 p.m. | 1\u00a0hour, 2\u00a0minutes ago \nDescription : SQL Injection vulnerability in hooskcms v.1.7.1 allows a remote attacker to obtain sensitive information via the /install/index.php component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-14T19:56:54.000000Z"}, {"uuid": "cd5436d3-1fe0-44b8-88de-2b609b095ac2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25990", "type": "seen", "source": "https://t.me/cvedetector/18121", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25990 - \"HooskCMS Cross-Site Scripting (XSS)\"\", \n  \"Content\": \"CVE ID : CVE-2025-25990 \nPublished : Feb. 14, 2025, 5:15 p.m. | 1\u00a0hour, 2\u00a0minutes ago \nDescription : Cross Site Scripting vulnerability in hooskcms v.1.7.1 allows a remote attacker to obtain sensitive information via the /install/index.php component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-14T19:56:53.000000Z"}, {"uuid": "844ac9ad-47fb-46d6-beab-54731625f944", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25997", "type": "seen", "source": "https://t.me/cvedetector/18115", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25997 - FeMiner wms Directory Traversal Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-25997 \nPublished : Feb. 14, 2025, 5:15 p.m. | 1\u00a0hour, 2\u00a0minutes ago \nDescription : Directory Traversal vulnerability in FeMiner wms v.1.0 allows a remote attacker to obtain sensitive information via the databak.php component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-14T19:56:46.000000Z"}, {"uuid": "6133575b-3203-432c-b73b-35a0b9e0640e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25740", "type": "seen", "source": "https://t.me/cvedetector/18106", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25740 - D-Link DIR-853 Router Stack-Based Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25740 \nPublished : Feb. 14, 2025, 3:15 p.m. | 1\u00a0hour, 1\u00a0minute ago \nDescription : D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the PSK parameter in the SetQuickVPNSettings module. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-14T17:26:12.000000Z"}, {"uuid": "9ed2f4e5-9b3c-4625-960d-6ef7fd0b5762", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25965", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/13576", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aA critical SQL Injection vulnerability (CVE-2025-25964) discovered in the School Information Management System v1.0\nURL\uff1ahttps://github.com/Sudo-Sakib/CVE-2025-25965\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-02-15T16:04:26.000000Z"}, {"uuid": "ce60d49e-dbba-4880-8d79-a82033ab2413", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25964", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/13576", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aA critical SQL Injection vulnerability (CVE-2025-25964) discovered in the School Information Management System v1.0\nURL\uff1ahttps://github.com/Sudo-Sakib/CVE-2025-25965\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-02-15T16:04:26.000000Z"}, {"uuid": "d20f971d-5831-4b52-80bf-50a1357d08cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25964", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/13571", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aA critical SQL Injection vulnerability (CVE-2025-25964) discovered in the School Information Management System v1.0\nURL\uff1ahttps://github.com/Sudo-Sakib/CVE-2025-25964\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-02-15T15:27:24.000000Z"}, {"uuid": "c1b37e9a-c361-45a5-837f-2bc6021a4342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25369", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/15681", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-25369\nURL\uff1ahttps://github.com/DRAGOWN/CVE-2025-26264\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-02-26T18:12:45.000000Z"}, {"uuid": "dd04a58a-556a-4ab7-900c-5702f872d43e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25163", "type": "seen", "source": "https://t.me/GithubRedTeam/14190", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1a Detects an authentication bypass vulnerability in Palo Alto PAN-OS (CVE-2025-0108).\nURL\uff1ahttps://github.com/rootharpy/CVE-2025-25163-Nuclei-Template\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-02-19T04:30:57.000000Z"}, {"uuid": "f0f8a3d8-3af2-49b6-b4b3-700ecc345ebb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25296", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/16146", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aProof of Concept (POC) for the CVE-2025-25296 vulnerability affecting Label Studio versions prior to 1.16.0\nURL\uff1ahttps://github.com/math-x-io/CVE-2025-25296-POC\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-03-01T02:12:08.000000Z"}, {"uuid": "47852db6-917e-43e9-8125-f75404843369", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25650", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/19522", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aThis repository is for Dorset_SmartLock_vulnerability for CVE-2025-25650 suggested by MITRE.\nURL\uff1ahttps://github.com/AbhijithAJ/Dorset_SmartLock_Vulnerability\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-03-16T08:06:06.000000Z"}, {"uuid": "e3aeb4d7-b4d3-4b0d-b64f-143299665f3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/48521", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-25256: Fortinet FortiSIEM OS Command Injection CVE PoC (Proof of Concept)\nURL\uff1ahttps://github.com/JMS-Security/CVE-2025-25256-PoC\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-08-21T09:28:44.000000Z"}, {"uuid": "4db17140-5b17-49a8-8ba6-bd5b58fb87bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25195", "type": "seen", "source": "https://t.me/cvedetector/18064", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25195 - Zulip Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25195 \nPublished : Feb. 13, 2025, 10:15 p.m. | 1\u00a0hour, 33\u00a0minutes ago \nDescription : Zulip is an open source team chat application. A weekly cron job (added in 50256f48314250978f521ef439cafa704e056539) demotes channels to being \"inactive\" after they have not received traffic for 180 days.  However, upon doing so, an event was sent to all users in the organization, not just users in the channel.  This event contained the name of the private channel. Similarly, the same commit (50256f48314250978f521ef439cafa704e056539) added functionality to notify clients when channels stopped being \"inactive.\"  The first message sent to a private channel which had not previously had any messages for over 180 days (and were thus already marked \"inactive\") would leak an event to all users in the organization; this event also contained the name of the private channel. Commits 75be449d456d29fef27e9d1828bafa30174284b4 and a2a1a7f8d152296c8966f1380872c0ac69e5c87e fixed the issue. This vulnerability only existed in `main`, and was not part of any published versions. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-14T01:32:28.000000Z"}, {"uuid": "7f86e605-a40e-4b7c-85f8-b7f24fcd3724", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/44412", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aExploiting the CVE-2025-25257 vulnerability in FortiWeb. This repository demonstrates secure pre-authenticated SQL injection.\nURL\uff1ahttps://github.com/aitorfirm/CVE-2025-25257\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-07-18T01:56:33.000000Z"}, {"uuid": "119576db-b01f-4130-8be4-35f668fc6dd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2539", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/39861", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-2539 - WordPress File Away <= 3.9.9.0.1 - Arbitrary File Read\nURL\uff1ahttps://github.com/Yucaerin/CVE-2025-2539\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-06-09T15:12:39.000000Z"}, {"uuid": "36319e94-775c-4b72-8996-47968119dd2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/43671", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aFortiWeb CVE-2025-25257 exploit\nURL\uff1ahttps://github.com/0xbigshaq/CVE-2025-25257\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-07-11T13:00:17.000000Z"}, {"uuid": "806aaa82-68d4-4c99-8db1-f2435027039a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/43801", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-25257\nURL\uff1ahttps://github.com/B1ack4sh/Blackash-CVE-2025-25257\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-07-12T16:09:35.000000Z"}, {"uuid": "6cfdf027-31df-45e3-9b5e-acd98817a123", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/43794", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aTool for detecting and exploiting CVE-2025-25257 in Fortinet FortiWeb.\nURL\uff1ahttps://github.com/adilburaksen/CVE-2025-25257-Exploit-Tool\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-07-12T14:55:08.000000Z"}, {"uuid": "1516f37d-f97a-4279-82e8-fc55ac74dac9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/47580", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-25256: Fortinet FortiSIEM OS Command Injection PoC\nURL\uff1ahttps://github.com/barbaraeivyu/CVE-2025-25256\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-08-13T13:35:58.000000Z"}, {"uuid": "51dedf62-a641-4649-9150-813ed7ce049a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/44601", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aPublic PoC for CVE-2025-25257: FortiWeb pre-auth SQLi to RCE\nURL\uff1ahttps://github.com/TheStingR/CVE-2025-25257\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-07-19T16:00:07.000000Z"}, {"uuid": "c0f4a4fa-249f-4d3e-acaf-4d6c85653a22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/44602", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aPublic PoC for CVE-2025-25257: FortiWeb pre-auth SQLi to RCE\nURL\uff1ahttps://github.com/BlankVox/PayloadLab\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2025-07-19T16:04:20.000000Z"}, {"uuid": "425378a9-1cf2-4285-9ab3-f0d4aad7fed5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25014", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/44890", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-25014\nURL\uff1ahttps://github.com/B1ack4sh/Blackash-CVE-2025-25014\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-07-21T23:06:55.000000Z"}, {"uuid": "99c5c6f3-5aca-4f97-8890-e1196c02702f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25744", "type": "seen", "source": "https://t.me/cvedetector/17914", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25744 - D-Link DIR-853 Stack-Based Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25744 \nPublished : Feb. 12, 2025, 5:15 p.m. | 1\u00a0hour, 46\u00a0minutes ago \nDescription : D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the Password parameter in the SetDynamicDNSSettings module. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T20:14:12.000000Z"}, {"uuid": "172e6bff-802e-4ffb-ae77-47ca9cb8535a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25901", "type": "seen", "source": "https://t.me/cvedetector/18022", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25901 - TP-Link TL-WR841ND DNS Server Buffer Overflow Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2025-25901 \nPublished : Feb. 13, 2025, 4:16 p.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11, triggered by the dnsserver1 and dnsserver2 parameters at /userRpm/WanSlaacCfgRpm.htm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted packet. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T18:50:24.000000Z"}, {"uuid": "acd63364-6e8f-413f-9213-8cab4faff5b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25900", "type": "seen", "source": "https://t.me/cvedetector/18021", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25900 - TP-Link TL-WR841ND Router Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25900 \nPublished : Feb. 13, 2025, 4:16 p.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the username and password parameters at /userRpm/PPPoEv6CfgRpm.htm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted packet. \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T18:50:24.000000Z"}, {"uuid": "f7781b18-93f8-4983-a326-0fbba6bc2665", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25063", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/48201", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-25063 MadeYouReset HTTP/2 DDoS\nURL\uff1ahttps://github.com/moften/CVE-2025-25063-MadeYouReset-HTTP-2-DDoS\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-08-18T19:20:13.000000Z"}, {"uuid": "fd4a00ce-c13d-4f60-bdb1-1718d8f84095", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2502", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/50353", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-2502 / CNVD-2025-16450 \u8054\u60f3\u7535\u8111\u7ba1\u5bb6\u6743\u9650\u63d0\u5347\u6f0f\u6d1e\nURL\uff1ahttps://github.com/IHK-ONE/CVE-2025-2502\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-09-05T09:23:30.000000Z"}, {"uuid": "c25c0db4-7df3-4c76-b4b5-4d8455a874a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/52508", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aA working (at least for me :] ) exploit for CVE-2025-25257\nURL\uff1ahttps://github.com/segfault-it/CVE-2025-25257\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-09-21T10:34:08.000000Z"}, {"uuid": "0caf2821-0119-4777-a994-c92c0f17e9e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/52701", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1a\ud83d\udee0\ufe0f Exploit CVE-2025-25257 in FortiWeb with a working full exploit and a proof of concept for file read/write.\nURL\uff1ahttps://github.com/kityzed2003/CVE-2025-25257\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-09-22T22:59:17.000000Z"}, {"uuid": "d05c6e2a-e298-4456-81b2-a88cbe7d08f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25292", "type": "seen", "source": "https://t.me/tech_b0lt_Genona/5097", "content": "\u041d\u0430\u0448\u0430 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u0430\u044f \u0440\u0443\u0431\u0440\u0438\u043a\u0430\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u043c \u0433\u0438\u0442\u043b\u0430\u0431\u0447\u0438\u043a\u0438 \ud83d\udc85\ud83d\udc85\ud83d\udc85\n\nGitLab has remediated two privately disclosed security issues (CVE-2025-25291, CVE-2025-25292) identified in the ruby-saml library which GitLab uses when SAML SSO authentication is enabled at the instance or group level. These issues have been remediated on GitLab.com, and in GitLab CE/EE versions 17.7.7, 17.8.5, and 17.9.2.\n\nOn GitLab CE/EE instances using SAML authentication, under certain circumstances, an attacker with access to a valid signed SAML document from the IdP could authenticate as another valid user within the environment's SAML IdP.\n\nSelf Managed GitLab: Known Mitigations\n\nAffected customers who cannot immediately update GitLab CE/EE to address these issues may choose to perform the following mitigation steps:\n\nNote: This vulnerability requires the attacker to have compromised a valid user account to perform the authentication bypass.\n\n- Enable GitLab two-factor authentication for all user accounts on the GitLab self-managed instance (NOTE: Enabling identity provider multi-factor authentication does not mitigate this vulnerability) and\n\n- Do not allow the SAML two-factor bypass option in GitLab and\n\n- Require admin approval for automatically created new users (gitlab_rails['omniauth_block_auto_created_users'] = true)\n\nhttps://about.gitlab.com/releases/2025/03/12/patch-release-gitlab-17-9-2-released/", "creation_timestamp": "2025-03-13T06:45:02.000000Z"}, {"uuid": "968d7bab-ac9f-4a99-a4cc-ed39da78c795", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "seen", "source": "https://t.me/tech_b0lt_Genona/5097", "content": "\u041d\u0430\u0448\u0430 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u0430\u044f \u0440\u0443\u0431\u0440\u0438\u043a\u0430\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u043c \u0433\u0438\u0442\u043b\u0430\u0431\u0447\u0438\u043a\u0438 \ud83d\udc85\ud83d\udc85\ud83d\udc85\n\nGitLab has remediated two privately disclosed security issues (CVE-2025-25291, CVE-2025-25292) identified in the ruby-saml library which GitLab uses when SAML SSO authentication is enabled at the instance or group level. These issues have been remediated on GitLab.com, and in GitLab CE/EE versions 17.7.7, 17.8.5, and 17.9.2.\n\nOn GitLab CE/EE instances using SAML authentication, under certain circumstances, an attacker with access to a valid signed SAML document from the IdP could authenticate as another valid user within the environment's SAML IdP.\n\nSelf Managed GitLab: Known Mitigations\n\nAffected customers who cannot immediately update GitLab CE/EE to address these issues may choose to perform the following mitigation steps:\n\nNote: This vulnerability requires the attacker to have compromised a valid user account to perform the authentication bypass.\n\n- Enable GitLab two-factor authentication for all user accounts on the GitLab self-managed instance (NOTE: Enabling identity provider multi-factor authentication does not mitigate this vulnerability) and\n\n- Do not allow the SAML two-factor bypass option in GitLab and\n\n- Require admin approval for automatically created new users (gitlab_rails['omniauth_block_auto_created_users'] = true)\n\nhttps://about.gitlab.com/releases/2025/03/12/patch-release-gitlab-17-9-2-released/", "creation_timestamp": "2025-03-13T06:45:02.000000Z"}, {"uuid": "abebef33-ca4d-472b-bec1-012279d61987", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "published-proof-of-concept", "source": "Telegram/J-PhafyQf6f3Hij6OUnT0iaYNrRFOs8W10WphbkjXqmho4M", "content": "", "creation_timestamp": "2025-09-23T03:00:07.000000Z"}, {"uuid": "c3004135-c028-4bce-ad83-ec1a516b2412", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25354", "type": "seen", "source": "https://t.me/cvedetector/18033", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25354 - PHPGurukul Land Record System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-25354 \nPublished : Feb. 13, 2025, 4:16 p.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : A SQL Injection was found in /admin/admin-profile.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the contactnumber POST request parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T18:50:42.000000Z"}, {"uuid": "aa55c685-76fd-4852-9eeb-ccad062633f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25899", "type": "seen", "source": "https://t.me/cvedetector/18031", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25899 - TP-Link TL-WR841ND Router Buffer Overflow Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2025-25899 \nPublished : Feb. 13, 2025, 4:16 p.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the 'gw' parameter at /userRpm/WanDynamicIpV6CfgRpm.htm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted packet. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T18:50:38.000000Z"}, {"uuid": "fda13666-4832-4999-8926-200af59c4c17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25898", "type": "seen", "source": "https://t.me/cvedetector/18030", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25898 - TP-Link TL-WR841ND Wireless Router Buffer Overflow Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25898 \nPublished : Feb. 13, 2025, 4:16 p.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the pskSecret parameter at /userRpm/WlanSecurityRpm.htm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted packet. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T18:50:37.000000Z"}, {"uuid": "2b3894ed-cbd1-41b6-97cc-efc679e13648", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25897", "type": "seen", "source": "https://t.me/cvedetector/18029", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25897 - TP-Link TL-WR841ND Buffer Overflow Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2025-25897 \nPublished : Feb. 13, 2025, 4:16 p.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the 'ip' parameter at /userRpm/WanStaticIpV6CfgRpm.htm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted packet. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T18:50:36.000000Z"}, {"uuid": "a8fcd6c0-8468-4e3f-a826-ac1e7147146b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25014", "type": "seen", "source": "https://t.me/NinjaSec/298", "content": "Certainly! Below is a curated list of critical CVEs from 2025 that involve code execution, browser bypasses, and internal service exposure. These are provided strictly for educational purposes to aid in understanding and mitigating such vulnerabilities.\n\n\n\ud83d\udd10 Critical CVEs from 2025 (Educational Use Only)\n\n1. CVE-2025-47241\n\nDescription: Whitelist bypass in the Browser Use automation tool allows attackers to access internal services via crafted URLs.\n\nCVSS Score: 9.3\n\nReference: \n\n\n\n2. CVE-2025-25014\n\nDescription: Prototype pollution in Kibana leads to arbitrary code execution through crafted HTTP requests to machine learning and reporting endpoints.\n\nCVSS Score: 9.1\n\nReference: \n\n\n\n3. CVE-2025-29927\n\nDescription: Authorization bypass in Next.js middleware allows attackers to access protected routes by manipulating internal headers.\n\nCVSS Score: 9.1\n\nReference: \n\n\n\n4. CVE-2025-24813\n\nDescription: \n\nCVSS Score: \n\nReference: \n\n\n\n5. CVE-2025-2783\n\nDescription: \n\nCVSS Score: High\n\nReference: \n\n\n\n6. CVE-2025-2636\n\nDescription: \n\nCVSS Score: High\n\nReference: \n\n\n\n7. CVE-2025-2505\n\nDescription: \n\nCVSS Score: High\n\nReference: \n\n\n\n8. CVE-2025-2746 & CVE-2025-2747\n\nDescription: \n\nCVSS Score: \n\nReference: \n\n\n\n9. CVE-2025-3066\n\nDescription: \n\nCVSS Score: High\n\nReference: \n\n\n\n10. CVE-2025-46728\n\nDescription: Denial of Service vulnerability in cpp-httplib, potentially exposing servers to service disruptions.\n\nCVSS Score: High\n\nReference: \n\n#HackersFactory", "creation_timestamp": "2025-05-19T12:58:14.000000Z"}, {"uuid": "1f164ed3-4c87-4f14-a7e8-d05088e504f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://t.me/ics_cert/1237", "content": "\u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u062a\u0627\u0628\u0639 get_fabric_user_by_token() \u0627\u0632 \u06a9\u0627\u0645\u067e\u0648\u0646\u0646\u062a Fabric Connector \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u0628\u0631\u0646\u0627\u0645\u0647 \u0648\u0628 FortiWeb \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u067e\u0631\u062f\u0627\u0632\u0634 \u0646\u0627\u062f\u0631\u0633\u062a \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc HTTP \u0628\u0627 \u0647\u062f\u0631 Authorization \u0627\u0633\u062a. \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0628\u0647 \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u062a\u0627 \u0628\u0627 \u0627\u0631\u0633\u0627\u0644 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc HTTP \u0648 HTTPs \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc\u200c\u0634\u062f\u0647 \u062e\u0627\u0635\u060c \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u06cc\u0627 \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u062f\u0644\u062e\u0648\u0627\u0647 \u0631\u0627 \u0627\u062c\u0631\u0627 \u06a9\u0646\u062f.\n\nBDU:2025-08439\nCVE-2025-25257\n\n\u0646\u0635\u0628 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627 \u0627\u0632 \u0645\u0646\u0627\u0628\u0639 \u0645\u0639\u062a\u0628\u0631. \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627\u06cc \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0631\u0627 \u0641\u0642\u0637 \u067e\u0633 \u0627\u0632 \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u062a\u0645\u0627\u0645 \u062e\u0637\u0631\u0627\u062a \u0645\u0631\u062a\u0628\u0637 \u0646\u0635\u0628 \u06a9\u0646\u06cc\u062f.\n\n\u0627\u0642\u062f\u0627\u0645\u0627\u062a \u062c\u0628\u0631\u0627\u0646\u06cc:\n- \u063a\u06cc\u0631\u0641\u0639\u0627\u0644 \u06a9\u0631\u062f\u0646 \u0631\u0627\u0628\u0637 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0648\u0628 \u062f\u0633\u062a\u06af\u0627\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u061b\n- \u0628\u062e\u0634\u200c\u0628\u0646\u062f\u06cc \u0634\u0628\u06a9\u0647 \u0628\u0647 \u0645\u0646\u0638\u0648\u0631 \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u062f\u0633\u062a\u06af\u0627\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0627\u0632 \u0633\u0627\u06cc\u0631 \u0632\u06cc\u0631\u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u061b\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc SIEM \u0628\u0631\u0627\u06cc \u0631\u062f\u06cc\u0627\u0628\u06cc \u062a\u0644\u0627\u0634\u200c\u0647\u0627 \u0628\u0631\u0627\u06cc \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u061b\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc \u062e\u0635\u0648\u0635\u06cc \u0645\u062c\u0627\u0632\u06cc \u0628\u0631\u0627\u06cc \u0633\u0627\u0632\u0645\u0627\u0646\u062f\u0647\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 (VPN)\u061b\n- \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645 \u0627\u0632 \u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc \u062e\u0627\u0631\u062c\u06cc (\u0627\u06cc\u0646\u062a\u0631\u0646\u062a). - \u063a\u06cc\u0631\u0641\u0639\u0627\u0644 \u06a9\u0631\u062f\u0646 \u0642\u0627\u0628\u0644\u06cc\u062a \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u067e\u0631\u0648\u062a\u06a9\u0644\u200c\u0647\u0627\u06cc HTTP \u0648 HTTPS \u0645\u0637\u0627\u0628\u0642 \u0628\u0627 \u062f\u0633\u062a\u0648\u0631\u0627\u0644\u0639\u0645\u0644\u200c\u0647\u0627\u06cc \u062a\u0648\u0633\u0639\u0647\u200c\u062f\u0647\u0646\u062f\u0647 (https://docs.fortinet.com/document/fortiweb/7.6.2/administration-guide/685507/how-to-use-the-web-ui)\n\n\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u062a\u0648\u0635\u06cc\u0647\u200c\u0647\u0627:\nhttps://fortiguard.fortinet.com/psirt/FG-IR-25-151\n\ud83c\udfed \u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\u0627\u062f\u0645\u06cc\u0646:\n\u200fhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ICSCERT_IR\n\u06af\u0631\u0648\u0647 \u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2", "creation_timestamp": "2025-07-17T17:26:10.000000Z"}, {"uuid": "0def5e8c-a8a1-4f8a-9038-63f18a5e0603", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://t.me/ics_cert/1293", "content": "\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0633\u0631\u0648\u06cc\u0633 \u0646\u0638\u0627\u0631\u062a \u0628\u0631 \u0648\u0636\u0639\u06cc\u062a \u0641\u0631\u0622\u06cc\u0646\u062f phMonitor \u062f\u0631 \u0633\u06cc\u0633\u062a\u0645 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0627\u0645\u0646\u06cc\u062a FortiSIEM \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0639\u062f\u0645 \u0627\u0646\u062c\u0627\u0645 \u0627\u0642\u062f\u0627\u0645\u0627\u062a \u0644\u0627\u0632\u0645 \u0628\u0631\u0627\u06cc \u062e\u0646\u062b\u06cc\u200c\u0633\u0627\u0632\u06cc \u0639\u0646\u0627\u0635\u0631 \u062e\u0627\u0635 \u0627\u0633\u062a. \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u06cc \u06a9\u0647 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0627\u0642\u062f\u0627\u0645 \u0628\u0647 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u0648 \u0627\u0641\u0632\u0627\u06cc\u0634 \u0627\u0645\u062a\u06cc\u0627\u0632\u0627\u062a \u062e\u0648\u062f \u0628\u0627 \u0627\u0631\u0633\u0627\u0644 \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u062e\u0627\u0635 \u0645\u06cc\u200c\u06a9\u0646\u062f\u060c \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f.\n\nBDU:2025-09821\nCVE-2025-25256\n\n\u0646\u0635\u0628 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627 \u0627\u0632 \u0645\u0646\u0627\u0628\u0639 \u0645\u0639\u062a\u0628\u0631. \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627\u06cc \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u06cc \u0631\u0627 \u062a\u0646\u0647\u0627 \u067e\u0633 \u0627\u0632 \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u062a\u0645\u0627\u0645 \u062e\u0637\u0631\u0627\u062a \u0645\u0631\u062a\u0628\u0637 \u0646\u0635\u0628 \u06a9\u0646\u06cc\u062f.\n\n\u0627\u0642\u062f\u0627\u0645\u0627\u062a \u062c\u0628\u0631\u0627\u0646\u06cc:\n- \u0641\u06cc\u0644\u062a\u0631 \u06a9\u0631\u062f\u0646 \u062a\u0631\u0627\u0641\u06cc\u06a9 \u0634\u0628\u06a9\u0647 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u067e\u0648\u0631\u062a \u0634\u0628\u06a9\u0647 \u06f7\u06f9\u06f0\u06f0\u061b\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644\u200c\u0647\u0627 \u0628\u0631\u0627\u06cc \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0628\u0647 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u061b\n- \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0637\u0631\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \"\u0644\u06cc\u0633\u062a \u0633\u0641\u06cc\u062f\"\u061b\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u062a\u0634\u062e\u06cc\u0635 \u0648 \u067e\u06cc\u0634\u06af\u06cc\u0631\u06cc \u0627\u0632 \u0646\u0641\u0648\u0630 \u0628\u0631\u0627\u06cc \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc (\u0634\u0646\u0627\u0633\u0627\u06cc\u06cc\u060c \u062b\u0628\u062a) \u0648 \u067e\u0627\u0633\u062e \u0628\u0647 \u062a\u0644\u0627\u0634\u200c\u0647\u0627\u06cc\u06cc \u0628\u0631\u0627\u06cc \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u061b\n- \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0632 \u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc \u062e\u0627\u0631\u062c\u06cc (\u0627\u06cc\u0646\u062a\u0631\u0646\u062a).\n\n\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u062a\u0648\u0635\u06cc\u0647\u200c\u0647\u0627:\nhttps://fortiguard.fortinet.com/psirt/FG-IR-25-152\n\n\ud83d\udca1\u0627\u06af\u0631 \u0627\u06cc\u0646 \u0645\u062a\u0646 \u062f\u06cc\u062f\u06af\u0627\u0647 \u0634\u0645\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\u0628\u06cc\u0627\u06cc\u06cc\u062f \u0628\u0627 \u0647\u0645 \u0627\u0633\u062a\u0627\u0646\u062f\u0627\u0631\u062f\u0647\u0627 \u0631\u0627 \u0628\u0627\u0644\u0627 \u0628\u0628\u0631\u06cc\u0645.\u00a0 \n\ud83c\udfed\u00a0 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n@pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645 :\nhttps://t.me/ICSCERT_IR\n\u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2\n\u06af\u0631\u0648\u0647 \u062a\u062e\u0635\u0635\u06cc \u0648\u0627\u062a\u0633 \u0627\u067e:\nhttps://chat.whatsapp.com/BZu1yr1aeHpCDxiIXotzyW?mode=ac_t", "creation_timestamp": "2025-08-22T12:36:20.000000Z"}, {"uuid": "9f76db34-9bab-4e3e-9ac8-990424d9d7f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25357", "type": "seen", "source": "https://t.me/cvedetector/18028", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25357 - PHPGurukul Land Record System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-25357 \nPublished : Feb. 13, 2025, 4:16 p.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : A SQL Injection vulnerability was found in /admin/contactus.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the email POST request parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T18:50:35.000000Z"}, {"uuid": "9d31be70-f781-4fc9-9aca-4f9a4cf032bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25356", "type": "seen", "source": "https://t.me/cvedetector/18027", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25356 - PHPGurukul Land Record System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-25356 \nPublished : Feb. 13, 2025, 4:16 p.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : A SQL Injection vulnerability was found in /admin/bwdates-reports-details.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the \" todate\" POST request parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T18:50:31.000000Z"}, {"uuid": "78de3917-b323-47ae-8bd9-1eb670055652", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2505", "type": "seen", "source": "https://t.me/NinjaSec/298", "content": "Certainly! Below is a curated list of critical CVEs from 2025 that involve code execution, browser bypasses, and internal service exposure. These are provided strictly for educational purposes to aid in understanding and mitigating such vulnerabilities.\n\n\n\ud83d\udd10 Critical CVEs from 2025 (Educational Use Only)\n\n1. CVE-2025-47241\n\nDescription: Whitelist bypass in the Browser Use automation tool allows attackers to access internal services via crafted URLs.\n\nCVSS Score: 9.3\n\nReference: \n\n\n\n2. CVE-2025-25014\n\nDescription: Prototype pollution in Kibana leads to arbitrary code execution through crafted HTTP requests to machine learning and reporting endpoints.\n\nCVSS Score: 9.1\n\nReference: \n\n\n\n3. CVE-2025-29927\n\nDescription: Authorization bypass in Next.js middleware allows attackers to access protected routes by manipulating internal headers.\n\nCVSS Score: 9.1\n\nReference: \n\n\n\n4. CVE-2025-24813\n\nDescription: \n\nCVSS Score: \n\nReference: \n\n\n\n5. CVE-2025-2783\n\nDescription: \n\nCVSS Score: High\n\nReference: \n\n\n\n6. CVE-2025-2636\n\nDescription: \n\nCVSS Score: High\n\nReference: \n\n\n\n7. CVE-2025-2505\n\nDescription: \n\nCVSS Score: High\n\nReference: \n\n\n\n8. CVE-2025-2746 & CVE-2025-2747\n\nDescription: \n\nCVSS Score: \n\nReference: \n\n\n\n9. CVE-2025-3066\n\nDescription: \n\nCVSS Score: High\n\nReference: \n\n\n\n10. CVE-2025-46728\n\nDescription: Denial of Service vulnerability in cpp-httplib, potentially exposing servers to service disruptions.\n\nCVSS Score: High\n\nReference: \n\n#HackersFactory", "creation_timestamp": "2025-05-19T12:58:14.000000Z"}, {"uuid": "536174d8-3b4f-4dc1-8838-05293c1fa6bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25355", "type": "seen", "source": "https://t.me/cvedetector/18026", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25355 - PHPGurukul Land Record System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-25355 \nPublished : Feb. 13, 2025, 4:16 p.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : A SQL Injection vulnerability was found in /admin/bwdates-reports-details.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the fromdate POST request parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T18:50:31.000000Z"}, {"uuid": "7c0fae98-3bfe-4261-95b2-bac452f46abc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2505", "type": "seen", "source": "https://t.me/NinjaSec/299", "content": "Code execution, and bypass vulnerabilities \u2014 for educational purposes only:\n\n\n1. CVE-2025-47241 \u2013 Whitelist bypass in Browser Use tool (CVSS 9.3)\n2. CVE-2025-25014 \u2013 Prototype pollution in Kibana (CVSS 9.1)\n3. CVE-2025-29927 \u2013 Next.js middleware authorization bypass (CVSS 9.1)\n4. CVE-2025-24813 \u2013 Apache Tomcat path traversal RCE (Critical)\n5. CVE-2025-2783 \u2013 Chrome Mojo use-after-free (High)\n6. CVE-2025-2636 \u2013 WordPress InstaWP plugin LFI (High)\n7. CVE-2025-2505 \u2013 WordPress Age Gate plugin LFI (High)\n8. CVE-2025-2746 \u2013 Kentico CMS auth bypass (CVSS 9.8)\n9. CVE-2025-2747 \u2013 Kentico CMS staging sync auth bypass (CVSS 9.8)\n10. CVE-2025-3066 \u2013 Chrome Site Isolation use-after-free (High)\n11. CVE-2025-46728 \u2013 cpp-httplib DoS vulnerability\n12. CVE-2025-12345 \u2013 Buffer overflow in XYZ app (CVSS 9.0)\n13. CVE-2025-12346 \u2013 SQL injection in ABC web app (CVSS 8.5)\n14. CVE-2025-12347 \u2013 XSS in DEF platform (CVSS 7.8)\n15. CVE-2025-12348 \u2013 Auth bypass in GHI system (CVSS 9.2)\n16. CVE-2025-12349 \u2013 RCE in JKL service via crafted packets (CVSS 9.5)\n17. CVE-2025-12350 \u2013 Privilege escalation in MNO app (CVSS 8.7)\n18. CVE-2025-12351 \u2013 Info disclosure in PQR system (CVSS 7.5)\n19. CVE-2025-12352 \u2013 DoS in STU server (CVSS 6.8)\n20. CVE-2025-12353 \u2013 Directory traversal in VWX app (CVSS 8.0)\n21. CVE-2025-12354 \u2013 Command injection in YZA tool (CVSS 9.1)\n22. CVE-2025-12355 \u2013 Insecure deserialization in BCD lib (CVSS 9.3)\n23. CVE-2025-12356 \u2013 CSRF in EFG portal (CVSS 7.2)\n24. CVE-2025-12357 \u2013 Memory corruption in HIJ driver (CVSS 8.9)\n25. CVE-2025-12358 \u2013 Improper auth in KLM API (CVSS 9.0)\n\n#HackersFactory", "creation_timestamp": "2025-05-07T15:48:27.000000Z"}, {"uuid": "f98ced2e-2904-4d3b-94d7-468c165814be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25014", "type": "seen", "source": "https://t.me/NinjaSec/299", "content": "Code execution, and bypass vulnerabilities \u2014 for educational purposes only:\n\n\n1. CVE-2025-47241 \u2013 Whitelist bypass in Browser Use tool (CVSS 9.3)\n2. CVE-2025-25014 \u2013 Prototype pollution in Kibana (CVSS 9.1)\n3. CVE-2025-29927 \u2013 Next.js middleware authorization bypass (CVSS 9.1)\n4. CVE-2025-24813 \u2013 Apache Tomcat path traversal RCE (Critical)\n5. CVE-2025-2783 \u2013 Chrome Mojo use-after-free (High)\n6. CVE-2025-2636 \u2013 WordPress InstaWP plugin LFI (High)\n7. CVE-2025-2505 \u2013 WordPress Age Gate plugin LFI (High)\n8. CVE-2025-2746 \u2013 Kentico CMS auth bypass (CVSS 9.8)\n9. CVE-2025-2747 \u2013 Kentico CMS staging sync auth bypass (CVSS 9.8)\n10. CVE-2025-3066 \u2013 Chrome Site Isolation use-after-free (High)\n11. CVE-2025-46728 \u2013 cpp-httplib DoS vulnerability\n12. CVE-2025-12345 \u2013 Buffer overflow in XYZ app (CVSS 9.0)\n13. CVE-2025-12346 \u2013 SQL injection in ABC web app (CVSS 8.5)\n14. CVE-2025-12347 \u2013 XSS in DEF platform (CVSS 7.8)\n15. CVE-2025-12348 \u2013 Auth bypass in GHI system (CVSS 9.2)\n16. CVE-2025-12349 \u2013 RCE in JKL service via crafted packets (CVSS 9.5)\n17. CVE-2025-12350 \u2013 Privilege escalation in MNO app (CVSS 8.7)\n18. CVE-2025-12351 \u2013 Info disclosure in PQR system (CVSS 7.5)\n19. CVE-2025-12352 \u2013 DoS in STU server (CVSS 6.8)\n20. CVE-2025-12353 \u2013 Directory traversal in VWX app (CVSS 8.0)\n21. CVE-2025-12354 \u2013 Command injection in YZA tool (CVSS 9.1)\n22. CVE-2025-12355 \u2013 Insecure deserialization in BCD lib (CVSS 9.3)\n23. CVE-2025-12356 \u2013 CSRF in EFG portal (CVSS 7.2)\n24. CVE-2025-12357 \u2013 Memory corruption in HIJ driver (CVSS 8.9)\n25. CVE-2025-12358 \u2013 Improper auth in KLM API (CVSS 9.0)\n\n#HackersFactory", "creation_timestamp": "2025-05-07T15:48:27.000000Z"}, {"uuid": "33ad0fa7-11c5-4a0a-91c0-c3334f46d328", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25352", "type": "seen", "source": "https://t.me/cvedetector/18025", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25352 - PHPGurukul Land Record System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-25352 \nPublished : Feb. 13, 2025, 4:16 p.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : A SQL Injection vulnerability was found in /admin/aboutus.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the pagetitle POST request parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T18:50:30.000000Z"}, {"uuid": "f8a58222-e145-4b56-bbdb-673fff596d8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25389", "type": "seen", "source": "https://t.me/cvedetector/18020", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25389 - PhpGurukul Land Record System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-25389 \nPublished : Feb. 13, 2025, 5:17 p.m. | 24\u00a0minutes ago \nDescription : A SQL Injection vulnerability was found in /admin/forgot-password.php in Phpgurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the contactno POST request parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T18:50:23.000000Z"}, {"uuid": "2fd556cb-6dbc-49e5-ad47-8c887a6749d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25388", "type": "seen", "source": "https://t.me/cvedetector/18019", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25388 - PHPGurukul Land Record System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-25388 \nPublished : Feb. 13, 2025, 5:17 p.m. | 24\u00a0minutes ago \nDescription : A SQL Injection vulnerability was found in /admin/edit-propertytype.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the editid GET request parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T18:50:22.000000Z"}, {"uuid": "6ebaa78e-7920-455b-b826-b8ed9d92b495", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25387", "type": "seen", "source": "https://t.me/cvedetector/18018", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25387 - PHPGurukul Land Record System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25387 \nPublished : Feb. 13, 2025, 5:17 p.m. | 24\u00a0minutes ago \nDescription : A SQL Injection vulnerability was found in /admin/manage-propertytype.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the propertytype POST request parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T18:50:22.000000Z"}, {"uuid": "69146205-740c-4e77-8c48-2b85c4283fb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2539", "type": "published-proof-of-concept", "source": "https://t.me/realcodeb0ss/7", "content": "", "creation_timestamp": "2025-03-28T00:21:56.000000Z"}, {"uuid": "cb9b6355-c8a5-4c40-bd6e-5feb52c2b034", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "published-proof-of-concept", "source": "Telegram/y0-wgPFSw2uBYSD6lxUPg3wYn_XvkbQmctcUlBk3ANzMyq0", "content": "", "creation_timestamp": "2025-09-21T15:00:08.000000Z"}, {"uuid": "3d60d7c7-d6de-4344-869f-0348ea6b7537", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://t.me/TengkorakCyberCrewzz/3718", "content": "Critical Vulnerability Exposes Fortinet FortiWeb to Full Takeover (CVE-2025-25257) \u2013 hackread.com\n\nMon, 14 Jul 2025 00:15:29", "creation_timestamp": "2025-07-14T04:32:56.000000Z"}, {"uuid": "a017395c-3373-4128-8acb-ddbec351c042", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "exploited", "source": "https://t.me/TengkorakCyberCrewzz/4524", "content": "Fortinet Warns About FortiSIEM Vulnerability (CVE-2025-25256) With In-the-Wild Exploit Code \u2013 thehackernews.com\n\nWed, 13 Aug 2025 19:37:00", "creation_timestamp": "2025-08-13T16:03:13.000000Z"}, {"uuid": "fda66347-54eb-49c8-9ecf-b53a7bc0c8ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "published-proof-of-concept", "source": "https://t.me/donnazmi/453", "content": "", "creation_timestamp": "2025-08-16T06:25:52.000000Z"}, {"uuid": "e1fb6c3b-48c6-45e0-bc6b-72dc16947384", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://t.me/donnazmi/451", "content": "Seeing increased scanning activity on TCP port 7900 (FortiSIEM phMonitor), likely related to CVE-2025-25256.", "creation_timestamp": "2025-08-16T06:25:55.000000Z"}, {"uuid": "37b57f71-bcfd-4a09-9f93-e1f64993389e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "exploited", "source": "https://t.me/BleepingComputer/22542", "content": "\u200aNew Fortinet FortiWeb hacks likely linked to public RCE exploits\n\nMultiple Fortinet FortiWeb instances recently infected with web shells are believed to have been compromised using public exploits for a recently patched remote code execution (RCE) flaw tracked as CVE-2025-25257. [...]\n\nhttps://www.bleepingcomputer.com/news/security/new-fortinet-fortiweb-hacks-likely-linked-to-public-rce-exploits/", "creation_timestamp": "2025-07-16T15:22:38.000000Z"}, {"uuid": "3e488988-3c69-453e-8b7a-11ae10d4b3b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25286", "type": "seen", "source": "https://t.me/cvedetector/17960", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25286 - Crayfish/Homarus Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25286 \nPublished : Feb. 13, 2025, 1:15 a.m. | 2\u00a0hours, 8\u00a0minutes ago \nDescription : Crayfish is a collection of Islandora 8 microservices, one of which, Homarus, provides FFmpeg as a microservice. Prior to Crayfish version 4.1.0, remote code execution may be possible in web-accessible installations of Homarus in certain configurations. The issue has been patched in `islandora/crayfish:4.1.0`. Some workarounds are available. The exploit requires making a request against the Homarus's `/convert` endpoint; therefore, the ability to exploit is much reduced if the microservice is not directly accessible from the Internet, so: Prevent general access from the Internet from hitting Homarus. Alternatively or additionally, configure auth in Crayfish to be more strongly required, such that requests with `Authorization` headers that do not validate are rejected before the problematic CLI interpolation occurs. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T04:36:58.000000Z"}, {"uuid": "42f16fd4-9a68-49ae-809e-7ca25129dd7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25201", "type": "seen", "source": "https://t.me/cvedetector/17926", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25201 - Nitrokey 3 PIV Key Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-25201 \nPublished : Feb. 12, 2025, 7:15 p.m. | 1\u00a0hour, 49\u00a0minutes ago \nDescription : Nitrokey 3 Firmware is the the firmware of Nitrokey 3 USB keys. For release 1.8.0, and test releases with PIV enabled prior to 1.8.0, the PIV application could accept invalid keys for authentication of the admin key. This could lead to compromise of the integrity of the data stored in the application. An attacker without access to the proper administration key would be able to generate new keys and overwrite certificates. Such an attacker would not be able to read-out or extract existing private data, nor would they be able to gain access to cryptographic operations that would normally require PIN-based authentication. The issue is fixed in piv-authenticator 0.3.9, and in Nitrokey's firmware 1.8.1. \nSeverity: 4.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T22:45:21.000000Z"}, {"uuid": "c19c4cf3-61f3-426c-a9b4-775a433ffd28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25343", "type": "seen", "source": "https://t.me/cvedetector/17925", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25343 - Tenda AC6 Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25343 \nPublished : Feb. 12, 2025, 7:15 p.m. | 1\u00a0hour, 49\u00a0minutes ago \nDescription : Tenda AC6 V15.03.05.16 firmware has a buffer overflow vulnerability in the formexeCommand function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T22:45:21.000000Z"}, {"uuid": "9ec4e17b-c0db-44c6-9842-fd4efb99d789", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25283", "type": "seen", "source": "https://t.me/cvedetector/17928", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25283 - Parse-Duraton CPU Denial of Service (DoS) and Out-of-Memory Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25283 \nPublished : Feb. 12, 2025, 7:15 p.m. | 1\u00a0hour, 49\u00a0minutes ago \nDescription : parse-duraton is software that allows users to convert a human readable duration to milliseconds. Versions prior to 2.1.3 are vulnerable to an event loop delay due to the CPU-bound operation of resolving the provided string, from a 0.5ms and up to ~50ms per one operation, with a varying size from 0.01 MB and up to 4.3 MB respectively, and an out of memory that would crash a running Node.js application due to a string size of roughly 10 MB that utilizes unicode characters. Version 2.1.3 contains a patch. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T22:45:26.000000Z"}, {"uuid": "ec3ad490-d70b-4e99-8b65-b2a6b4207d93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25205", "type": "seen", "source": "https://t.me/cvedetector/17927", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25205 - Audiobookshelf Regex Pattern Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-25205 \nPublished : Feb. 12, 2025, 7:15 p.m. | 1\u00a0hour, 49\u00a0minutes ago \nDescription : Audiobookshelf is a self-hosted audiobook and podcast server. Starting in version 2.17.0 and prior to version 2.19.1, a flaw in the authentication bypass logic allows unauthenticated requests to match certain unanchored regex patterns in the URL. Attackers can craft URLs containing substrings like \"/api/items/1/cover\" in a query parameter (?r=/api/items/1/cover) to partially bypass authentication or trigger server crashes under certain routes. This could lead to information disclosure of otherwise protected data and, in some cases, a complete denial of service (server crash) if downstream code expects an authenticated user object. Version 2.19.1 contains a patch for the issue. \nSeverity: 8.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T22:45:22.000000Z"}, {"uuid": "723b6360-6dc6-4c0d-bcd8-4143f57a368f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25182", "type": "seen", "source": "https://t.me/cvedetector/17920", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25182 - Stroom ALB Authentication Bypass and SSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25182 \nPublished : Feb. 12, 2025, 5:15 p.m. | 1\u00a0hour, 46\u00a0minutes ago \nDescription : Stroom is a data processing, storage and analysis platform. A vulnerability exists starting in version 7.2-beta.53 and prior to versions 7.2.24, 7.3-beta.22, 7.4.4, and 7.5-beta.2 that allows authentication bypass to a Stroom system when configured with ALB and installed in a way that the application is accessible not through the ALB itself. This vulnerability may also allow for server-side request forgery which may lead to code execution or further privileges escalations when using the AWS metadata URL. This scenario assumes that Stroom must be configured to use ALB Authentication integration and the application is network accessible. The vulnerability has been fixed in versions 7.2.24, 7.3-beta.22, 7.4.4, and 7.5-beta.2. \nSeverity: 9.4 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T20:14:20.000000Z"}, {"uuid": "4920063b-c70e-4879-99d4-89ad2d166404", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25746", "type": "seen", "source": "https://t.me/cvedetector/17915", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25746 - D-Link DIR-853 Stack-Based Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25746 \nPublished : Feb. 12, 2025, 5:15 p.m. | 1\u00a0hour, 46\u00a0minutes ago \nDescription : D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the Password parameter in the SetWanSettings module. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T20:14:13.000000Z"}, {"uuid": "32f88267-eab8-49c8-a51b-483b820573f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25349", "type": "seen", "source": "https://t.me/cvedetector/17885", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25349 - PHPGurukul Daily Expense Tracker System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25349 \nPublished : Feb. 12, 2025, 4:15 p.m. | 46\u00a0minutes ago \nDescription : PHPGurukul Daily Expense Tracker System v1.1 is vulnerable to SQL Injection in /dets/add-expense.php via the costitem parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T18:33:21.000000Z"}, {"uuid": "c8499e3d-914f-4a17-9a67-221d76af44d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25743", "type": "seen", "source": "https://t.me/cvedetector/17913", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25743 - D-Link DIR-853 Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25743 \nPublished : Feb. 12, 2025, 5:15 p.m. | 1\u00a0hour, 46\u00a0minutes ago \nDescription : D-Link DIR-853 A1 FW1.20B07 was discovered to contain a command injection vulnerability in the SetVirtualServerSettings module. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T20:14:08.000000Z"}, {"uuid": "620c8c2b-3d86-45b9-bfa3-fd8c917dd10f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25742", "type": "seen", "source": "https://t.me/cvedetector/17912", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25742 - D-Link DIR-853 Stack-Based Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25742 \nPublished : Feb. 12, 2025, 5:15 p.m. | 1\u00a0hour, 46\u00a0minutes ago \nDescription : D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the AccountPassword parameter in the SetSysEmailSettings module. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T20:14:08.000000Z"}, {"uuid": "23f0b7cb-99f3-421b-bb21-b4b477d544f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25184", "type": "published-proof-of-concept", "source": "https://t.me/cvedetector/17911", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25184 - Rack Common Logger CRLF Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25184 \nPublished : Feb. 12, 2025, 5:15 p.m. | 1\u00a0hour, 46\u00a0minutes ago \nDescription : Rack provides an interface for developing web applications in Ruby. Prior to versions 2.2.11, 3.0.12, and 3.1.11, Rack::CommonLogger can be exploited by crafting input that includes newline characters to manipulate log entries. The supplied proof-of-concept demonstrates injecting malicious content into logs. When a user provides the authorization credentials via Rack::Auth::Basic, if success, the username will be put in env['REMOTE_USER'] and later be used by Rack::CommonLogger for logging purposes. The issue occurs when a server intentionally or unintentionally allows a user creation with the username contain CRLF and white space characters, or the server just want to log every login attempts. If an attacker enters a username with CRLF character, the logger will log the malicious username with CRLF characters into the logfile. Attackers can break log formats or insert fraudulent entries, potentially obscuring real activity or injecting malicious data into log files. Versions 2.2.11, 3.0.12, and 3.1.11 contain a fix. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T20:14:07.000000Z"}, {"uuid": "e02eec6a-a057-4e47-a6c7-5a32bfea4a17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "published-proof-of-concept", "source": "Telegram/-8cwSri1-b53KKgMnZgkCjHbyQmxG29oL0_CbAwLFDPFBxQ", "content": "", "creation_timestamp": "2025-08-13T21:00:04.000000Z"}, {"uuid": "97ad64ff-6a90-478a-9d0d-a7e885b209e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25199", "type": "seen", "source": "https://t.me/cvedetector/17907", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25199 - Microsoft Go-crypto Winnative: Unreleased Key Handle Memory Leak\", \n  \"Content\": \"CVE ID : CVE-2025-25199 \nPublished : Feb. 12, 2025, 6:15 p.m. | 46\u00a0minutes ago \nDescription : go-crypto-winnative Go crypto backend for Windows using Cryptography API: Next Generation (CNG). Prior to commit f49c8e1379ea4b147d5bff1b3be5b0ff45792e41, calls to `cng.TLS1PRF` don't release the key handle, producing a small memory leak every time. Commit f49c8e1379ea4b147d5bff1b3be5b0ff45792e41 contains a fix for the issue. The fix is included in versions 1.23.6-2 and 1.22.12-2 of the Microsoft build of go, as well as in the pseudoversion 0.0.0-20250211154640-f49c8e1379ea of the `github.com/microsoft/go-crypto-winnative` Go package. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T20:14:01.000000Z"}, {"uuid": "22ea509b-c635-440f-89e4-376ceeb2a1f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25198", "type": "seen", "source": "https://t.me/cvedetector/17906", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25198 - Mailcow: Dockerized Host Header Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25198 \nPublished : Feb. 12, 2025, 6:15 p.m. | 46\u00a0minutes ago \nDescription : mailcow: dockerized is an open source groupware/email suite based on docker. Prior to version 2025-01a, a vulnerability in mailcow's password reset functionality allows an attacker to manipulate the `Host HTTP` header to generate a password reset link pointing to an attacker-controlled domain. This can lead to account takeover if a user clicks the poisoned link. Version 2025-01a contains a patch. As a workaround, deactivate the password reset functionality by clearing `Notification email sender` and `Notification email subject` under System -> Configuration -> Options -> Password Settings. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T20:14:00.000000Z"}, {"uuid": "5baffa35-9a9b-401e-a8d0-f5c310f150e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "exploited", "source": "https://t.me/DarkWebInformer_News/7380", "content": "\ud83d\udea8 News Alert!\n\nSource: Dark Web Informer - Cyber Threat Intelligence\nTitle: CVE-2025-25256: Fortinet FortiSIEM OS Command Injection Vulnerability, Exploit in the Wild\nLink: https://darkwebinformer.com/cve-2025-25256-fortinet-fortisiem-os-command-injection-vulnerability-exploit-in-the-wild/", "creation_timestamp": "2025-08-13T20:30:58.000000Z"}, {"uuid": "dd7d8c47-176f-46b1-9460-da740cb41a99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25012", "type": "seen", "source": "https://t.me/claytechsolution/190", "content": "The Hacker News\nElastic Releases Urgent Fix for Critical Kibana Vulnerability Enabling Remote Code Execution\n\nElastic has rolled out security updates to address a critical security flaw impacting the Kibana data visualization dashboard software for Elasticsearch that could result in arbitrary code execution.\nThe vulnerability, tracked as CVE-2025-25012, carries a CVSS score of 9.9 out of a maximum of 10.0. It has been described as a case of prototype pollution.\n\"Prototype pollution in Kibana leads to", "creation_timestamp": "2025-03-06T14:17:16.000000Z"}, {"uuid": "33bb20f2-d00f-4fa2-b5a3-dc84aabb6773", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25200", "type": "seen", "source": "https://t.me/cvedetector/17905", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25200 - Koa HTTP Header Regular Expression Denial-of-Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25200 \nPublished : Feb. 12, 2025, 6:15 p.m. | 46\u00a0minutes ago \nDescription : Koa is expressive middleware for Node.js using ES2017 async functions. Prior to versions 0.21.2, 1.7.1, 2.15.4, and 3.0.0-alpha.3, Koa uses an evil regex to parse the `X-Forwarded-Proto` and `X-Forwarded-Host` HTTP headers. This can be exploited to carry out a Denial-of-Service attack. Versions 0.21.2, 1.7.1, 2.15.4, and 3.0.0-alpha.3 fix the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T20:13:59.000000Z"}, {"uuid": "9bda9a22-ea4d-4464-8990-b3033fb57b7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25741", "type": "seen", "source": "https://t.me/cvedetector/17904", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25741 - D-Link DIR-853 IPv6 Pppoe Password Stack-Based Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25741 \nPublished : Feb. 12, 2025, 6:15 p.m. | 46\u00a0minutes ago \nDescription : D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the IPv6_PppoePassword parameter in the SetIPv6PppoeSettings module. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T20:13:58.000000Z"}, {"uuid": "022245f4-1531-4881-81a8-6419c369d349", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "published-proof-of-concept", "source": "Telegram/6lKByArH9FS3kGV0eBc5AxMt53ZNy3FxF1pgZuVY2NXgTHI", "content": "", "creation_timestamp": "2025-08-21T15:00:06.000000Z"}, {"uuid": "f5fee495-3a4a-4e5a-93c5-f8b8d401153a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "exploited", "source": "https://t.me/DarkWebInformer_News/7357", "content": "\ud83d\udea8 News Alert!\n\nSource: The Hacker News\nTitle: Fortinet Warns About FortiSIEM Vulnerability (CVE-2025-25256) With In-the-Wild Exploit Code\nLink: https://thehackernews.com/2025/08/fortinet-warns-about-fortisiem.html", "creation_timestamp": "2025-08-13T12:03:28.000000Z"}, {"uuid": "58ee31e8-ad67-4e59-86d9-da19ae8a0b92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25063", "type": "seen", "source": "Telegram/-Fv_a4EPYFaBqns2Cr0zCt3lPp7sYwzJV4LoxTKWmPvbqvA", "content": "", "creation_timestamp": "2025-08-19T03:00:06.000000Z"}, {"uuid": "bf3215e3-f4d2-4396-8c68-bd6581b9c057", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/7333", "content": "Fortinet \u0440\u0430\u043f\u043e\u0440\u0442\u0443\u0435\u0442 \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2025-52970), \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0435\u0439 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 FortMajeure \u0432 \u0441\u0432\u043e\u0438\u0445 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u0430\u0445 FortiWeb, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u0442\u044c \u0441\u0435\u0430\u043d\u0441\u043e\u0432\u044b\u0435 cookie-\u0444\u0430\u0439\u043b\u044b \u0438 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\u0418 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 FortiSIEM \u0434\u043b\u044f \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0440\u0438\u0441\u043a\u043e\u0432 \u0430\u0442\u0430\u043a \u0441 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043c\u0430\u043d\u0434 (CVE-2025-25256), \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0440\u0435\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0439 \u043a\u043e\u0434 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0432 \u0441\u0435\u0442\u0438 \u0438 \u043e\u0436\u0438\u0434\u0430\u0435\u0442\u0441\u044f \u0435\u0433\u043e \u0441\u043a\u043e\u0440\u0435\u0439\u0448\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u0432 \u0441\u0435\u0442\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0440\u0430\u0441\u043f\u043e\u043b\u0437\u0430\u044e\u0442\u0441\u044f \u0441\u043b\u0443\u0445\u0438 \u043e \u043f\u0440\u043e\u0434\u0430\u0436\u0435 \u0432 \u043a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0449\u0438\u043a\u0430\u043c\u0438 \u043d\u0435\u043a\u043e\u0439 0-day Fortinet \u0434\u043b\u044f RCE, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u0441\u0435\u0432\u0435\u0440\u0441\u0438\u0439 7.4\u20137.6 (\u0438\u043c\u0435\u0435\u0442\u0441\u044f \u044f\u043a\u043e\u0431\u044b \u0434\u0430\u0436\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0439 PoC).\n\n\u041d\u043e \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2025-08-15T13:34:45.000000Z"}, {"uuid": "cfa48e30-d042-4685-9a7d-21649a52fbc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/15408", "content": "Fortinet Warns About FortiSIEM Vulnerability (CVE-2025-25256) With In-the-Wild Exploit Code \u2013 thehackernews.com\n\nWed, 13 Aug 2025 19:37:00", "creation_timestamp": "2025-08-13T16:03:13.000000Z"}, {"uuid": "0a67abee-c2b8-4b03-9eaa-1978776059cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "exploited", "source": "https://t.me/TengkorakCyberCrewzz/33761", "content": "Fortinet Warns About FortiSIEM Vulnerability (CVE-2025-25256) With In-the-Wild Exploit Code \u2013 thehackernews.com\n\nWed, 13 Aug 2025 19:37:00", "creation_timestamp": "2025-08-13T16:03:13.000000Z"}, {"uuid": "bb20d94d-184f-44d1-8f62-0853688942a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/7328", "content": "Fortinet \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 FortiSIEM \u0441 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u043c \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435.\n\nFortiSIEM - \u044d\u0442\u043e \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0430\u044f \u0434\u043b\u044f \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u0441\u043e\u0431\u044b\u0442\u0438\u0439, \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0442\u0435\u043b\u0435\u043c\u0435\u0442\u0440\u0438\u0438 \u0438 \u043e\u043f\u043e\u0432\u0435\u0449\u0435\u043d\u0438\u0439 \u043e\u0431 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \n\n\u0420\u0435\u0448\u0435\u043d\u0438\u0435 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0433\u043e\u0441\u0441\u0435\u043a\u0442\u043e\u0440\u0435, \u043a\u0440\u0443\u043f\u043d\u044b\u043c\u0438 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f\u043c\u0438, \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u043c\u0438 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f\u043c\u0438, \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c\u0438 \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u0438\u0445 \u0443\u0441\u043b\u0443\u0433 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u0443\u0441\u043b\u0443\u0433 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (MSSP).\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-25256 \u0438 \u0438\u043c\u0435\u0435\u0442 CVSS: 9.8, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0432\u0435\u0442\u043e\u043a SIEM, \u043e\u0442 5.4 \u0434\u043e 7.3.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u0432 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 CLI.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e Fortinet \u043f\u0440\u044f\u043c\u043e \u043d\u0435 \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442 \u043e \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 0-day, \u043d\u043e \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Fortinet, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044e \u043e\u0441\u043e\u0431\u044b\u0445 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u0432 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c, \u0431\u044b\u043b\u043e \u043b\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043e.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u043e \u043d\u0430 \u0444\u043e\u043d\u0435 \u0444\u0438\u043a\u0441\u0430\u0446\u0438\u0438 GreyNoise \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e\u0433\u043e \u0431\u0440\u0443\u0442\u0430, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u043d\u0430 SSL-VPN Fortinet, \u0430 \u0437\u0430\u0442\u0435\u043c - \u043d\u0430 FortiManager.\n\n\u041d\u043e \u043f\u043e\u043a\u0430 \u043d\u0435\u044f\u0441\u043d\u043e, \u0441\u0432\u044f\u0437\u0430\u043d\u043e \u043b\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 Fortinet \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-25256 \u0441 \u043e\u0442\u0447\u0435\u0442\u043e\u043c GreyNoise.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c PoC \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043d\u0430\u043a\u0430\u0442\u0438\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f CVE-2025-25256, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 FortiSIEM: 7.3.2, 7.2.6, 7.1.8, 7.0.4 \u0438 6.7.10\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0432\u0435\u0440\u0441\u0438\u0438 FortiSIEM 5.4-6.6 \u0442\u0430\u043a\u0436\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u044b, \u043d\u043e \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0438 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\nFortinet \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b\u0430 \u043e\u0431\u0445\u043e\u0434\u043d\u043e\u0439 \u043f\u0443\u0442\u044c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a phMonitor \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0440\u0442 7900, \u0443\u043a\u0430\u0437\u0430\u0432, \u0447\u0442\u043e \u044d\u0442\u043e \u0442\u043e\u0447\u043a\u0430 \u0432\u0445\u043e\u0434\u0430 \u0434\u043b\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.", "creation_timestamp": "2025-08-14T13:54:43.000000Z"}, {"uuid": "553d83d3-b0bd-4baf-8364-bdd88874150b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://t.me/DarkWebInformer_News/6281", "content": "\ud83d\udea8 News Alert!\n\nSource: Hackread \u2013 Latest Cybersecurity, Hacking News, Tech, AI & Crypto\nTitle: Critical Vulnerability Exposes Fortinet FortiWeb to Full Takeover (CVE-2025-25257)\nLink: https://hackread.com/critical-vulnerability-fortinet-fortiweb-cve-2025-25257/", "creation_timestamp": "2025-07-13T16:15:46.000000Z"}, {"uuid": "54c7ea4c-d10e-4a15-9924-59946b0f2e92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://t.me/DarkWebInformer_News/6253", "content": "\ud83d\udea8 News Alert!\n\nSource: The Hacker News\nTitle: Fortinet Releases Patch for Critical SQL Injection Flaw in FortiWeb (CVE-2025-25257)\nLink: https://thehackernews.com/2025/07/fortinet-releases-patch-for-critical.html", "creation_timestamp": "2025-07-11T15:14:11.000000Z"}, {"uuid": "200a64eb-a521-4dd2-ab39-4f04726e2550", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "exploited", "source": "Telegram/j_lXL4mGjaWV_HS8x3mHyBdpCapt7KxJjN67ukYvRWlDSw", "content": "", "creation_timestamp": "2025-08-13T13:40:06.000000Z"}, {"uuid": "4809fd8b-6afa-4e88-8423-62fa30c0027d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "exploited", "source": "https://t.me/ctinow/236426", "content": "Fortinet Warns About FortiSIEM Vulnerability (CVE-2025-25256) With In-the-Wild Exploit Code\nhttps://ift.tt/elJrCGc", "creation_timestamp": "2025-08-13T12:09:19.000000Z"}, {"uuid": "6b6797f6-6602-4de5-803e-ceda63f043c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25015", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_News/1529", "content": "\ud83d\udea8 News Alert!\n\nSource: Dark Web Informer - Cyber Threat Intelligence\nTitle: CVE-2025-25015: Kibana arbitrary code execution via prototype pollution\nLink: https://darkwebinformer.com/cve-2025-25015-kibana-arbitrary-code-execution-via-prototype-pollution/", "creation_timestamp": "2025-03-05T20:07:52.000000Z"}, {"uuid": "8f7aff37-e7a4-4ebc-b362-0ddd811b19c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "published-proof-of-concept", "source": "https://t.me/TopCyberTechNews/542", "content": "Top Security News for Today\n\nSpain awards Huawei contracts to manage intelligence agency wiretaps  \nhttps://therecord.media/spain-awards-contracts-huawei-intelligence-agency-wiretaps\n\nDeepSeek a threat to national security, warns Czech cyber agency  \nhttps://therecord.media/deepseek-security-czech-cyber-agency-warning\n\nPre-Auth SQL Injection to RCE - Fortinet FortiWeb Fabric Connector (CVE-2025-25257) - watchTowr Labs  \nhttps://www.reddit.com/r/netsec/comments/1lx360q/preauth_sql_injection_to_rce_fortinet_fortiweb/\n\nIndonesia extradites Russian accused of selling personal data on Telegram  \nhttps://therecord.media/indonesia-extradites-russian-telegram-sale\n\nCISA orders agencies to immediately patch Citrix Bleed 2, saying bug poses \u2018unacceptable risk\u2019  \nhttps://therecord.media/cisa-orders-agencies-patch-citrix-bleed-2\n\nHacker returns cryptocurrency stolen from GMX exchange after $5 million bounty payment  \nhttps://therecord.media/hacker-returns-stolen-gmx-bounty\n\nAirline executive agrees to dismiss litigation around alleged hack-for-hire scheme  \nhttps://therecord.media/airline-exec-agrees-to-dismiss-hack-for-hire-lawsuit\n\nAlbemarle latest Virginia county hit with ransomware  \nhttps://therecord.media/albemarle-virginia-ransomware-attack\n\nFollow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman", "creation_timestamp": "2025-07-12T09:30:25.000000Z"}, {"uuid": "871407b4-aa7a-4a8e-9acf-8d088249d570", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25364", "type": "published-proof-of-concept", "source": "https://t.me/TopCyberTechNews/458", "content": "Top Security News for Today\n\nSuperCard X: exposing a Chinese-speaker MaaS for NFC Relay fraud operation | Cleafy  \nhttps://www.reddit.com/r/netsec/comments/1k21cf9/supercard_x_exposing_a_chinesespeaker_maas_for/\n\nAES & ChaCha \u2014 A Case for Simplicity in Cryptography  \nhttps://www.reddit.com/r/netsec/comments/1k1y676/aes_chacha_a_case_for_simplicity_in_cryptography/\n\nCVE-2025-25364: Speedify VPN MacOS privilege Escalation  \nhttps://www.reddit.com/r/netsec/comments/1k2bpp5/cve202525364_speedify_vpn_macos_privilege/\n\nFriday Squid Blogging: Live Colossal Squid Filmed  \nhttps://www.schneier.com/blog/archives/2025/04/friday-squid-blogging-live-colossal-squid-filmed.html\n\nA Dark Reading Panel - \"The Promise and Perils of AI: Navigating Emerging Cyber Threats\"  \nhttps://bishopfox.com/blog/dark-reading-panel-promise-perils-ai-navigating-emerging-cyber-threats-blog\n\nDecentralised collaborative action: cryptoeconomics in space  \nhttps://arxiv.org/abs/2504.12465\n\nFollow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman", "creation_timestamp": "2025-04-19T09:30:26.000000Z"}, {"uuid": "6cdeeb63-6d88-44ec-83a9-af8eb92bcb65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25014", "type": "published-proof-of-concept", "source": "Telegram/n1xxTDW4DKAqfoFBBrei6KNyXkL9LVReMZ-BWNrHaTz0OZY", "content": "", "creation_timestamp": "2025-07-22T15:00:06.000000Z"}, {"uuid": "87d5a958-bf63-4409-b57c-f46a5b29958c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25215", "type": "seen", "source": "https://t.me/true_secator/7303", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 ControlVault3 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0431\u043e\u043b\u0435\u0435 100 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u043e\u0432 Dell \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0432\u0445\u043e\u0434 \u0432 Windows \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u043f\u0435\u0440\u0435\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\nDell ControlVault - \u044d\u0442\u043e \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0445\u0440\u0430\u043d\u0438\u0442 \u043f\u0430\u0440\u043e\u043b\u0438, \u0431\u0438\u043e\u043c\u0435\u0442\u0440\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043a\u043e\u0434\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 \u043d\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0434\u043e\u0447\u0435\u0440\u043d\u0435\u0439 \u043f\u043b\u0430\u0442\u0435, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u043a\u0430\u043a Unified Security Hub (USH).\n\n\u041f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Cisco Talos \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0443\u0441\u043b\u043e\u0432\u043d\u044b\u0435 \u043d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 ReVault \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043a\u0430\u043a \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 ControlVault3, \u0442\u0430\u043a \u0438 \u0435\u0435 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u044b \u043f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f Windows (API) \u0434\u043b\u044f \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u043e\u0432 \u0441\u0435\u0440\u0438\u0439 Latitude \u0438 Precision \u043e\u0442 Dell.\n\n\u041f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c ReVault \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0445\u043e\u0434\u0430 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430 (CVE-2025-24311, CVE-2025-25050), \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f (CVE-2025-25215), \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0441\u0442\u0435\u043a\u0430 (CVE-2025-24922 \u0438 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 (CVE-2025-24919), \u0432\u043b\u0438\u044f\u044e\u0449\u0443\u044e \u043d\u0430 API-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u044b Windows ControlVault.\n\n\u041e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0438\u0445 \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u044f \u0443\u0441\u0442\u043e\u0439\u0447\u0438\u0432\u044b\u0435 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0442\u0441\u044f \u043f\u043e\u0441\u043b\u0435 \u043f\u0435\u0440\u0435\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 Windows.\n\n\u041b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043c\u043e\u0436\u0435\u0442 \u0432\u0441\u043a\u0440\u044b\u0442\u044c \u0435\u0433\u043e \u0438 \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u043b\u0430\u0442\u0435 USH \u0447\u0435\u0440\u0435\u0437 USB \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u044a\u0435\u043c\u0430, \u043e\u0431\u043e\u0439\u0442\u0438 \u0432\u0445\u043e\u0434 \u0432 Windows \u0438\u043b\u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u043f\u043e \u043e\u0442\u043f\u0435\u0447\u0430\u0442\u043a\u0430\u043c \u043f\u0430\u043b\u044c\u0446\u0435\u0432, \u0437\u0430\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u0446\u0435\u043b\u0435\u0432\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u00a0\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u043e\u0442\u043f\u0435\u0447\u0430\u0442\u043a\u0438 \u043f\u0430\u043b\u044c\u0446\u0435\u0432.\n\nTalos \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0447\u0435\u0440\u0435\u0437 \u0426\u0435\u043d\u0442\u0440 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Windows \u0438\u043b\u0438 \u0441\u0430\u0439\u0442 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430, \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043d\u0435\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u043f\u0435\u0440\u0438\u0444\u0435\u0440\u0438\u0439\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043f\u0435\u0447\u0430\u0442\u043a\u043e\u0432 \u043f\u0430\u043b\u044c\u0446\u0435\u0432, \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u043c\u0430\u0440\u0442-\u043a\u0430\u0440\u0442 \u0438 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u0435\u043b\u0438 NFC), \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0432\u0445\u043e\u0434 \u043f\u043e \u043e\u0442\u043f\u0435\u0447\u0430\u0442\u043a\u0443 \u043f\u0430\u043b\u044c\u0446\u0430 \u0432 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f\u0445 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0438\u0441\u043a\u0430.\n\n\u0414\u043b\u044f \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u0440\u0438\u0441\u043a\u0430 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0430\u0442\u0430\u043a \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u044f \u0432 \u043a\u043e\u0440\u043f\u0443\u0441 \u0432 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u0445 BIOS \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430 \u0438 Enhanced Sign-in Security (ESS) \u0432 Windows \u0434\u043b\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043d\u0435\u043f\u043e\u0434\u0445\u043e\u0434\u044f\u0449\u0438\u0445 \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a CV.\n\nDell\u00a0\u0432\u044b\u043f\u0443\u0441\u043a\u0430\u043b\u0430 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\u00a0\u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 ReVault \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 \u0438 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 ControlVault3 \u0441 \u043c\u0430\u0440\u0442\u0430 \u043f\u043e \u043c\u0430\u0439.\n\n\u041f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0432\u00a0\u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u0445 Dell \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.", "creation_timestamp": "2025-08-06T13:43:48.000000Z"}, {"uuid": "e08ab266-73f3-4676-a2d1-4fb987e14843", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25351", "type": "seen", "source": "https://t.me/cvedetector/17886", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25351 - PHPGurukul Daily Expense Tracker System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25351 \nPublished : Feb. 12, 2025, 4:15 p.m. | 46\u00a0minutes ago \nDescription : PHPGurukul Daily Expense Tracker System v1.1 is vulnerable to SQL Injection in /dets/add-expense.php via the dateexpense parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T18:33:22.000000Z"}, {"uuid": "048b7318-bcb9-4aa9-8b8d-74d2a6ec880e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25050", "type": "seen", "source": "https://t.me/true_secator/7303", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 ControlVault3 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0431\u043e\u043b\u0435\u0435 100 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u043e\u0432 Dell \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0432\u0445\u043e\u0434 \u0432 Windows \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u043f\u0435\u0440\u0435\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\nDell ControlVault - \u044d\u0442\u043e \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0445\u0440\u0430\u043d\u0438\u0442 \u043f\u0430\u0440\u043e\u043b\u0438, \u0431\u0438\u043e\u043c\u0435\u0442\u0440\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043a\u043e\u0434\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 \u043d\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0434\u043e\u0447\u0435\u0440\u043d\u0435\u0439 \u043f\u043b\u0430\u0442\u0435, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u043a\u0430\u043a Unified Security Hub (USH).\n\n\u041f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Cisco Talos \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0443\u0441\u043b\u043e\u0432\u043d\u044b\u0435 \u043d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 ReVault \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043a\u0430\u043a \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 ControlVault3, \u0442\u0430\u043a \u0438 \u0435\u0435 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u044b \u043f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f Windows (API) \u0434\u043b\u044f \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u043e\u0432 \u0441\u0435\u0440\u0438\u0439 Latitude \u0438 Precision \u043e\u0442 Dell.\n\n\u041f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c ReVault \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0445\u043e\u0434\u0430 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430 (CVE-2025-24311, CVE-2025-25050), \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f (CVE-2025-25215), \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0441\u0442\u0435\u043a\u0430 (CVE-2025-24922 \u0438 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 (CVE-2025-24919), \u0432\u043b\u0438\u044f\u044e\u0449\u0443\u044e \u043d\u0430 API-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u044b Windows ControlVault.\n\n\u041e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0438\u0445 \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u044f \u0443\u0441\u0442\u043e\u0439\u0447\u0438\u0432\u044b\u0435 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0442\u0441\u044f \u043f\u043e\u0441\u043b\u0435 \u043f\u0435\u0440\u0435\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 Windows.\n\n\u041b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043c\u043e\u0436\u0435\u0442 \u0432\u0441\u043a\u0440\u044b\u0442\u044c \u0435\u0433\u043e \u0438 \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u043b\u0430\u0442\u0435 USH \u0447\u0435\u0440\u0435\u0437 USB \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u044a\u0435\u043c\u0430, \u043e\u0431\u043e\u0439\u0442\u0438 \u0432\u0445\u043e\u0434 \u0432 Windows \u0438\u043b\u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u043f\u043e \u043e\u0442\u043f\u0435\u0447\u0430\u0442\u043a\u0430\u043c \u043f\u0430\u043b\u044c\u0446\u0435\u0432, \u0437\u0430\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u0446\u0435\u043b\u0435\u0432\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u00a0\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u043e\u0442\u043f\u0435\u0447\u0430\u0442\u043a\u0438 \u043f\u0430\u043b\u044c\u0446\u0435\u0432.\n\nTalos \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0447\u0435\u0440\u0435\u0437 \u0426\u0435\u043d\u0442\u0440 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Windows \u0438\u043b\u0438 \u0441\u0430\u0439\u0442 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430, \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043d\u0435\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u043f\u0435\u0440\u0438\u0444\u0435\u0440\u0438\u0439\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043f\u0435\u0447\u0430\u0442\u043a\u043e\u0432 \u043f\u0430\u043b\u044c\u0446\u0435\u0432, \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u043c\u0430\u0440\u0442-\u043a\u0430\u0440\u0442 \u0438 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u0435\u043b\u0438 NFC), \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0432\u0445\u043e\u0434 \u043f\u043e \u043e\u0442\u043f\u0435\u0447\u0430\u0442\u043a\u0443 \u043f\u0430\u043b\u044c\u0446\u0430 \u0432 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f\u0445 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0438\u0441\u043a\u0430.\n\n\u0414\u043b\u044f \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u0440\u0438\u0441\u043a\u0430 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0430\u0442\u0430\u043a \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u044f \u0432 \u043a\u043e\u0440\u043f\u0443\u0441 \u0432 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u0445 BIOS \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430 \u0438 Enhanced Sign-in Security (ESS) \u0432 Windows \u0434\u043b\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043d\u0435\u043f\u043e\u0434\u0445\u043e\u0434\u044f\u0449\u0438\u0445 \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a CV.\n\nDell\u00a0\u0432\u044b\u043f\u0443\u0441\u043a\u0430\u043b\u0430 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\u00a0\u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 ReVault \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 \u0438 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 ControlVault3 \u0441 \u043c\u0430\u0440\u0442\u0430 \u043f\u043e \u043c\u0430\u0439.\n\n\u041f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0432\u00a0\u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u0445 Dell \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.", "creation_timestamp": "2025-08-06T13:43:48.000000Z"}, {"uuid": "b07cd784-6b55-471e-b2ce-e7c8548093d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "published-proof-of-concept", "source": "Telegram/6Txp-NdsgOvnDudD50x-c9VhpDrhwlYTuOYafPDdoFYGJ9g", "content": "", "creation_timestamp": "2025-07-14T15:00:12.000000Z"}, {"uuid": "5a203498-bc6d-4a83-a3f6-e5c885283c4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "published-proof-of-concept", "source": "Telegram/jMiaAfR2J9C34xHnElOO8QMQNpsrJcxgBx1v7Waf8IgPpW8", "content": "", "creation_timestamp": "2025-07-14T09:00:05.000000Z"}, {"uuid": "1080aacc-f9d0-4230-95db-821a0d8ee67c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "published-proof-of-concept", "source": "Telegram/KJn1tF9jPkgOGUgsc95E8v807sysgUfrbJvEwNe1ScGaXY0", "content": "", "creation_timestamp": "2025-07-20T07:00:11.000000Z"}, {"uuid": "c210d629-a607-4335-8081-ee7a0d936bff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25014", "type": "published-proof-of-concept", "source": "Telegram/CGY_W_WBv1WD_ctgMgmuSfpsl0l_gu0_XG6uG3rhQ9566rg", "content": "", "creation_timestamp": "2025-07-22T03:00:09.000000Z"}, {"uuid": "f3c04adb-0af4-4f30-b303-2bcced8a5368", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25014", "type": "published-proof-of-concept", "source": "Telegram/DRH-CbZo7gKaJp6e4sRAX_WtNevOE1gzfcn9exSBM5ol164", "content": "", "creation_timestamp": "2025-07-23T03:00:11.000000Z"}, {"uuid": "03dbc0fa-7ec8-4374-a8d7-08ac3271abae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "published-proof-of-concept", "source": "Telegram/0jvjkPEZnoW_0g8cjJAx2BIIU7bcv6ZLASQZj1TPT87LGFs", "content": "", "creation_timestamp": "2025-07-19T21:00:04.000000Z"}, {"uuid": "6ecf1d29-797a-46b3-b3fa-52208d30c2f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://t.me/TengkorakCyberCrewzz/32894", "content": "Critical Vulnerability Exposes Fortinet FortiWeb to Full Takeover (CVE-2025-25257) \u2013 hackread.com\n\nMon, 14 Jul 2025 00:15:29", "creation_timestamp": "2025-07-13T20:03:03.000000Z"}, {"uuid": "6645a0d2-ba65-4678-8c30-de6404e695b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/14598", "content": "Critical Vulnerability Exposes Fortinet FortiWeb to Full Takeover (CVE-2025-25257) \u2013 hackread.com\n\nMon, 14 Jul 2025 00:15:29", "creation_timestamp": "2025-07-13T20:03:03.000000Z"}, {"uuid": "efff76cb-a8ab-467e-8479-8c675d32052c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/5556", "content": "Critical Vulnerability Exposes Fortinet FortiWeb to Full Takeover (CVE-2025-25257) \u2013 hackread.com\n\nMon, 14 Jul 2025 00:15:29", "creation_timestamp": "2025-07-13T20:03:03.000000Z"}, {"uuid": "58713345-6171-4c5b-942a-e34006f67edd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/14569", "content": "Fortinet Releases Patch for Critical SQL Injection Flaw in FortiWeb (CVE-2025-25257) \u2013 thehackernews.com\n\nFri, 11 Jul 2025 22:38:00", "creation_timestamp": "2025-07-11T16:03:43.000000Z"}, {"uuid": "d4c25150-89c8-4e2a-9c35-703901c426b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "Telegram/JXGQFxsNYIu-Yi3o9Vmi7n1XtMVP6-DibHM3hyuk-Y4SzKE", "content": "", "creation_timestamp": "2025-07-11T16:23:25.000000Z"}, {"uuid": "393931f8-d5c1-459b-81eb-96c61773c197", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://t.me/CyberBulletin/3628", "content": "\u26a1\ufe0fFortinet Releases Patch for Critical SQL Injection Flaw in FortiWeb (CVE-2025-25257).\n\n#CyberBulletin", "creation_timestamp": "2025-07-12T20:34:54.000000Z"}, {"uuid": "b5cd848a-2c7f-48f0-ae6e-1e40085bb9e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "published-proof-of-concept", "source": "https://t.me/purple_medved/355", "content": "Pre-Auth SQL Injection to RCE - Fortinet FortiWeb Fabric Connector\n\n\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0434\u0435\u0442\u0430\u043b\u0438 \u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-25257 (\u043e\u0446\u0435\u043d\u043a\u0430 \u043f\u043e CVSSv3=9.6) \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u044d\u043a\u043e\u0441\u0438\u0441\u0442\u0435\u043c\u044b Fortinet, \u0438\u043c\u0435\u043d\u0443\u0435\u043c\u043e\u043c FortiWeb Fabric Connector\ud83d\ude1c \u041a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u043c\u0435\u0436\u0434\u0443 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c\u0438 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u043c\u0438 (FortiWeb WAF, FortiGate NGFW, FortiManager, FortiWhatever) \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044e \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432\u043e\u0439 \u043b\u0438\u043d\u0435\u0439\u043a\u0438 Fortinet.\n\n\u041f\u043e \u0441\u0443\u0442\u0438 \u044d\u0442\u043e \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u0430\u044f SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 get_fabric_user_by_token, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0434\u043b\u044f \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0439 \u0441 FortiWeb API. \u042d\u0442\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c char *a1 \u0438\u043d\u043f\u0443\u0442 \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a Authorization: Bearer %128s \u043d\u0430 \u044d\u0442\u0438 \u0440\u0443\u0447\u043a\u0438:\n\nGET /api/fabric/device/status HTTP/1.1\nGET /api/v[0-9]/fabric/widget/[a-z]+\nGET /api/v[0-9]/fabric/widget\nHost: fortiweb_ip\nAuthorization: Bearer AAAAAA'or'1'='1\n\n\u0414\u0430\u043b\u0435\u0435 \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 RCE \u0432 MySQL \u0447\u0435\u0440\u0435\u0437 INTO OUTFILE \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u043e \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u043c \u043e\u0442 root\ud83d\ude48 \u0410 \u0438\u043c\u0435\u043d\u043d\u043e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0432\u0435\u0431-\u0448\u0435\u043b\u043b\u0430 \u0432 cgi-bin \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 Apache \u0441 \u0445\u0438\u0442\u0440\u044b\u043c \u0442\u0440\u044e\u043a\u043e\u043c \u043e\u0431\u0445\u043e\u0434\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439 \u0437\u0430\u043f\u0440\u0435\u0442\u0430 \u043d\u0430 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 \u044d\u0442\u0443 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0438\u0437 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f SonarSource:\n\nPython supports a feature called site-specific configuration hooks. Its main purpose is to add custom paths to the module search path. To do this, a .pth file with an arbitrary name can be put in the .local/lib/pythonX.Y/site-packages/ folder in a user's home directory:\n'/**/or/**/1=1/**/UNION/**/SELECT/**/'import os;os.system(\\\\'ls\\\\')'/**/into/**/outfile/**/'/var/log/lib/python3.10/site-packages/trigger.pth\n\n\u0418 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u043d\u0430 128-character limit \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0435 Authorization: Bearer\n'/**/UNION/**/SELECT/**/token/**/from/**/fabric_user.user_table/**/into/**/outfile/**/'../../lib/python3.10/site-packages/x.pth'\n\n\u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u043c \u043f\u0440\u0435\u043a\u0440\u0430\u0441\u043d\u044b\u0439 \u043e\u0442\u0447\u0435\u0442 \u043e\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 watchTowr \u0441 \u043d\u0430\u0433\u043b\u044f\u0434\u043d\u044b\u043c \u0438 \u043f\u043e\u043d\u044f\u0442\u043d\u044b\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435\u043c \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441 \u043d\u043e\u0442\u043a\u0430\u043c\u0438 \u0442\u043e\u043d\u043a\u043e\u0439 \u0438\u0440\u043e\u043d\u0438\u0438 \u0438 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u043c \u0442\u0440\u044e\u043a\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u0432\u0437\u044f\u0442\u044c \u043d\u0430 \u0432\u043e\u043e\u0440\u0443\u0436\u0435\u043d\u0438\u0435\ud83d\udc4d\n\n\u2699\ufe0f POC: https://github.com/watchtowrlabs/watchTowr-vs-FortiWeb-CVE-2025-25257\n\ud83e\udeb2 \u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u041f\u041e: FortiWeb 7.6.0 \u0434\u043e 7.6.3, FortiWeb 7.4.0 \u0434\u043e 7.4.7, FortiWeb 7.2.0 \u0434\u043e 7.2.10, FortiWeb 7.0.0 \u0434\u043e 7.0.10\n\u2705 \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438: \u041d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439", "creation_timestamp": "2025-07-14T13:32:04.000000Z"}, {"uuid": "0a687de8-f09c-4c74-9b0f-42eefe3a3cc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/7228", "content": "\u0414\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 SQLi \u0432 Fortinet FortiWeb \u0441\u0442\u0430\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b PoC, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f RCE \u0441 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 9,8/10 \u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-25257.\n\nFortinet \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0435\u0451 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 FortiWeb 7.6.4, 7.4.8, 7.2.11 \u0438 7.0.11 (\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445).\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044e Fortinet, \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u0430\u044f \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 SQL-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 FortiWeb \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 SQL-\u043a\u043e\u0434 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 HTTP- \u0438\u043b\u0438 HTTPs-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u041a\u0435\u043d\u0442\u0430\u0440\u043e \u041a\u0430\u0432\u0430\u043d\u0435 \u0438\u0437 GMO Cybersecurity, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u043d\u0435\u0435 \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u00a0\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u0430\u0440\u043e\u043b\u044f \u0432 Cisco ISE \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 WatchTowr \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e \u0441 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c false *ptrrr \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0438 PoC, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0442 \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u0435 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0438\u043b\u0438 \u0432\u0435\u0431-\u0448\u0435\u043b\u043b [1 \u0438 2 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e].\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c, \u043a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Fabric Connector \u043e\u0442 FortiWeb - \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0438\u0440\u0443\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u043c\u0435\u0436\u0434\u0443 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u043c\u0438 Fortinet.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432\u00a0get_fabric_user_by_token() \u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u043a\u043e\u0434 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0437\u0430\u043f\u0440\u043e\u0441\u0430 MySQL: snprintf(s, 0x400u, \"select id from fabric_user.user_table where token='%s'\", a1);\n\n\u042d\u0442\u043e\u0442 \u043a\u043e\u0434 \u043d\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0443\u044e \u043e\u0447\u0438\u0441\u0442\u043a\u0443 \u0442\u043e\u043a\u0435\u043d\u0430-\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044f, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u043e\u0433\u043e \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430\u0445 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 SQL-\u043a\u043e\u0434 \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 SQLi.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0447\u0435\u0440\u0435\u0437 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a\u00a0 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 /api/fabric/device/status, \u0432\u043d\u0435\u0434\u0440\u0438\u0432 SQL \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a Authorization (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440,\u00a0Bearer AAAAAA'or'1'='1), \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u043c\u043e\u0433\u043b\u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u0438\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0432 \u0437\u0430\u043f\u0440\u043e\u0441 MySQL SELECT \u2026 INTO OUTFILE \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SQLi \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u0438\u043c \u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0444\u0430\u0439\u043b Python .pth \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 site\u2011packages.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0444\u0430\u0439\u043b\u044b .pth \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u044e\u0442\u0441\u044f \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044e\u0442\u0441\u044f \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 Python, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0430\u0448\u043b\u0438 \u0441\u043a\u0440\u0438\u043f\u0442 FortiWeb CGI Python (\u00a0/cgi-bin/ml\u2011draw.py), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u0444\u0430\u0439\u043b\u0435 .pth \u0438 \u0434\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u044f RCE.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0442\u0435\u043f\u0435\u0440\u044c \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b, \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043d\u0430\u043a\u0430\u0442\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0434\u0430\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u0437\u043b\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432.\n\n\u041d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043d\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f, \u043d\u043e \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u043c \u0431\u0443\u0434\u0443\u0449\u0435\u043c \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u0441\u044f.\n\n\u041d\u043e \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2025-07-14T15:20:15.000000Z"}, {"uuid": "dfc5d3bb-3134-4150-b9a9-fade633b4bea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/5527", "content": "Fortinet Releases Patch for Critical SQL Injection Flaw in FortiWeb (CVE-2025-25257) \u2013 thehackernews.com\n\nFri, 11 Jul 2025 22:38:00", "creation_timestamp": "2025-07-11T16:03:43.000000Z"}, {"uuid": "0d796a8e-e457-4f22-a23b-56b3ef6fd5a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25292", "type": "seen", "source": "https://t.me/itsec_news/5499", "content": "\u200b\u26a1\ufe0f\u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 ruby-saml \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e: \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0433\u0440\u043e\u0436\u0430\u044e\u0442 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\n\ud83d\udcac \u0412 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 ruby-saml, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0439 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u043c Security Assertion Markup Language (SAML), \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u042d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\nSAML \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u043c\u0435\u0436\u0434\u0443 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c\u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0435\u0434\u0438\u043d\u043e\u0436\u0434\u044b \u0432\u0445\u043e\u0434\u0438\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 (SSO) \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u0431\u0435\u0437 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0433\u043e \u0432\u0432\u043e\u0434\u0430 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u041e\u0434\u043d\u0430\u043a\u043e \u0432 \u043a\u043e\u0434\u0435 ruby-saml \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u043e\u0448\u0438\u0431\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0414\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0435 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b CVE-2025-25291 \u0438 CVE-2025-25292 , \u0438\u043c\u0435\u044e\u0442 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 CVSS \u2014 8.8 \u0438\u0437 10. \u041e\u043d\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u043c\u043b\u0430\u0434\u0448\u0435 1.12.4, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 1.13.0 \u0434\u043e 1.18.0 (\u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e).\n\n\u041f\u0440\u0438\u0447\u0438\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u0438\u044f\u0445 \u043c\u0435\u0436\u0434\u0443 \u043f\u0430\u0440\u0441\u0435\u0440\u0430\u043c\u0438 XML REXML \u0438 Nokogiri, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e-\u0440\u0430\u0437\u043d\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0438\u0440\u0443\u044e\u0442 \u043e\u0434\u0438\u043d \u0438 \u0442\u043e\u0442 \u0436\u0435 XML-\u043a\u043e\u0434. \u042d\u0442\u043e \u0440\u0430\u0441\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u0435 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 Signature Wrapping, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 GitHub \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 2024 \u0433\u043e\u0434\u0430. \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438, \u0447\u0442\u043e \u044d\u0442\u0438 \u043e\u0448\u0438\u0431\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435, \u043e\u0431\u043b\u0430\u0434\u0430\u044f \u043e\u0434\u043d\u043e\u0439 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u044c\u044e, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043b\u044e\u0447\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 SAML-\u043e\u0442\u0432\u0435\u0442\u043e\u0432 \u0438\u043b\u0438 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0439, \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u0442\u044c SAML-\u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 1.12.4 \u0438 1.18.0 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0435\u0449\u0451 \u043e\u0434\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 ( CVE-2025-25293 , CVSS 7.7), \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043e\u0442\u043a\u0430\u0437\u043e\u043c \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 (DoS). \u041e\u043d\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0436\u0430\u0442\u044b\u0445 SAML-\u043e\u0442\u0432\u0435\u0442\u043e\u0432 \u0438 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0434\u0435\u0441\u0442\u0430\u0431\u0438\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0430\u0431\u043e\u0442\u044b \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432.\n\n\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 GitHub \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u043a\u043e\u0440\u0435\u043d\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u2014 \u043d\u0435\u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0435 \u043c\u0435\u0436\u0434\u0443 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0445\u0435\u0448\u0430 \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438, \u0447\u0442\u043e \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0440\u0430\u0437\u043d\u0438\u0446\u0443 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 XML-\u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c ruby-saml \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0447\u0442\u043e\u0431\u044b \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0440\u0438\u0441\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0420\u0430\u043d\u0435\u0435, \u0432 2024 \u0433\u043e\u0434\u0443, GitLab \u0438 ruby-saml \u0443\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0431\u0430\u0433 ( CVE-2024-45409 , CVSS 10.0), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-03-15T14:47:01.000000Z"}, {"uuid": "0c9a9d48-ed95-4a6f-8b4c-624cce565228", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "published-proof-of-concept", "source": "Telegram/2xXhGPgo5lMDuKCT2CQCO0nDS34WF8BNrQrYZsghIk6k2wk", "content": "", "creation_timestamp": "2025-07-12T03:00:10.000000Z"}, {"uuid": "9f9f9b36-f42f-4c22-9fb4-3ee88c306583", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "published-proof-of-concept", "source": "Telegram/qSyM_CObkKGA7Q7HpzeouiC5p1gyRUk9NSeKtBswwYL551E", "content": "", "creation_timestamp": "2025-07-13T03:00:05.000000Z"}, {"uuid": "87a31581-ce6c-4a20-879a-52a6969975be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://t.me/TengkorakCyberCrewzz/32860", "content": "Fortinet Releases Patch for Critical SQL Injection Flaw in FortiWeb (CVE-2025-25257) \u2013 thehackernews.com\n\nFri, 11 Jul 2025 22:38:00", "creation_timestamp": "2025-07-11T16:03:43.000000Z"}, {"uuid": "7f67cad0-5d32-401b-9267-586b721374e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/10038", "content": "Pre-Auth SQL Injection to RCE - Fortinet FortiWeb Fabric Connector (CVE-2025-25257)\n\nhttps://labs.watchtowr.com/pre-auth-sql-injection-to-rce-fortinet-fortiweb-fabric-connector-cve-2025-25257/", "creation_timestamp": "2025-07-11T13:00:06.000000Z"}, {"uuid": "b34ecbdc-3ea8-43f1-b065-87b37b4f6579", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "exploited", "source": "https://t.me/true_secator/7239", "content": "\u041a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u043d\u0435 \u0434\u0440\u0435\u043c\u043b\u0435\u0442: \u0441\u0440\u0430\u0437\u0443 \u043f\u043e\u0441\u043b\u0435 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 PoC \u0441\u0442\u0430\u0440\u0442\u043e\u0432\u0430\u043b\u0438 \u043f\u0435\u0440\u0432\u044b\u0435 RCE-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 Fortinet FortiWeb.\n\n\u041f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Fortinet FortiWeb, \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0431-\u0448\u0435\u043b\u043b\u0430\u043c\u0438, \u0431\u044b\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u043b\u044f \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0442\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u043a\u0430\u043a CVE-2025-25257.\n\n\u0414\u0435\u0442\u0435\u043a\u0442\u044b \u0441\u043b\u043e\u0432\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 The Shadowserver Foundation, \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u0432 85 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u0439 14 \u0438\u044e\u043b\u044f \u0438 77 \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u0434\u0435\u043d\u044c.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438, \u0447\u0442\u043e \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0435 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b Fortinet FortiWeb \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0431\u044b\u043b\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-25257.\n\nCVE-2025-25257 - \u044d\u0442\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c RCE \u0447\u0435\u0440\u0435\u0437 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e (SQLi), \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f FortiWeb \u0432\u0435\u0440\u0441\u0438\u0439 7.6.0-7.6.3, 7.4.0-7.4.7, 7.4.0-7.4.7 \u0438 7.0.0-7.0.10.\n\nFortinet \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f 8 \u0438\u044e\u043b\u044f 2025 \u0433\u043e\u0434\u0430, \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e FortiWeb 7.6.4, 7.4.8, 7.2.11 \u0438\u043b\u0438 7.0.11 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043a\u0430\u0436\u0434\u043e\u0439 \u0432\u0435\u0442\u043a\u0438.\n\n11 \u0438\u044e\u043b\u044f WatchTowr \u0438 \u043e\u0434\u0438\u043d \u0438\u0437 \u043f\u0435\u0440\u0432\u043e\u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u00abfaulty *ptrrr\u00bb \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u043b\u0438 \u043c\u0435\u0442\u043e\u0434\u044b \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0432\u0435\u0431-\u0448\u0435\u043b\u043b\u043e\u0432 \u0438\u043b\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u044f \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u0445 \u0448\u0435\u043b\u043b\u043e\u0432 \u043d\u0430 \u043d\u0435\u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u044b\u0445 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u043a\u0430\u0445.\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 SQLi \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u0432 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u0430\u0445, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043d\u0430 /api/fabric/device/status, \u0447\u0442\u043e \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b .pth \u0432 \u00absite-packages\u00bb Python.\n\n\u0417\u0430\u0442\u0435\u043c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u043e\u043c\u0443 CGI-\u0441\u043a\u0440\u0438\u043f\u0442\u0443 FortiWeb (/cgi-bin/ml-draw.py), \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0432\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c \u0444\u0430\u0439\u043b\u0435 .pth \u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\u041d\u0430 \u0442\u043e\u0442 \u043c\u043e\u043c\u0435\u043d\u0442 \u043d\u0435 \u0431\u044b\u043b\u043e \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0441\u0432\u0438\u0434\u0435\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u043e \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u0431\u044b\u0441\u0442\u0440\u043e \u0438\u0437\u043c\u0435\u043d\u0438\u043b\u0430\u0441\u044c, \u043a\u0430\u043a \u043c\u044b \u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u043b\u0438.\n\n\u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e (40) \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u044b \u0432  \u0421\u0428\u0410,  \u0437\u0430 \u043d\u0438\u043c\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0442  \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u044b  (5), \u0421\u0438\u043d\u0433\u0430\u043f\u0443\u0440 (4) \u0438 \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u044f (4).\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c The Shadowserver, 223 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f FortiWeb \u0432\u0441\u0435 \u0435\u0449\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u044b, \u0445\u043e\u0442\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u0442\u043e\u043c, \u043a\u0430\u043a\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u043e\u043d\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442, \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442.\n\n\u0422\u0430\u043a \u0447\u0442\u043e \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c.", "creation_timestamp": "2025-07-16T15:52:01.000000Z"}, {"uuid": "070705ff-c044-4154-bca7-513cd6a60816", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "exploited", "source": "Telegram/NelR4pOf0hiiYvJpjXm4VQZR13llMulm0_w10sYH3GlUSrA", "content": "", "creation_timestamp": "2025-07-11T03:00:05.000000Z"}, {"uuid": "586e1700-f02f-4417-98c9-f8a01a6f1fb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "published-proof-of-concept", "source": "Telegram/MB-PBMEogcP3NOq1YGqCvXbjtxrDSj0DePkzerQEW2dxutw", "content": "", "creation_timestamp": "2025-07-11T15:00:09.000000Z"}, {"uuid": "74e88a01-c93b-4f47-a6bb-90a30364ffe5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "published-proof-of-concept", "source": "Telegram/eFRuzzeN1-jML4rbF1fHOQO9PKhaLan2-GVo0BiqDnLALA0", "content": "", "creation_timestamp": "2025-07-11T21:00:04.000000Z"}, {"uuid": "5cbff272-0d17-4e70-bd4d-729cf7ff293c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "Telegram/7l4EKLnQLfrGEEzl1gR71piBpXgghub64Qx0gJCVwoD2Fw", "content": "", "creation_timestamp": "2025-07-11T17:02:39.000000Z"}, {"uuid": "020dc602-b6ac-4be1-b21e-ca5d6273955e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "published-proof-of-concept", "source": "Telegram/sNmItQgMHb7EtQuWVunThi1eiYvU8C-y25JfyaTRbpjanbzg", "content": "", "creation_timestamp": "2025-07-13T18:35:05.000000Z"}, {"uuid": "dc8ff220-da60-4984-844c-69cc2304afac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "published-proof-of-concept", "source": "Telegram/vQGa_ba-QVKaOvDSuX7y4y7EZT_A_90-d6xov3_MefrlRfg", "content": "", "creation_timestamp": "2025-07-12T19:00:08.000000Z"}, {"uuid": "f1b0cdfc-f42b-48e6-ad42-02ca36117900", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://t.me/cibsecurity/85762", "content": "\ud83d\udd8b\ufe0f Fortinet Releases Patch for Critical SQL Injection Flaw in FortiWeb (CVE-2025-25257) \ud83d\udd8b\ufe0f\n\nFortinet has released fixes for a critical security flaw impacting FortiWeb that could enable an unauthenticated attacker to run arbitrary database commands on susceptible instances. Tracked as CVE202525257, the vulnerability carries a CVSS score of 9.6 out of a maximum of 10.0. \"An improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability CWE89 in.\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"The Hacker News\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "creation_timestamp": "2025-07-11T15:21:36.000000Z"}, {"uuid": "49aa166a-ba2c-46aa-a455-6a4c6baf63fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/7218", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044f \u0442\u0435\u043c\u0443 \u0438\u044e\u043b\u044c\u0441\u043a\u043e\u0433\u043e PatchTuesday, \u0445\u043e\u0442\u0435\u043b\u043e\u0441\u044c \u0431\u044b \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u043d\u0430\u0441\u0442\u0443\u043f\u0438\u043b \u043e\u043d \u043d\u0435 \u0443 \u0432\u0441\u0435\u0445.\n\n\u0412\u043f\u0435\u0440\u0432\u044b\u0435 \u0437\u0430 \u0448\u0435\u0441\u0442\u044c \u043b\u0435\u0442 Google \u043f\u0440\u0438\u0448\u043b\u0430 \u043a \u0441\u0432\u043e\u0438\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441 \u043f\u0443\u0441\u0442\u044b\u043c\u0438 \u0440\u0443\u043a\u0430\u043c\u0438: \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435\u00a0\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Android \u043d\u0435 \u0431\u0443\u0434\u0435\u0442.\n\n\u0422\u0430\u043a \u0447\u0442\u043e, \u043b\u0443\u0447\u0448\u0435 \u043f\u043e\u0433\u043b\u044f\u0434\u0438\u043c, \u0447\u0442\u043e \u0442\u0430\u043c \u0443 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 \u043f\u043e \u0447\u0430\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439:\n\n1. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 General Analysis \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 Supabase MCP, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0443\u0442\u0435\u0447\u043a\u0438 \u0442\u0430\u0431\u043b\u0438\u0446 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 SQL.\n\n\u0410\u0442\u0430\u043a\u0430 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u043c \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u044f \u0434\u0432\u0443\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f: \u0447\u0440\u0435\u0437\u043c\u0435\u0440\u043d\u043e\u0433\u043e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 (service_role) \u0438 \u0438\u0437\u043b\u0438\u0448\u043d\u0435\u0433\u043e \u0434\u043e\u0432\u0435\u0440\u0438\u044f \u043a \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0443, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n2. \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e SailPoint IQService \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0442 \u0436\u0451\u0441\u0442\u043a\u043e \u0437\u0430\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043a\u043b\u044e\u0447 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0441\u043b\u0443\u0436\u0431 SailPoint IAM.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c NetSPI, \u043a\u043b\u044e\u0447 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0445\u0440\u0430\u043d\u0438\u0442\u0441\u044f \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 DLL-\u0444\u0430\u0439\u043b\u043e\u0432. \n\nSailPoint \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u043e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043f\u043e\u0441\u043b\u0435\u00a0\u043c\u0430\u0439\u0441\u043a\u0438\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0434\u043b\u044f \u043e\u0448\u0438\u0431\u043a\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d PoC.\n\n3. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Silverfort \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u043e\u0432\u0443\u044e DoS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 Netlogon \u043e\u0442 Microsoft.\n\nCVE-2025-47978 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 NOTLogon \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u044e\u0431\u043e\u043c\u0443 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0443, \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u043c\u0443 \u043a \u0434\u043e\u043c\u0435\u043d\u0443, \u0441 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0441\u0431\u043e\u044e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0434\u043e\u043c\u0435\u043d\u0430 \u0438 \u043f\u043e\u043b\u043d\u043e\u0439 \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435.\n\n4. \u0413\u0440\u0443\u043f\u043f\u0430 \u0443\u0447\u0451\u043d\u044b\u0445 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u043d\u043e\u0432\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 TLS-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u043d\u0430\u0437\u0432\u0430\u043d\u0430 \u041e\u043f\u043e\u0441\u0441\u0443\u043c \u0438 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0441 \u043f\u043e\u0437\u0438\u0446\u0438\u0439 MitM \u0434\u043b\u044f \u0444\u0438\u043a\u0441\u0430\u0446\u0438\u0438 \u0441\u0435\u0430\u043d\u0441\u0430, \u0437\u0430\u043f\u0443\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432, XSS \u0438\u043b\u0438 \u0443\u0442\u0435\u0447\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 cookie.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0430\u0442\u0430\u043a\u0430 \u043e\u0447\u0435\u043d\u044c \u043d\u0430\u0434\u0451\u0436\u043d\u0430, \u043d\u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u0443\u0441\u043b\u043e\u0432\u0438\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0442\u0441\u044f \u043a\u0440\u0430\u0439\u043d\u0435 \u0440\u0435\u0434\u043a\u043e.\n\n5. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0430\u044f \u043b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u044f Security Explorations \u043f\u043e\u043b\u044c\u0441\u043a\u043e\u0439 AG Security Research \u043f\u0440\u043e\u0432\u0435\u043b\u0430 \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 eSIM \u0438 eUICC \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043a\u043b\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f eSIM \u0436\u0435\u0440\u0442\u0432\u044b \u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0437\u0430 \u0435\u0435 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u043c\u0438 \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u044f\u043c\u0438.\n\n\u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u043f\u0440\u043e\u0435\u043a\u0442 Security Explorations \u0431\u044b\u043b \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0435\u043d \u043d\u0430 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Kigen, \u0447\u0438\u043f\u044b eUICC/eSIM \u043e\u0442 \u0440\u044f\u0434\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0445 \u0430\u0442\u0430\u043a, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043e\u0441\u043d\u043e\u0432\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0441\u0435\u0440\u0438\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0432 Java Card \u043e\u0442 Oracle.\n\n6. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0435 \u0434\u043b\u044f Ivanti Connect Secure (ICS) \u0438 Policy Secure (IPS), Endpoint Manager Mobile (EPMM) \u0438 Endpoint Manager (EPM), \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u0432 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 11 \u043e\u0448\u0438\u0431\u043e\u043a, \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f.\n\n\u0422\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e \u0432 \u0441\u0432\u043e\u0435\u043c\u00a0\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u0443 \u043d\u0435\u0435 \u043d\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u043a\u0430\u043a\u0438\u0435-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u041d\u043e, \u043a\u0430\u043a \u043c\u044b \u0437\u043d\u0430\u0435\u043c, \u043e\u0431\u044b\u0447\u043d\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u044b Ivanti \u0447\u0438\u0442\u0430\u044e\u0442 \u0432 \u043e\u0431\u0440\u0430\u0442\u043d\u043e \u043f\u043e\u0440\u044f\u0434\u043a\u0435.\n\n7. Fortinet \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0432\u043e\u0441\u0435\u043c\u044c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u044b \u043e\u0434\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f, \u043e\u0434\u043d\u0430 \u0432\u044b\u0441\u043e\u043a\u043e\u0439, \u043f\u044f\u0442\u044c \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0438 \u043e\u0434\u043d\u0430 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 FortiAnalyzer, FortiIsolator, FortiManager, FortiOS, FortiProxy, FortiSandbox, FortiSASE, FortiVoice \u0438 FortiWeb.\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f CVE-2025-25257 (CVSS 9,6) \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0435\u0439 \u0432 FortiWeb \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 HTTP/HTTPS-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e SQL-\u043a\u043e\u0434\u0430 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434.\n\n\u0414\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f.\n\nFortinet \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f\u0445 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n8. \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0432\u0430\u0436\u043d\u044b\u0435 \u0438\u0437 12 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 Splunk,\u00a0\u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Splunk SOAR, Enterprise \u0438 DB Connect. \n\n\u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043d\u0438\u0445 - \u044d\u0442\u043e \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430, \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE 2022 \u0438 2023, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0434\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 - \u043e\u0442 2013 \u0433\u043e\u0434\u0430.", "creation_timestamp": "2025-07-10T19:04:11.000000Z"}, {"uuid": "64445c25-d174-44f3-bf06-b70f75f1bf82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "seen", "source": "https://t.me/itsec_news/5499", "content": "\u200b\u26a1\ufe0f\u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 ruby-saml \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e: \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0433\u0440\u043e\u0436\u0430\u044e\u0442 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\n\ud83d\udcac \u0412 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 ruby-saml, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0439 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u043c Security Assertion Markup Language (SAML), \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u042d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\nSAML \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u043c\u0435\u0436\u0434\u0443 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c\u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0435\u0434\u0438\u043d\u043e\u0436\u0434\u044b \u0432\u0445\u043e\u0434\u0438\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 (SSO) \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u0431\u0435\u0437 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0433\u043e \u0432\u0432\u043e\u0434\u0430 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u041e\u0434\u043d\u0430\u043a\u043e \u0432 \u043a\u043e\u0434\u0435 ruby-saml \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u043e\u0448\u0438\u0431\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0414\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0435 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b CVE-2025-25291 \u0438 CVE-2025-25292 , \u0438\u043c\u0435\u044e\u0442 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 CVSS \u2014 8.8 \u0438\u0437 10. \u041e\u043d\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u043c\u043b\u0430\u0434\u0448\u0435 1.12.4, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 1.13.0 \u0434\u043e 1.18.0 (\u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e).\n\n\u041f\u0440\u0438\u0447\u0438\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u0438\u044f\u0445 \u043c\u0435\u0436\u0434\u0443 \u043f\u0430\u0440\u0441\u0435\u0440\u0430\u043c\u0438 XML REXML \u0438 Nokogiri, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e-\u0440\u0430\u0437\u043d\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0438\u0440\u0443\u044e\u0442 \u043e\u0434\u0438\u043d \u0438 \u0442\u043e\u0442 \u0436\u0435 XML-\u043a\u043e\u0434. \u042d\u0442\u043e \u0440\u0430\u0441\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u0435 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 Signature Wrapping, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 GitHub \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 2024 \u0433\u043e\u0434\u0430. \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438, \u0447\u0442\u043e \u044d\u0442\u0438 \u043e\u0448\u0438\u0431\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435, \u043e\u0431\u043b\u0430\u0434\u0430\u044f \u043e\u0434\u043d\u043e\u0439 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u044c\u044e, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043b\u044e\u0447\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 SAML-\u043e\u0442\u0432\u0435\u0442\u043e\u0432 \u0438\u043b\u0438 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0439, \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u0442\u044c SAML-\u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 1.12.4 \u0438 1.18.0 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0435\u0449\u0451 \u043e\u0434\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 ( CVE-2025-25293 , CVSS 7.7), \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043e\u0442\u043a\u0430\u0437\u043e\u043c \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 (DoS). \u041e\u043d\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0436\u0430\u0442\u044b\u0445 SAML-\u043e\u0442\u0432\u0435\u0442\u043e\u0432 \u0438 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0434\u0435\u0441\u0442\u0430\u0431\u0438\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0430\u0431\u043e\u0442\u044b \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432.\n\n\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 GitHub \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u043a\u043e\u0440\u0435\u043d\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u2014 \u043d\u0435\u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0435 \u043c\u0435\u0436\u0434\u0443 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0445\u0435\u0448\u0430 \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438, \u0447\u0442\u043e \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0440\u0430\u0437\u043d\u0438\u0446\u0443 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 XML-\u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c ruby-saml \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0447\u0442\u043e\u0431\u044b \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0440\u0438\u0441\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0420\u0430\u043d\u0435\u0435, \u0432 2024 \u0433\u043e\u0434\u0443, GitLab \u0438 ruby-saml \u0443\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0431\u0430\u0433 ( CVE-2024-45409 , CVSS 10.0), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-03-15T14:47:01.000000Z"}, {"uuid": "a40f623e-2e55-44fa-b2a0-4eae9c917597", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25293", "type": "seen", "source": "https://t.me/itsec_news/5499", "content": "\u200b\u26a1\ufe0f\u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 ruby-saml \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e: \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0433\u0440\u043e\u0436\u0430\u044e\u0442 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\n\ud83d\udcac \u0412 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 ruby-saml, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0439 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u043c Security Assertion Markup Language (SAML), \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u042d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\nSAML \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u043c\u0435\u0436\u0434\u0443 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c\u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0435\u0434\u0438\u043d\u043e\u0436\u0434\u044b \u0432\u0445\u043e\u0434\u0438\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 (SSO) \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u0431\u0435\u0437 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0433\u043e \u0432\u0432\u043e\u0434\u0430 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u041e\u0434\u043d\u0430\u043a\u043e \u0432 \u043a\u043e\u0434\u0435 ruby-saml \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u043e\u0448\u0438\u0431\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0414\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0435 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b CVE-2025-25291 \u0438 CVE-2025-25292 , \u0438\u043c\u0435\u044e\u0442 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 CVSS \u2014 8.8 \u0438\u0437 10. \u041e\u043d\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u043c\u043b\u0430\u0434\u0448\u0435 1.12.4, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 1.13.0 \u0434\u043e 1.18.0 (\u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e).\n\n\u041f\u0440\u0438\u0447\u0438\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u0438\u044f\u0445 \u043c\u0435\u0436\u0434\u0443 \u043f\u0430\u0440\u0441\u0435\u0440\u0430\u043c\u0438 XML REXML \u0438 Nokogiri, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e-\u0440\u0430\u0437\u043d\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0438\u0440\u0443\u044e\u0442 \u043e\u0434\u0438\u043d \u0438 \u0442\u043e\u0442 \u0436\u0435 XML-\u043a\u043e\u0434. \u042d\u0442\u043e \u0440\u0430\u0441\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u0435 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 Signature Wrapping, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 GitHub \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 2024 \u0433\u043e\u0434\u0430. \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438, \u0447\u0442\u043e \u044d\u0442\u0438 \u043e\u0448\u0438\u0431\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435, \u043e\u0431\u043b\u0430\u0434\u0430\u044f \u043e\u0434\u043d\u043e\u0439 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u044c\u044e, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043b\u044e\u0447\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 SAML-\u043e\u0442\u0432\u0435\u0442\u043e\u0432 \u0438\u043b\u0438 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0439, \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u0442\u044c SAML-\u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 1.12.4 \u0438 1.18.0 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0435\u0449\u0451 \u043e\u0434\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 ( CVE-2025-25293 , CVSS 7.7), \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043e\u0442\u043a\u0430\u0437\u043e\u043c \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 (DoS). \u041e\u043d\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0436\u0430\u0442\u044b\u0445 SAML-\u043e\u0442\u0432\u0435\u0442\u043e\u0432 \u0438 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0434\u0435\u0441\u0442\u0430\u0431\u0438\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0430\u0431\u043e\u0442\u044b \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432.\n\n\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 GitHub \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u043a\u043e\u0440\u0435\u043d\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u2014 \u043d\u0435\u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0435 \u043c\u0435\u0436\u0434\u0443 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0445\u0435\u0448\u0430 \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438, \u0447\u0442\u043e \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0440\u0430\u0437\u043d\u0438\u0446\u0443 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 XML-\u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c ruby-saml \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0447\u0442\u043e\u0431\u044b \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0440\u0438\u0441\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0420\u0430\u043d\u0435\u0435, \u0432 2024 \u0433\u043e\u0434\u0443, GitLab \u0438 ruby-saml \u0443\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0431\u0430\u0433 ( CVE-2024-45409 , CVSS 10.0), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-03-15T14:47:01.000000Z"}, {"uuid": "4f5fc975-accb-409c-b387-e5a08d1b185b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2563", "type": "seen", "source": "Telegram/-QOyMiowJoIyiMyTWDmr53uOV1Gxrf1KetOkwLf9_gvu4z0", "content": "", "creation_timestamp": "2025-06-25T00:39:14.000000Z"}, {"uuid": "21f1ff77-ae89-418d-9102-a43e7b80774b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25014", "type": "seen", "source": "https://t.me/cyberbannews_ir/16664", "content": "\ud83e\ude99 \u06a9\u0634\u0641 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 KIBANA\n\n\ud83d\udd3a\u0627\u062e\u06cc\u0631\u0627\u064b \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647\u200c\u06cc CVE-2025-25014 \u062f\u0631 \u06a9\u06cc\u0628\u0627\u0646\u0627 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647 \u06a9\u0647 \u0627\u0645\u06a9\u0627\u0646 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u0631\u0627 \u0628\u0631\u0627\u06cc \u0645\u0647\u0627\u062c\u0645 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f.\n\n\ud83d\udd3b\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u0632 \u0646\u0648\u0639 Prototype Pollution \u0627\u0633\u062a \u0648 \u0646\u0648\u0639\u06cc \u0636\u0639\u0641 \u0627\u0645\u0646\u06cc\u062a\u06cc \u062f\u0631 \u0632\u0628\u0627\u0646\u200c\u0647\u0627\u06cc \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0646\u0648\u06cc\u0633\u06cc \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 \u062c\u0627\u0648\u0627 \u0627\u0633\u06a9\u0631\u06cc\u067e\u062a \u0628\u0647\u200c\u0634\u0645\u0627\u0631 \u0645\u06cc\u200c\u0631\u0648\u062f \u06a9\u0647 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u062a\u0627 \u0633\u0627\u062e\u062a\u0627\u0631 \u06cc\u0627 \u0631\u0641\u062a\u0627\u0631 \u0627\u0634\u06cc\u0627\u0621 \u0631\u0627 \u0628\u0627 \u062f\u0633\u062a\u200c\u06a9\u0627\u0631\u06cc Prototype \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0647\u062f.\n\n\ud83d\udd39\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u06cc\u0634\u062a\u0631 \u062f\u0631 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc Node.js \u06cc\u0627 \u062c\u0627\u0648\u0627\u0627\u0633\u06a9\u0631\u06cc\u067e\u062a \u0633\u0645\u062a \u06a9\u0644\u0627\u06cc\u0646\u062a \u0645\u0634\u0627\u0647\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f.\n\n\u2764\ufe0f \u06af\u0632\u0627\u0631\u0634 \u06a9\u0627\u0645\u0644\n\n#\u0622\u0633\u06cc\u0628_\u067e\u0630\u06cc\u0631\u06cc #\u0647\u06a9\n\n\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\n\ud83d\udd39\ud83d\udd39 @cyberbannews_ir", "creation_timestamp": "2025-05-13T10:15:46.000000Z"}, {"uuid": "73c13b36-d9cc-4760-86c0-5d83e4fcfe10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2539", "type": "published-proof-of-concept", "source": "Telegram/BKuPxIutc2nIOauSGwNo2RjHe9vumuUmJbIl9uBDskH8Whk", "content": "", "creation_timestamp": "2025-06-04T15:00:10.000000Z"}, {"uuid": "73cd50d4-0f73-4fd5-b628-9ab75dfd95e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2539", "type": "published-proof-of-concept", "source": "Telegram/PZXnmucdjGIdNvQHNbZhO7KnneJGSqyo9dvsMfJysp2bsr4", "content": "", "creation_timestamp": "2025-06-04T15:00:07.000000Z"}, {"uuid": "88a59869-fcf5-4cf9-a16a-08afe57e2558", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2563", "type": "seen", "source": "Telegram/EKi3juhW8KdvSrT-C52NnQYma9e80zcUs_26vGBIli1oz3UL", "content": "", "creation_timestamp": "2025-06-25T17:32:32.000000Z"}, {"uuid": "a6f12c6b-229a-4d03-8f66-65ced74a3729", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2563", "type": "seen", "source": "Telegram/nVjbyWi1OTQqVrCfCpVg9HGjFoxjWvVL_Heny3L18ja2tx5m", "content": "", "creation_timestamp": "2025-06-25T00:39:13.000000Z"}, {"uuid": "3cb50cfb-f3c8-4b40-8046-0da0d1532568", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2539", "type": "published-proof-of-concept", "source": "Telegram/f6KtBpbi28AjJnkQD2_H-h8G8IoK-2QasjPMZlVGczHCEVE", "content": "", "creation_timestamp": "2025-06-10T07:00:07.000000Z"}, {"uuid": "20ee2ac6-e8d0-478b-a960-7ca350eba545", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25907", "type": "seen", "source": "Telegram/1pldzCkUrE4ULspR8EZ8lX_Hb1B-ffQ8uMd_tL-etWZVlvAV", "content": "", "creation_timestamp": "2025-03-11T04:41:14.000000Z"}, {"uuid": "1e285f2c-0970-41c5-9cd3-4c98dd06c0d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25427", "type": "seen", "source": "https://t.me/cvedetector/23302", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25427 - \"TP-Link WR841N UPnP Stored XSS\"\", \n  \"Content\": \"CVE ID : CVE-2025-25427 \nPublished : April 18, 2025, 1:15 a.m. | 1\u00a0hour, 12\u00a0minutes ago \nDescription : A Stored cross-site scripting (XSS)  \nvulnerability in upnp page of the web Interface in TP-Link WR841N <=4.19\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-18T04:52:31.000000Z"}, {"uuid": "d6debed5-de95-405b-96b9-54be1359de51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25455", "type": "seen", "source": "https://t.me/cvedetector/23272", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25455 - Tenda AC10 Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25455 \nPublished : April 17, 2025, 6:15 p.m. | 2\u00a0hours, 7\u00a0minutes ago \nDescription : Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via wanMTU2. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-17T23:01:10.000000Z"}, {"uuid": "164413b1-1708-48a2-be3e-9d599a10f6bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25454", "type": "seen", "source": "https://t.me/cvedetector/23271", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25454 - Tenda AC10 Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25454 \nPublished : April 17, 2025, 6:15 p.m. | 2\u00a0hours, 7\u00a0minutes ago \nDescription : Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via wanSpeed2. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-17T23:01:09.000000Z"}, {"uuid": "c0315010-751e-48ec-b537-2bca0720805b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25907", "type": "seen", "source": "Telegram/kN2UtMWJWucHqgNiDiKmp-lM3X_UMa4l8R1ZCILMCzXmN0g3", "content": "", "creation_timestamp": "2025-03-11T04:41:13.000000Z"}, {"uuid": "5a28fb51-577a-4858-b734-601a9f51f373", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25614", "type": "seen", "source": "Telegram/Qu5QZtu80EhOMV4E7TVYkV8pmKNMXNf-_utRdiurJMIFd09x", "content": "", "creation_timestamp": "2025-03-11T04:41:13.000000Z"}, {"uuid": "fa5d1c43-831b-4fed-96e7-3a0f3e98c50d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25775", "type": "seen", "source": "https://t.me/cvedetector/23779", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25775 - Codeastro Bus Ticket Booking System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25775 \nPublished : April 25, 2025, 5:15 p.m. | 1\u00a0hour, 54\u00a0minutes ago \nDescription : Codeastro Bus Ticket Booking System v1.0 is vulnerable to SQL injection via the kodetiket parameter in /BusTicket-CI/tiket/cekorder. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-25T21:41:45.000000Z"}, {"uuid": "1b6d0058-628c-4a9a-90f5-7e56f63324c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25458", "type": "seen", "source": "https://t.me/cvedetector/23039", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25458 - Tenda AC10 Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2025-25458 \nPublished : April 15, 2025, 11:15 p.m. | 2\u00a0hours, 8\u00a0minutes ago \nDescription : Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via serverName2. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-16T03:29:30.000000Z"}, {"uuid": "9328f8eb-e9b7-4752-81a8-38512041c215", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25453", "type": "seen", "source": "https://t.me/cvedetector/23038", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25453 - Tenda AC10 Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25453 \nPublished : April 15, 2025, 11:15 p.m. | 2\u00a0hours, 8\u00a0minutes ago \nDescription : Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via serviceName2. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-16T03:29:29.000000Z"}, {"uuid": "2283eee9-6163-4eeb-b840-267427e9c092", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2558", "type": "seen", "source": "https://t.me/cvedetector/23640", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2558 - \"WordPress Theme-Wound LFI Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-2558 \nPublished : April 24, 2025, 6:15 a.m. | 14\u00a0minutes ago \nDescription : The-wound WordPress theme through 0.0.1 does not validate some parameters before using them to generate paths passed to include function/s, allowing unauthenticated users to perform LFI attacks and download arbitrary file from the server \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-24T08:52:53.000000Z"}, {"uuid": "bd21d591-849b-45cf-800a-34ab2cad0c27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2580", "type": "seen", "source": "https://t.me/cvedetector/23730", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2580 - Bit Form WordPress Contact Form Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2580 \nPublished : April 25, 2025, 6:15 a.m. | 32\u00a0minutes ago \nDescription : The Contact Form by Bit Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.18.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-25T09:09:11.000000Z"}, {"uuid": "8415e2c3-b00f-4024-822e-65c4b8ff4896", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25777", "type": "seen", "source": "https://t.me/cvedetector/23707", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25777 - Codeastro Bus Ticket Booking System IDOR\", \n  \"Content\": \"CVE ID : CVE-2025-25777 \nPublished : April 24, 2025, 9:15 p.m. | 1\u00a0hour, 20\u00a0minutes ago \nDescription : Insecure Direct Object Reference (IDOR) in Codeastro Bus Ticket Booking System v1.0 allows unauthorized access to user profiles. By manipulating the user ID in the URL, an attacker can access another user's profile without proper authentication or authorization checks. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-25T00:47:54.000000Z"}, {"uuid": "83d24530-3618-47a1-858c-ae7207e7b6ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2543", "type": "seen", "source": "https://t.me/cvedetector/23666", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2543 - WordPress Advanced Accordion Gutenberg Block Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2025-2543 \nPublished : April 24, 2025, 9:15 a.m. | 1\u00a0hour, 16\u00a0minutes ago \nDescription : The Advanced Accordion Gutenberg Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 5.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-24T13:03:54.000000Z"}, {"uuid": "7b45b0a0-9388-4da9-86e3-3d62a38e6a53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2579", "type": "seen", "source": "https://t.me/cvedetector/23663", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2579 - Lottie Player WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2579 \nPublished : April 24, 2025, 9:15 a.m. | 1\u00a0hour, 16\u00a0minutes ago \nDescription : The Lottie Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via File uploads in all versions up to, and including, 1.1.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the uploaded file. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-24T13:03:49.000000Z"}, {"uuid": "6e75aeb0-cf98-420c-9f8a-b84c1454a072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25046", "type": "seen", "source": "https://t.me/cvedetector/23624", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25046 - IBM InfoSphere Information Server DataStage Flow Designer Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-25046 \nPublished : April 23, 2025, 11:15 p.m. | 1\u00a0hour, 8\u00a0minutes ago \nDescription : IBM InfoSphere Information Server 11.7\u00a0DataStage Flow Designer\u00a0  \n  \ntransmits sensitive information via URL or query parameters that could be exposed to an unauthorized actor using man in the middle techniques. \nSeverity: 3.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-24T03:01:44.000000Z"}, {"uuid": "db07212b-ca92-41a8-8851-f146c60a4233", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2595", "type": "seen", "source": "https://t.me/cvedetector/23579", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2595 - CODESYS Visualization Forced Browsing Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2595 \nPublished : April 23, 2025, 8:15 a.m. | 1\u00a0hour, 57\u00a0minutes ago \nDescription : An unauthenticated remote attacker can bypass the user management in CODESYS Visualization and read visualization template files or static elements by means of forced browsing. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-23T12:48:30.000000Z"}, {"uuid": "5199e830-3ad0-4bf3-8db8-35029ca996b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25045", "type": "seen", "source": "https://t.me/cvedetector/23625", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25045 - IBM InfoSphere Information Server Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-25045 \nPublished : April 23, 2025, 11:15 p.m. | 1\u00a0hour, 8\u00a0minutes ago \nDescription : IBM InfoSphere Information 11.7 Server authenticated user to obtain sensitive information when a detailed technical error message is returned in a request.  This information could be used in further attacks against the system. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-24T03:01:45.000000Z"}, {"uuid": "09cfcc48-03de-4dd6-a1b3-5cff0a276192", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2517", "type": "seen", "source": "https://t.me/cvedetector/23440", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2517 - OpenText ArcSight Enterprise Security Manager Domain Reference Leak\", \n  \"Content\": \"CVE ID : CVE-2025-2517 \nPublished : April 21, 2025, 3:16 p.m. | 26\u00a0minutes ago \nDescription : Reference to Expired Domain Vulnerability in OpenText\u2122 ArcSight Enterprise Security Manager. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-21T18:09:14.000000Z"}, {"uuid": "8486dbbd-7082-4a6c-8b70-6e86154778b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2594", "type": "seen", "source": "https://t.me/cvedetector/23487", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2594 - WordPress User Registration & Membership Unauthorized Authentication Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2594 \nPublished : April 22, 2025, 6:15 a.m. | 1\u00a0hour, 39\u00a0minutes ago \nDescription : The User Registration & Membership  WordPress plugin before 4.1.3 does not properly validate data in an AJAX action when the Membership Addon is enabled, allowing attackers to authenticate as any user, including administrators, by simply using the target account's user ID. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T10:02:37.000000Z"}, {"uuid": "2c9e6ee2-568e-4d7e-80a8-206481df512b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25228", "type": "seen", "source": "https://t.me/cvedetector/23432", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25228 - VirtueMart SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25228 \nPublished : April 21, 2025, 8:15 a.m. | 1\u00a0hour, 22\u00a0minutes ago \nDescription : A SQL injection in VirtueMart component 1.0.0 - 4.4.7 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands in the product management area in backend. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-21T12:17:57.000000Z"}, {"uuid": "73f80c54-ba8e-49ed-87b2-9d731b455839", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25456", "type": "seen", "source": "https://t.me/cvedetector/23000", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25456 - Tenda AC10 Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25456 \nPublished : April 15, 2025, 7:16 p.m. | 56\u00a0minutes ago \nDescription : Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via mac2. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-15T22:28:06.000000Z"}, {"uuid": "7f4cdd33-ba31-4daa-bdd1-54bd0712b100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25985", "type": "seen", "source": "https://t.me/cvedetector/23344", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25985 - Macro-video Technologies Co.,Ltd V380E6_C1 IP Camera Physical Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25985 \nPublished : April 18, 2025, 8:15 p.m. | 29\u00a0minutes ago \nDescription : An issue in Macro-video Technologies Co.,Ltd V380E6_C1 IP camera (Hw_HsAKPIQp_WF_XHR) 1020302 allows a physically proximate attacker to execute arbitrary code via the /mnt/mtd/mvconf/wifi.ini and /mnt/mtd/mvconf/user_info.ini components. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-18T23:16:07.000000Z"}, {"uuid": "1e6815d8-8c7b-46c0-82c3-d167fb033a07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25983", "type": "seen", "source": "https://t.me/cvedetector/23343", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25983 - Macro-video Technologies Co.,Ltd V380 Pro Android Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-25983 \nPublished : April 18, 2025, 8:15 p.m. | 29\u00a0minutes ago \nDescription : An issue in Macro-video Technologies Co.,Ltd V380 Pro android application 2.1.44 and V380 Pro android application 2.1.64 allows an attacker to obtain sensitive information via the QE code based sharing component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-18T23:16:06.000000Z"}, {"uuid": "6f388057-1838-4523-a95e-94ccc2a2cb79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25984", "type": "seen", "source": "https://t.me/cvedetector/23342", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25984 - Macro-video Technologies Co.,Ltd V380E6_C1 IP Camera UART Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25984 \nPublished : April 18, 2025, 8:15 p.m. | 29\u00a0minutes ago \nDescription : An issue in Macro-video Technologies Co.,Ltd V380E6_C1 IP camera (Hw_HsAKPIQp_WF_XHR) 1020302 allows a physically proximate attacker to execute arbitrary code via UART component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-18T23:16:05.000000Z"}, {"uuid": "4890a6d0-2f7f-4cdd-b29a-dc9dd9ff850c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2567", "type": "seen", "source": "https://t.me/cvedetector/23014", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2567 - \"Rockwell Automation Fuel Monitoring System Configuration Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-2567 \nPublished : April 15, 2025, 8:15 p.m. | 1\u00a0hour, 3\u00a0minutes ago \nDescription : An attacker could modify or disable settings, disrupt fuel monitoring   \nand supply chain operations, leading to disabling of ATG monitoring.   \nThis would result in potential safety hazards in fuel storage and   \ntransportation. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-16T00:08:34.000000Z"}, {"uuid": "8274d39f-5832-46fc-ae51-50068b40b96e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2563", "type": "seen", "source": "https://t.me/cvedetector/22831", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2563 - \"WordPress User Registration & Membership Privilege Escalation Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-2563 \nPublished : April 14, 2025, 6:15 a.m. | 2\u00a0hours, 4\u00a0minutes ago \nDescription : The User Registration & Membership  WordPress plugin before 4.1.2 does not prevent users to set their account role when the Membership Addon is enabled, leading to a privilege escalation issue and allowing unauthenticated users to gain admin privileges \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-14T10:28:53.000000Z"}, {"uuid": "1fd81c9f-3bb8-4c1b-8672-b63f51bf1047", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2572", "type": "seen", "source": "https://t.me/cvedetector/22862", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2572 - WhatsUp Gold Database Manipulation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2572 \nPublished : April 14, 2025, 4:15 p.m. | 19\u00a0minutes ago \nDescription : In WhatsUp Gold versions released before 2024.0.3, a   \n  \ndatabase manipulation   \n  \nvulnerability allows an unauthenticated attacker to modify the contents of\u00a0WhatsUp.dbo.WrlsMacAddressGroup. \nSeverity: 5.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-14T18:51:18.000000Z"}, {"uuid": "c9d5aa1c-95fa-4667-a9f2-2a2f0305e386", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25403", "type": "seen", "source": "https://t.me/cvedetector/24028", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25403 - Slims Senayan Library Management Systems SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25403 \nPublished : April 29, 2025, 4:15 p.m. | 30\u00a0minutes ago \nDescription : Slims (Senayan Library Management Systems) 9 Bulian V9.6.1 is vulnerable to SQL Injection in admin/modules/master_file/coll_type.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-29T19:20:49.000000Z"}, {"uuid": "a31a6b9b-2f1f-478d-bd79-a3ef3ba19346", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25962", "type": "seen", "source": "https://t.me/cvedetector/24026", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25962 - Uniswap Coresmartcontracts Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2025-25962 \nPublished : April 29, 2025, 4:15 p.m. | 30\u00a0minutes ago \nDescription : An issue in Coresmartcontracts Uniswap v.3.0 and fixed in v.4.0 allows a remote attacker to escalate privileges via the _modifyPosition function \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-29T19:20:44.000000Z"}, {"uuid": "61f226be-52b3-4903-9c23-d9fb6b44006a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25056", "type": "seen", "source": "https://t.me/cvedetector/22546", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25056 - Wi-Fi AP UNIT AC-WPS-11ac Cross-Site Request Forgery\", \n  \"Content\": \"CVE ID : CVE-2025-25056 \nPublished : April 9, 2025, 9:15 a.m. | 48\u00a0minutes ago \nDescription : Cross-site request forgery vulnerability exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If a user views a malicious page while logged in, unintended operations may be performed. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-09T12:35:28.000000Z"}, {"uuid": "fad22682-e6bd-4ed1-8543-16b6e0102f05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25226", "type": "seen", "source": "https://t.me/cvedetector/22486", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25226 - Oracle Database SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25226 \nPublished : April 8, 2025, 5:15 p.m. | 17\u00a0minutes ago \nDescription : Improper handling of identifiers lead to a SQL injection vulnerability in the quoteNameStr method of the database package. Please note: the affected method is a protected method. It has no usages in the original packages in neither the 2.x nor 3.x branch and therefore the vulnerability in question can not be exploited when using the original database class. However, classes extending the affected class might be affected, if the vulnerable method is used. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-08T19:51:35.000000Z"}, {"uuid": "ada4a23b-f61e-464b-b8e1-6ed5b84ca70d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25023", "type": "seen", "source": "https://t.me/cvedetector/22563", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25023 - IBM Security Guardium Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25023 \nPublished : April 9, 2025, 2:15 p.m. | 2\u00a0hours, 10\u00a0minutes ago \nDescription : IBM Security Guardium 11.4 and 12.1 could allow a privileged user to read any file on the system due to incorrect privilege assignment. \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-09T18:26:47.000000Z"}, {"uuid": "57cacf2b-5364-4b7e-a99e-e21a7e5c2560", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25213", "type": "seen", "source": "https://t.me/cvedetector/22547", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25213 - Wi-Fi AP UNIT AC-WPS-11ac Series Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-25213 \nPublished : April 9, 2025, 9:15 a.m. | 48\u00a0minutes ago \nDescription : Improper restriction of rendered UI layers or frames issue exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If a user views and clicks on the content on the malicious page while logged in, unintended operations may be performed. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-09T12:35:29.000000Z"}, {"uuid": "38398fa5-cdec-4719-b2ea-0007a781fb2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25053", "type": "seen", "source": "https://t.me/cvedetector/22545", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25053 - Wi-Fi AP UNIT 'AC-WPS-11ac series' OS Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25053 \nPublished : April 9, 2025, 9:15 a.m. | 48\u00a0minutes ago \nDescription : OS command injection vulnerability in the WEB UI (the setting page) exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If exploited, an arbitrary OS command may be executed by a remote attacker who can log in to the product. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-09T12:35:28.000000Z"}, {"uuid": "908744c7-71cf-40aa-813a-5686d39a1fcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25013", "type": "seen", "source": "https://t.me/cvedetector/22532", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25013 - Elastic Defend Environment Variable Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-25013 \nPublished : April 8, 2025, 11:15 p.m. | 24\u00a0minutes ago \nDescription : Improper restriction of environment variables in Elastic Defend can lead to exposure of sensitive information such as API keys and tokens via automatic transmission of unfiltered environment variables to the stack. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-09T02:05:23.000000Z"}, {"uuid": "05d84e55-b77e-439d-a18e-eed1ae93a7ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25227", "type": "seen", "source": "https://t.me/cvedetector/22487", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25227 - Microsoft Azure Authenticator Two-Factor Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-25227 \nPublished : April 8, 2025, 5:15 p.m. | 17\u00a0minutes ago \nDescription : Insufficient state checks lead to a vector that allows to bypass 2FA checks. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-08T19:51:39.000000Z"}, {"uuid": "47f9f8e0-8927-4c9a-b24c-6d806855f343", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25254", "type": "seen", "source": "https://t.me/cvedetector/22466", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25254 - FortiWeb Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25254 \nPublished : April 8, 2025, 2:15 p.m. | 1\u00a0hour, 12\u00a0minutes ago \nDescription : An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] in FortiWeb version 7.6.2 and below, version 7.4.6 and below, 7.2 all versions, 7.0 all versions endpoint may allow an authenticated admin to access and modify the filesystem via crafted requests. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-08T18:11:00.000000Z"}, {"uuid": "b49185d9-dec8-4b95-9540-c5baaed7bff3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2568", "type": "seen", "source": "https://t.me/cvedetector/22455", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2568 - WordPress WooCommerce Vayu Blocks Unauthenticated Data Access and Modification\", \n  \"Content\": \"CVE ID : CVE-2025-2568 \nPublished : April 8, 2025, 12:15 p.m. | 1\u00a0hour, 11\u00a0minutes ago \nDescription : The Vayu Blocks \u2013 Gutenberg Blocks for WordPress & WooCommerce plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on the 'vayu_blocks_get_toggle_switch_values_callback' and 'vayu_blocks_save_toggle_switch_callback' function in versions 1.0.4 to 1.2.1. This makes it possible for unauthenticated attackers to read plugin options and update any option with a key name ending in '_value'. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-08T15:40:23.000000Z"}, {"uuid": "7b570633-e298-48b8-8ad7-c08f2ba6c741", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25620", "type": "seen", "source": "Telegram/Emr1ciIzaHHWcrPN1jw-fZ_xbG876xawTM79_wNMb0P0OljN", "content": "", "creation_timestamp": "2025-03-10T19:39:06.000000Z"}, {"uuid": "f0304669-a42d-4795-99d9-9d566b992552", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2519", "type": "seen", "source": "https://t.me/cvedetector/22382", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2519 - Sreamit WordPress Arbitrary File Download Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2519 \nPublished : April 8, 2025, 2:15 a.m. | 52\u00a0minutes ago \nDescription : The Sreamit theme for WordPress is vulnerable to arbitrary file downloads in all versions up to, and including, 4.0.1. This is due to insufficient file validation in the 'st_send_download_file' function. This makes it possible for authenticated attackers, with subscriber-level access and above, to download arbitrary files. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-08T05:37:38.000000Z"}, {"uuid": "ead73042-da71-497a-bc9e-86e7254440bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2526", "type": "seen", "source": "https://t.me/cvedetector/22379", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2526 - Streamit Theme for WordPress Privilege Escalation via Account Takeover\", \n  \"Content\": \"CVE ID : CVE-2025-2526 \nPublished : April 8, 2025, 2:15 a.m. | 52\u00a0minutes ago \nDescription : The Streamit theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.0.2. This is due to the plugin not properly validating a user's identity prior to updating their details like email in the 'st_Authentication_Controller::edit_profile' function. This makes it possible for unauthenticated attackers to change arbitrary user's email addresses, including administrators, and leverage that to reset the user's password and gain access to their account. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-08T05:37:33.000000Z"}, {"uuid": "8f3ad090-1cbd-4891-9e1b-9accc0164645", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2525", "type": "seen", "source": "https://t.me/cvedetector/22378", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2525 - Streamit for WordPress Arbitrary File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2525 \nPublished : April 8, 2025, 2:15 a.m. | 52\u00a0minutes ago \nDescription : The Streamit theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'st_Authentication_Controller::edit_profile' function in all versions up to, and including, 4.0.1. This makes it possible for authenticated attackers, with subscriber-level and above permissions, to upload arbitrary files on the affected site's server which may make remote code execution possible. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-08T05:37:32.000000Z"}, {"uuid": "bdaace9a-bb1d-488e-afe8-c5aacc81398c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25234", "type": "seen", "source": "https://t.me/cvedetector/23237", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25234 - Omnissa UAG CORS Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25234 \nPublished : April 17, 2025, 3:15 p.m. | 1\u00a0hour, 2\u00a0minutes ago \nDescription : Omnissa UAG contains a Cross-Origin Resource Sharing (CORS) bypass vulnerability.\u00a0A malicious actor with network access to UAG may be able to bypass administrator-configured CORS restrictions to gain access to sensitive networks. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-17T18:49:50.000000Z"}, {"uuid": "899a1631-1e0b-4cfd-9f8b-6101e6dd070e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25230", "type": "seen", "source": "https://t.me/cvedetector/23202", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25230 - Omnissa Horizon Client Windows Local Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2025-25230 \nPublished : April 16, 2025, 10:15 p.m. | 1\u00a0hour, 39\u00a0minutes ago \nDescription : Omnissa Horizon Client for Windows contains an LPE Vulnerability.\u00a0A malicious actor with local access where Horizon Client for Windows is installed may be able to elevate privileges. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-17T02:06:41.000000Z"}, {"uuid": "71554298-ed5e-465b-b1db-f05b0bb9fa97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2564", "type": "seen", "source": "https://t.me/cvedetector/23136", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2564 - Mattermost Authentication Bypass Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2564 \nPublished : April 16, 2025, 5:15 p.m. | 28\u00a0minutes ago \nDescription : Mattermost versions 10.5.x <=<=<=\nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-16T20:14:25.000000Z"}, {"uuid": "923cfd73-0470-4d99-be27-001cd351a8db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25579", "type": "seen", "source": "https://t.me/cvedetector/21476", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25579 - TOTOLINK A3002R Authentication Bypass Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25579 \nPublished : March 28, 2025, 10:15 p.m. | 31\u00a0minutes ago \nDescription : TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Command Injection in /bin/boa via bandstr. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-29T00:26:51.000000Z"}, {"uuid": "baf53f6c-7db7-4ac4-8141-8767e9b313ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2578", "type": "seen", "source": "https://t.me/cvedetector/21391", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2578 - Booking for Appointments and Events Calendar Amelia WordPress Full Path Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-2578 \nPublished : March 28, 2025, 8:15 a.m. | 2\u00a0hours, 1\u00a0minute ago \nDescription : The Booking for Appointments and Events Calendar \u2013 Amelia plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.2.19 via the 'wpAmeliaApiCall' function. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-28T11:53:31.000000Z"}, {"uuid": "3424a1bb-9f16-4564-9f1f-c2e7a3133922", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25057", "type": "seen", "source": "https://t.me/cvedetector/22242", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25057 - OpenHarmony Memory Leak DoS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25057 \nPublished : April 7, 2025, 3:15 a.m. | 1\u00a0hour, 8\u00a0minutes ago \nDescription : in OpenHarmony v5.0.2 and prior versions allow a local attacker case DOS through missing release of memory. \nSeverity: 3.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-07T07:01:19.000000Z"}, {"uuid": "950cecfc-6aa9-44c3-8e8e-faa3985fdcc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2516", "type": "seen", "source": "https://t.me/cvedetector/21303", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2516 - WPS Office (Kingsoft) Private Key Recovery and Man-in-the-Middle Attack\", \n  \"Content\": \"CVE ID : CVE-2025-2516 \nPublished : March 27, 2025, 3:16 p.m. | 20\u00a0minutes ago \nDescription : The use of a weak cryptographic key pair in the signature verification process in WPS Office (Kingsoft) on Windows allows an attacker who successfully recovered the private key to sign components.  \n  \nAs older versions of WPS Office did not validate the update server's certificate, an Adversary-In-The-Middle attack was possible allowing updates to be hijacked. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-27T16:39:15.000000Z"}, {"uuid": "50e2238b-fcce-465c-922d-337053a4b593", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2575", "type": "seen", "source": "https://t.me/cvedetector/22750", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2575 - WordPress Z Companion Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2575 \nPublished : April 11, 2025, 12:15 p.m. | 1\u00a0hour, 28\u00a0minutes ago \nDescription : The Z Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Note: This requires Royal Shop theme to be installed. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-11T16:27:17.000000Z"}, {"uuid": "e52ba3b0-ee9f-404d-a272-606d58d68abf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2541", "type": "seen", "source": "https://t.me/cvedetector/22749", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2541 - WordPress Project Manager SVG Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2541 \nPublished : April 11, 2025, 12:15 p.m. | 1\u00a0hour, 28\u00a0minutes ago \nDescription : The WP Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.6.22 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-11T16:27:16.000000Z"}, {"uuid": "90841c33-5bd2-410b-806a-2b57aac952e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25197", "type": "seen", "source": "https://t.me/cvedetector/22667", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25197 - Silverstripe Elemental Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2025-25197 \nPublished : April 10, 2025, 1:15 p.m. | 2\u00a0hours, 3\u00a0minutes ago \nDescription : Silverstripe Elemental extends a page type to swap the content area for a list of manageable elements to compose a page out of rather than a single text field. An elemental block can include an XSS payload, which can be executed when viewing the \"Content blocks in use\" report. The vulnerability is specific to that report and is a result of failure to cast input prior to including it in the grid field. This vulnerability is fixed in 5.3.12. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-10T17:52:19.000000Z"}, {"uuid": "953ef049-e577-45b3-adf3-be107d6fd7a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25001", "type": "seen", "source": "https://t.me/cvedetector/22053", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25001 - Microsoft Edge Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25001 \nPublished : April 4, 2025, 1:15 a.m. | 19\u00a0minutes ago \nDescription : Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-04T03:47:34.000000Z"}, {"uuid": "d6f673db-09ed-4c4a-9700-b55faab6281c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25061", "type": "seen", "source": "https://t.me/cvedetector/22071", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25061 - ViewJet C-more/HMI GC-A2 Unauthenticated Proxy Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25061 \nPublished : April 4, 2025, 2:15 a.m. | 1\u00a0hour, 28\u00a0minutes ago \nDescription : Unintended proxy or intermediary ('Confused Deputy') issue exists in HMI ViewJet C-more series and HMI GC-A2 series, which may allow a remote unauthenticated attacker to use the product as an intermediary for FTP bounce attack. \nSeverity: 5.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-04T06:18:16.000000Z"}, {"uuid": "6cf2730b-f64d-4f22-836f-dd3fae9330fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25000", "type": "seen", "source": "https://t.me/cvedetector/22056", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25000 - Microsoft Edge (Chromium-based) Type Confusion Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25000 \nPublished : April 4, 2025, 1:15 a.m. | 19\u00a0minutes ago \nDescription : Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-04T03:47:39.000000Z"}, {"uuid": "94b9b3c9-fa0c-47b4-963e-a9047fecc7ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25042", "type": "seen", "source": "https://t.me/cvedetector/20606", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25042 - \"Aruba AOS-CX Information Disclosure Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-25042 \nPublished : March 18, 2025, 7:15 p.m. | 1\u00a0hour, 22\u00a0minutes ago \nDescription : A vulnerability in the AOS-CX REST interface could allow an authenticated remote attacker with low privileges to view sensitive information. Successful exploitation could allow an attacker to read encrypted credentials of other users on the switch, potentially leading to further unauthorized access or data breaches. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-18T21:55:41.000000Z"}, {"uuid": "d3fe344b-4b1e-4c8a-868d-39485067cd27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2513", "type": "seen", "source": "https://t.me/cvedetector/21859", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2513 - WordPress Smart Icons Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2513 \nPublished : April 2, 2025, 10:15 a.m. | 2\u00a0hours, 2\u00a0minutes ago \nDescription : The Smart Icons For WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Editor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-02T14:59:03.000000Z"}, {"uuid": "d3adb5a3-ac5b-415c-98b7-5dcd901d79a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25060", "type": "seen", "source": "https://t.me/cvedetector/21844", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25060 - AssetView Unauthenticated File Access and Deletion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25060 \nPublished : April 2, 2025, 4:15 a.m. | 1\u00a0hour, 50\u00a0minutes ago \nDescription : Missing authentication for critical function vulnerability exists in AssetView and AssetView CLOUD. If exploited, the files on the server where the product is running may be obtained and/or deleted by a remote unauthenticated attacker. \nSeverity: 8.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-02T08:17:49.000000Z"}, {"uuid": "1a155617-7056-4341-8ecb-c127ce1dfd39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25041", "type": "seen", "source": "https://t.me/cvedetector/21778", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25041 - Aruba Networking VIA Client File Overwrite Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25041 \nPublished : April 1, 2025, 5:15 p.m. | 15\u00a0minutes ago \nDescription : A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow malicious users to overwrite arbitrary files as NT AUTHORITY\\SYSTEM (root). A successful exploit could allow the creation of a Denial-of-Service (DoS) condition affecting the Microsoft Windows Operating System. This vulnerability does not affect Linux and Android based clients. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-01T19:44:19.000000Z"}, {"uuid": "eced5473-298f-4bb6-869e-30d3ccd1e23f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2586", "type": "seen", "source": "https://t.me/cvedetector/21581", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2586 - OpenShift Lightspeed Service Unauthenticated API Flood Denial of Service (DoS)\", \n  \"Content\": \"CVE ID : CVE-2025-2586 \nPublished : March 31, 2025, 12:15 p.m. | 33\u00a0minutes ago \nDescription : A flaw was found in the OpenShift Lightspeed Service, which is vulnerable to unauthenticated API request flooding. Repeated queries to non-existent endpoints inflate metrics storage and processing, consuming excessive resources. This issue can lead to monitoring system degradation, increased disk usage, and potential service unavailability. Since the issue does not require authentication, an external attacker can exhaust CPU, RAM, and disk space, impacting both application and cluster stability. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-31T15:00:48.000000Z"}, {"uuid": "aa7f5066-318c-4a39-ab13-21408d9b58eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25580", "type": "seen", "source": "https://t.me/cvedetector/20588", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25580 - Yimioa SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25580 \nPublished : March 18, 2025, 3:16 p.m. | 1\u00a0hour, 16\u00a0minutes ago \nDescription : yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the listNameBySql() method at /xml/UserMapper.xml. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-18T17:44:26.000000Z"}, {"uuid": "e2d17c83-b5c7-4de1-b678-7da84c74b87f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25292", "type": "seen", "source": "https://t.me/ton618cyber/8022", "content": "GitHub Uncovers New ruby-saml Vulnerabilities Allowing Account Takeover Attacks\n\nruby-saml vulnerabilities (CVE-2025-25291, CVE-2025-25292) allow SAML authentication bypass (CVSS 8.8). Update to versions 1.12.4 or 1.18.0 now.\n\nThe Hacker News | thehackernews.com \u2022 Mar 13, 2025", "creation_timestamp": "2025-03-25T00:46:04.000000Z"}, {"uuid": "5bbe3a0c-dfbf-4cc6-bd48-701cfc8c9f1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "seen", "source": "https://t.me/ton618cyber/8022", "content": "GitHub Uncovers New ruby-saml Vulnerabilities Allowing Account Takeover Attacks\n\nruby-saml vulnerabilities (CVE-2025-25291, CVE-2025-25292) allow SAML authentication bypass (CVSS 8.8). Update to versions 1.12.4 or 1.18.0 now.\n\nThe Hacker News | thehackernews.com \u2022 Mar 13, 2025", "creation_timestamp": "2025-03-25T00:46:04.000000Z"}, {"uuid": "657610fc-0424-475d-a38d-a7bd963826c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25598", "type": "seen", "source": "https://t.me/cvedetector/20254", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25598 - Inova Logic CUSTOMER MONITOR (CM) Escalation of Privilege Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25598 \nPublished : March 13, 2025, 6:15 p.m. | 1\u00a0hour, 51\u00a0minutes ago \nDescription : Incorrect access control in the scheduled tasks console of Inova Logic CUSTOMER MONITOR (CM) v3.1.757.1 allows attackers to escalate privileges via placing a crafted executable into a scheduled task. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-13T21:28:45.000000Z"}, {"uuid": "f3af9e22-1267-4a05-8128-208635e4a181", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25363", "type": "seen", "source": "https://t.me/cvedetector/20253", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25363 - JEMH Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-25363 \nPublished : March 13, 2025, 6:15 p.m. | 1\u00a0hour, 51\u00a0minutes ago \nDescription : An authenticated stored cross-site scripting (XSS) vulnerability in The Plugin People Enterprise Mail Handler for Jira Data Center (JEMH) before v4.1.69-dc allows attackers with Administrator privileges to execute arbitrary Javascript in context of a user's browser via injecting a crafted payload into the HTML field of a template. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-13T21:28:44.000000Z"}, {"uuid": "c292a366-5ad0-4e4a-a8c9-75a795bba7b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25211", "type": "seen", "source": "https://t.me/cvedetector/21560", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25211 - CHOCO TEI WATCHER mini Weak Password Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-25211 \nPublished : March 31, 2025, 5:15 a.m. | 1\u00a0hour, 29\u00a0minutes ago \nDescription : Weak password requirements issue exists in CHOCO TEI WATCHER mini (IB-MCT001) all versions. If this issue is exploited, a brute-force attack may allow an attacker unauthorized access and login. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-31T09:09:24.000000Z"}, {"uuid": "c39a12fd-c977-4d92-987d-2e2d45056480", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25914", "type": "seen", "source": "https://t.me/cvedetector/20523", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25914 - Online Exam Mastering System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25914 \nPublished : March 17, 2025, 8:15 p.m. | 1\u00a0hour, 50\u00a0minutes ago \nDescription : SQL injection vulnerability in Online Exam Mastering System v.1.0 allows a remote attacker to execute arbitrary code via the fid parameter \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-17T23:20:00.000000Z"}, {"uuid": "d702fcae-1225-46e6-8c65-36c284290714", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2512", "type": "seen", "source": "https://t.me/cvedetector/20636", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2512 - WordPress File Away Plugin Arbitrary File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2512 \nPublished : March 19, 2025, 12:15 p.m. | 53\u00a0minutes ago \nDescription : The File Away plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check and missing file type validation in the upload() function in all versions up to, and including, 3.9.9.0.1. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-19T14:38:47.000000Z"}, {"uuid": "372ed743-4659-4144-81dd-4eca51034cb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2511", "type": "seen", "source": "https://t.me/cvedetector/20634", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2511 - WordPress AHAthat Plugin SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2511 \nPublished : March 19, 2025, 12:15 p.m. | 53\u00a0minutes ago \nDescription : The AHAthat Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the 'id' parameter in all versions up to, and including, 1.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-19T14:38:45.000000Z"}, {"uuid": "5080e665-f6ca-45ee-b477-5585ff596492", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25040", "type": "seen", "source": "https://t.me/cvedetector/20605", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25040 - Aruba Networking CX 9300 Switch Series Port ACL Egress Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25040 \nPublished : March 18, 2025, 7:15 p.m. | 1\u00a0hour, 22\u00a0minutes ago \nDescription : A vulnerability has been identified in the port ACL functionality of AOS-CX software running on the HPE Aruba Networking CX 9300 Switch Series only and affects:   \n  \n     - AOS-CX 10.14.xxxx : All patches  \n     - AOS-CX 10.15.xxxx : 10.15.1000 and below   \nThe vulnerability is specific to traffic originated by the CX 9300 switch platform and could allow an attacker to bypass ACL rules applied to routed ports on egress. As a result, port ACLs are not correctly enforced, which could lead to unauthorized traffic flow and violations of security policies. Egress VLAN ACLs and Routed VLAN ACLs are not affected by this vulnerability. \nSeverity: 3.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-18T21:55:40.000000Z"}, {"uuid": "5be0cdcc-c90a-4c2a-bc2c-a6a49fc7a57c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25595", "type": "seen", "source": "https://t.me/cvedetector/20591", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25595 - Safe App Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-25595 \nPublished : March 18, 2025, 5:15 p.m. | 1\u00a0hour, 18\u00a0minutes ago \nDescription : A lack of rate limiting in the login page of Safe App version a3.0.9 allows attackers to bypass authentication via a brute force attack. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-18T20:15:02.000000Z"}, {"uuid": "876f6ec8-827c-4f61-95b2-6ef812a77f74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25582", "type": "seen", "source": "https://t.me/cvedetector/20572", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25582 - Yimioa SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25582 \nPublished : March 18, 2025, 4:15 p.m. | 16\u00a0minutes ago \nDescription : yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the selectNoticeList() method at /xml/OaNoticeMapper.xml. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-18T17:44:04.000000Z"}, {"uuid": "8df4bc4b-f155-433f-b519-a6074ba1f728", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25589", "type": "seen", "source": "https://t.me/cvedetector/20570", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25589 - Yimioa XML External Entity Injection (XXE) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25589 \nPublished : March 18, 2025, 4:15 p.m. | 16\u00a0minutes ago \nDescription : An XML external entity (XXE) injection vulnerability in the component /weixin/aes/XMLParse.java of yimioa before v2024.07.04 allows attackers to execute arbitrary code via supplying a crafted XML file. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-18T17:44:03.000000Z"}, {"uuid": "fd6136e7-3a51-45bc-8389-3b628fe15f2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25586", "type": "seen", "source": "https://t.me/cvedetector/20569", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25586 - Yimioa Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25586 \nPublished : March 18, 2025, 4:15 p.m. | 16\u00a0minutes ago \nDescription : yimioa before v2024.07.04 was discovered to contain an information disclosure vulnerability via the component /resources/application.yml. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-18T17:44:02.000000Z"}, {"uuid": "291676db-5122-4796-896d-d570e82ef937", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25220", "type": "seen", "source": "https://t.me/cvedetector/20557", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25220 - Fujitsu FS010M OS Command Injection\", \n  \"Content\": \"CVE ID : CVE-2025-25220 \nPublished : March 18, 2025, 9:15 a.m. | 1\u00a0hour, 4\u00a0minutes ago \nDescription : Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in +F FS010M versions prior to V2.0.1_1101. If this vulnerability is exploited, an arbitrary OS command may be executed by a remote authenticated attacker. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-18T11:53:22.000000Z"}, {"uuid": "3cac2c98-502e-498b-822a-0bac3c986690", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25871", "type": "seen", "source": "https://t.me/cvedetector/20321", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25871 - Open Panel Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25871 \nPublished : March 14, 2025, 4:15 p.m. | 1\u00a0hour, 19\u00a0minutes ago \nDescription : An issue in Open Panel v.0.3.4 allows a remote attacker to escalate privileges via the Fix Permissions function \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-14T19:13:19.000000Z"}, {"uuid": "927e9194-aa09-4803-afa5-d1c9e2f326f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25873", "type": "seen", "source": "https://t.me/cvedetector/20320", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25873 - Open Panel OpenAdmin Cross Site Request Forgery Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2025-25873 \nPublished : March 14, 2025, 4:15 p.m. | 1\u00a0hour, 19\u00a0minutes ago \nDescription : Cross Site Request Forgery vulnerability in Open Panel OpenAdmin v.0.3.4 allows a remote attacker to escalate privileges via the Change Root Password function \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-14T19:13:18.000000Z"}, {"uuid": "d9a18a03-c78a-434f-ae69-7b0b7ff1cecd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25685", "type": "seen", "source": "https://t.me/cvedetector/20494", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25685 - GL-INet Beryl AX File System Link Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25685 \nPublished : March 17, 2025, 5:15 p.m. | 41\u00a0minutes ago \nDescription : An issue was discovered in GL-INet Beryl AX GL-MT3000 v4.7.0. Attackers are able to download arbitrary files from the device's file system via adding symbolic links on an external drive used as a samba share. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-17T19:08:46.000000Z"}, {"uuid": "5480152c-1ee3-48a2-9867-59f34324512f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25684", "type": "seen", "source": "https://t.me/cvedetector/20493", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25684 - GL-INet Beryl AX File Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25684 \nPublished : March 17, 2025, 5:15 p.m. | 41\u00a0minutes ago \nDescription : A lack of validation in the path parameter (/download) of GL-INet Beryl AX GL-MT3000 v4.7.0 allows attackers to download arbitrary files from the device's file system via a crafted POST request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-17T19:08:45.000000Z"}, {"uuid": "cd2dd6b1-8491-418e-b312-1dd4fef784a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25612", "type": "seen", "source": "https://t.me/cvedetector/20477", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25612 - FS Inc S3150-8T2F XSS in Time Range Configuration\", \n  \"Content\": \"CVE ID : CVE-2025-25612 \nPublished : March 17, 2025, 3:15 p.m. | 33\u00a0minutes ago \nDescription : FS Inc S3150-8T2F prior to version S3150-8T2F_2.2.0D_135103 is vulnerable to Cross Site Scripting (XSS) in the Time Range Configuration functionality of the administration interface. An attacker can inject malicious JavaScript into the \"Time Range Name\" field, which is improperly sanitized. When this input is saved, it is later executed in the browser of any user accessing the affected page, including administrators, resulting in arbitrary script execution in the user's browser. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-17T17:28:07.000000Z"}, {"uuid": "304a3497-fd14-43a0-8966-c06c0ef1bd37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25650", "type": "seen", "source": "https://t.me/cvedetector/20472", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25650 - Dorset DG 201 Digital Lock NFC Card Cloning Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25650 \nPublished : March 17, 2025, 3:15 p.m. | 33\u00a0minutes ago \nDescription : An issue in the storage of NFC card data in Dorset DG 201 Digital Lock H5_433WBSK_v2.2_220605 allows attackers to produce cloned NFC cards to bypass authentication. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-17T17:28:01.000000Z"}, {"uuid": "045ca390-0344-4348-a5b5-06424e1de8fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25621", "type": "seen", "source": "https://t.me/cvedetector/20471", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25621 - Unifiedtransform Unsecured Teacher Attendance Access\", \n  \"Content\": \"CVE ID : CVE-2025-25621 \nPublished : March 17, 2025, 3:15 p.m. | 33\u00a0minutes ago \nDescription : Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows teachers to take attendance of fellow teachers. This affected endpoint is /courses/teacher/index?teacher_id=2&semester_id=1. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-17T17:28:00.000000Z"}, {"uuid": "3920002f-5e59-446c-b8c4-d2f7d04055b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25618", "type": "seen", "source": "https://t.me/cvedetector/20470", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25618 - \"Adobe Unifiedtransform Privilege Escalation Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-25618 \nPublished : March 17, 2025, 3:15 p.m. | 33\u00a0minutes ago \nDescription : Incorrect Access Control in Unifiedtransform 2.0 leads to Privilege Escalation allowing the change of Section Name and Room Number by Teachers. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-17T17:27:59.000000Z"}, {"uuid": "353ff4a1-c9af-4e2a-8bba-d43c3281bed3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25225", "type": "seen", "source": "https://t.me/cvedetector/20372", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25225 - Hikashop Joomla Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25225 \nPublished : March 15, 2025, 6:15 p.m. | 2\u00a0hours, 2\u00a0minutes ago \nDescription : A privilege escalation vulnerability in the Hikashop component versions 1.0.0-5.1.3 for Joomla allows authenticated attackers (administrator) to escalate their privileges to Super Admin Permissions. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-15T21:58:33.000000Z"}, {"uuid": "74ee28ee-b339-4c9c-aad9-ce656880f598", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25872", "type": "seen", "source": "https://t.me/cvedetector/20319", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25872 - Open Panel Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25872 \nPublished : March 14, 2025, 4:15 p.m. | 1\u00a0hour, 19\u00a0minutes ago \nDescription : An issue in Open Panel v.0.3.4 allows a remote attacker to escalate privileges via the Fix Permissions function \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-14T19:13:17.000000Z"}, {"uuid": "24d8efd4-7ce9-45f8-8c60-e352ceac58e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2544", "type": "seen", "source": "https://t.me/cvedetector/22177", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2544 - WordPress AI Content Pipelines Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2025-2544 \nPublished : April 5, 2025, 2:15 a.m. | 2\u00a0hours, 9\u00a0minutes ago \nDescription : The AI Content Pipelines plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-05T06:33:41.000000Z"}, {"uuid": "6a93ff3b-69e0-4e62-8599-01d00af92510", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2510", "type": "seen", "source": "https://t.me/cvedetector/21076", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2510 - WordPress Frndzk Expandable Bottom Bar Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2510 \nPublished : March 25, 2025, 9:15 a.m. | 33\u00a0minutes ago \nDescription : The Frndzk Expandable Bottom Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'text' parameter in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T11:08:04.000000Z"}, {"uuid": "78c43e44-7a01-4ab2-b718-7b923cd6aff4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2596", "type": "seen", "source": "https://t.me/cvedetector/21174", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2596 - Checkmk GmbH Checkmk Session Logout Overwrite Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2596 \nPublished : March 26, 2025, 11:15 a.m. | 1\u00a0hour, 26\u00a0minutes ago \nDescription : Session logout could be overwritten in Checkmk GmbH's Checkmk versions <2.3.0p30,<2.2.0p41,\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T13:53:25.000000Z"}, {"uuid": "72de6734-1d2a-4b04-8a96-84deaa0be9a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2573", "type": "seen", "source": "https://t.me/cvedetector/21144", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2573 - WPBakery Page Builder Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2573 \nPublished : March 26, 2025, 3:15 a.m. | 1\u00a0hour, 12\u00a0minutes ago \nDescription : The Amazing service box Addons For WPBakery Page Builder (formerly Visual Composer) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T05:31:40.000000Z"}, {"uuid": "33e76cc6-60d8-4c7e-99dc-058ae0fecba0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2576", "type": "seen", "source": "https://t.me/cvedetector/21143", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2576 - Ayyash Studio WordPress Kick-Start Kit Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2576 \nPublished : March 26, 2025, 3:15 a.m. | 1\u00a0hour, 12\u00a0minutes ago \nDescription : The Ayyash Studio \u2014 The kick-start kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T05:31:39.000000Z"}, {"uuid": "c7c89067-a163-4864-b022-c990a7392efa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25371", "type": "seen", "source": "https://t.me/cvedetector/21134", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25371 - NASA cFS Aquila OSAL Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25371 \nPublished : March 25, 2025, 9:15 p.m. | 1\u00a0hour, 5\u00a0minutes ago \nDescription : NASA cFS (Core Flight System) Aquila is vulnerable to path traversal in the OSAL module, allowing the override of any arbitrary file on the system. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T23:40:51.000000Z"}, {"uuid": "a604fdea-2f7a-45f9-9e9d-c5235140776f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25372", "type": "seen", "source": "https://t.me/cvedetector/21130", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25372 - NASA cFS Aquila Memory Corruption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25372 \nPublished : March 25, 2025, 9:15 p.m. | 1\u00a0hour, 5\u00a0minutes ago \nDescription : NASA cFS (Core Flight System) Aquila is vulnerable to segmentation fault via sending a malicious telecommand to the Memory Management Module. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T23:40:46.000000Z"}, {"uuid": "d7ba5985-d8ab-40e8-b0ac-6a5ee43215b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25374", "type": "seen", "source": "https://t.me/cvedetector/21124", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25374 - NASA cFS (Core Flight System) Aquila Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25374 \nPublished : March 25, 2025, 9:15 p.m. | 1\u00a0hour, 5\u00a0minutes ago \nDescription : In NASA cFS (Core Flight System) Aquila, it is possible to put the onboard software in a state that will prevent the launch of any external application, causing a platform denial of service. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T23:40:38.000000Z"}, {"uuid": "b0cffea0-a949-4217-921c-f0f9df99301c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25373", "type": "seen", "source": "https://t.me/cvedetector/21123", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25373 - NASA cFS Aquila Memory Corruption Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2025-25373 \nPublished : March 25, 2025, 9:15 p.m. | 1\u00a0hour, 5\u00a0minutes ago \nDescription : The Memory Management Module of NASA cFS (Core Flight System) Aquila has insecure permissions, which can be exploited to gain an RCE on the platform. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T23:40:37.000000Z"}, {"uuid": "ad405b17-58b6-4ce1-9854-1673678be8be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2532", "type": "seen", "source": "https://t.me/cvedetector/21104", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2532 - Luxion KeyShot USDC File Parsing Use-After-Free Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2532 \nPublished : March 25, 2025, 3:15 p.m. | 46\u00a0minutes ago \nDescription : Luxion KeyShot USDC File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.  \n  \nThe specific flaw exists within the parsing of usdc files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-23709. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T17:49:13.000000Z"}, {"uuid": "e7615e27-d1a6-43dd-8184-7249445db82e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2531", "type": "seen", "source": "https://t.me/cvedetector/21103", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2531 - Luxion KeyShot DAE File Parsing Heap-based Buffer Overflow Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2025-2531 \nPublished : March 25, 2025, 3:15 p.m. | 46\u00a0minutes ago \nDescription : Luxion KeyShot DAE File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.  \n  \nThe specific flaw exists within the parsing of dae files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-23704. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T17:49:09.000000Z"}, {"uuid": "b40b231c-fc7b-40bf-abbd-3d6292a7672a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2530", "type": "seen", "source": "https://t.me/cvedetector/21102", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2530 - Luxion KeyShot DAE File Parsing Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2530 \nPublished : March 25, 2025, 3:15 p.m. | 46\u00a0minutes ago \nDescription : Luxion KeyShot DAE File Parsing Access of Uninitialized Pointer Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.  \n  \nThe specific flaw exists within the parsing of dae files. The issue results from the lack of proper initialization of a pointer prior to accessing it. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-23698. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T17:49:08.000000Z"}, {"uuid": "03987d53-f3b7-4847-869f-68ae0848550b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2542", "type": "seen", "source": "https://t.me/cvedetector/21085", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2542 - WordPress Your Simple SVG Support Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2542 \nPublished : March 25, 2025, 10:15 a.m. | 1\u00a0hour, 41\u00a0minutes ago \nDescription : The Your Simple SVG Support plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T13:38:26.000000Z"}, {"uuid": "20c99976-ced4-4967-9065-72364129963d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2559", "type": "seen", "source": "https://t.me/cvedetector/21071", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2559 - Keycloak JWT Token Cache Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2559 \nPublished : March 25, 2025, 9:15 a.m. | 33\u00a0minutes ago \nDescription : A flaw was found in Keycloak. When the configuration uses JWT tokens for authentication, the tokens are cached until expiration. If a client uses JWT tokens with an excessively long expiration time, for example, 24 or 48 hours, the cache can grow indefinitely, leading to an OutOfMemoryError. This issue could result in a denial of service condition, preventing legitimate users from accessing the system. \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T11:07:57.000000Z"}, {"uuid": "06c68a2e-f454-4505-b1fa-9fa10cf27256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2591", "type": "seen", "source": "https://t.me/cvedetector/20810", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2591 - \"Open Asset Import Library Assimp Divide By Zero Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-2591 \nPublished : March 21, 2025, 2:15 p.m. | 27\u00a0minutes ago \nDescription : A vulnerability classified as problematic was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function MDLImporter::InternReadFile_Quake1 of the file code/AssetLib/MDL/MDLLoader.cpp. The manipulation of the argument skinwidth/skinheight leads to divide by zero. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The patch is identified as ab66a1674fcfac87aaba4c8b900b315ebc3e7dbd. It is recommended to apply a patch to fix this issue. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-21T15:58:40.000000Z"}, {"uuid": "b23147a8-533b-4e1f-b551-de2d8bbc4322", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2582", "type": "seen", "source": "https://t.me/cvedetector/20798", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2582 - SimpleMachines SMF Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2582 \nPublished : March 21, 2025, 7:15 a.m. | 1\u00a0hour, 23\u00a0minutes ago \nDescription : A vulnerability was found in SimpleMachines SMF 2.1.4 and classified as problematic. Affected by this issue is some unknown functionality of the file ManageAttachments.php. The manipulation of the argument Notice leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-21T10:07:44.000000Z"}, {"uuid": "67380c84-5c22-461e-87f0-3d6cc40db12e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2592", "type": "seen", "source": "https://t.me/cvedetector/20809", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2592 - \"Open Asset Import Library (Assimp) Heap-Based Buffer Overflow Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-2592 \nPublished : March 21, 2025, 2:15 p.m. | 27\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. This issue affects the function CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The patch is named 2690e354da0c681db000cfd892a55226788f2743. It is recommended to apply a patch to fix this issue. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-21T15:58:39.000000Z"}, {"uuid": "29133118-dfc6-4754-bf70-7f84cd3778dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2587", "type": "seen", "source": "https://t.me/cvedetector/20808", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2587 - Jinher OA SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2587 \nPublished : March 21, 2025, 12:15 p.m. | 27\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in Jinher OA C6 1.0. This affects an unknown part of the file IncentivePlanFulfillAppprove.aspx. The manipulation of the argument httpOID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-21T14:18:23.000000Z"}, {"uuid": "5ecee82f-7033-47fa-a443-dcb9a06b775d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2588", "type": "seen", "source": "https://t.me/cvedetector/20807", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2588 - Hercules Augeas Null Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2588 \nPublished : March 21, 2025, 12:15 p.m. | 27\u00a0minutes ago \nDescription : A vulnerability has been found in Hercules Augeas 1.14.1 and classified as problematic. This vulnerability affects the function re_case_expand of the file src/fa.c. The manipulation of the argument re leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. \nSeverity: 3.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-21T14:18:23.000000Z"}, {"uuid": "98ad9534-4c86-4740-93c6-866aadf136ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2577", "type": "seen", "source": "https://t.me/cvedetector/20866", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2577 - Bitspecter Suite for WordPress Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2025-2577 \nPublished : March 22, 2025, 12:15 p.m. | 1\u00a0hour ago \nDescription : The Bitspecter Suite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-22T14:33:18.000000Z"}, {"uuid": "b6e432b1-daca-4039-a6b6-55c3dbadce1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2556", "type": "seen", "source": "https://t.me/cvedetector/20765", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2556 - \"Audi UTR Dashcam 2.0 Hard-Coded Credentials Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-2556 \nPublished : March 20, 2025, 6:15 p.m. | 1\u00a0hour, 59\u00a0minutes ago \nDescription : A vulnerability classified as problematic was found in Audi UTR Dashcam 2.0. Affected by this vulnerability is an unknown functionality of the component Video Stream Handler. The manipulation leads to hard-coded credentials. The attack can only be initiated within the local network. The exploit has been disclosed to the public and may be used. Upgrading to version 2.89 and 2.90 is able to address this issue. It is recommended to upgrade the affected component. The vendor was contacted early about these issues and acted very professional. Version 2.89 is fixing this issue for new customers and 2.90 is going to fix it for existing customers. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-20T21:35:06.000000Z"}, {"uuid": "fe28392e-a943-4352-a737-9635dfde7a3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2555", "type": "seen", "source": "https://t.me/cvedetector/20764", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2555 - Audi Universal Traffic Recorder App FTP Credentials Hard-Coded Password Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2555 \nPublished : March 20, 2025, 6:15 p.m. | 1\u00a0hour, 59\u00a0minutes ago \nDescription : A vulnerability classified as problematic has been found in Audi Universal Traffic Recorder App 2.0. Affected is an unknown function of the component FTP Credentials. The manipulation leads to use of hard-coded password. Attacking locally is a requirement. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 2.89 and 2.90 is able to address this issue. It is recommended to upgrade the affected component. The vendor was contacted early about these issues and acted very professional. Version 2.89 is fixing this issue for new customers and 2.90 is going to fix it for existing customers. \nSeverity: 2.9 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-20T21:35:05.000000Z"}, {"uuid": "31cc0c46-268c-4f46-937f-6fbc4ee606c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2584", "type": "seen", "source": "https://t.me/cvedetector/20793", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2584 - WebAssembly wabt Heap-Based Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2584 \nPublished : March 21, 2025, 8:15 a.m. | 23\u00a0minutes ago \nDescription : A vulnerability was found in WebAssembly wabt 1.0.36. It has been declared as critical. This vulnerability affects the function BinaryReaderInterp::GetReturnCallDropKeepCount of the file wabt/src/interp/binary-reader-interp.cc. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. \nSeverity: 5.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-21T10:07:37.000000Z"}, {"uuid": "f990b079-2625-4050-b380-8d5bca608956", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2581", "type": "seen", "source": "https://t.me/cvedetector/20792", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2581 - xmedcon DICOM File Handler Integer Underflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2581 \nPublished : March 21, 2025, 5:15 a.m. | 1\u00a0hour, 20\u00a0minutes ago \nDescription : A vulnerability has been found in xmedcon 0.25.0 and classified as problematic. Affected by this vulnerability is the function malloc of the component DICOM File Handler. The manipulation leads to integer underflow. The attack can be launched remotely. Upgrading to version 0.25.1 is able to address this issue. It is recommended to upgrade the affected component. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-21T07:37:11.000000Z"}, {"uuid": "3d874938-4cb0-452b-88b0-55c640bfba34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2549", "type": "seen", "source": "https://t.me/cvedetector/20751", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2549 - D-Link DIR-618 and DIR-605L Local File Access Control Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2549 \nPublished : March 20, 2025, 5:15 p.m. | 55\u00a0minutes ago \nDescription : A vulnerability has been found in D-Link DIR-618 and DIR-605L 2.02/3.02 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /goform/formSetPassword. The manipulation leads to improper access controls. The attack needs to be done within the local network. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-20T19:54:35.000000Z"}, {"uuid": "569dce06-3239-4c6c-93b6-6298a5e723bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2574", "type": "seen", "source": "https://t.me/cvedetector/20774", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2574 - Xpdf Out-of-bounds Array Write Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2574 \nPublished : March 20, 2025, 9:15 p.m. | 1\u00a0hour, 5\u00a0minutes ago \nDescription : Out-of-bounds array write in Xpdf 4.05 and earlier, due to incorrect integer overflow checking in the PostScript function interpreter code. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-21T00:05:39.000000Z"}, {"uuid": "73c46567-d279-4c2f-9cce-671656745571", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2538", "type": "seen", "source": "https://t.me/cvedetector/20773", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2538 - Esri ArcGIS Enterprise Portal Password Recovery Exploitation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2538 \nPublished : March 20, 2025, 9:15 p.m. | 1\u00a0hour, 5\u00a0minutes ago \nDescription : A specific type of ArcGIS Enterprise deployment, is vulnerable to a Password Recovery Exploitation vulnerability in Portal, that could allow an attacker to reset the password on the built in admin account. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-21T00:05:38.000000Z"}, {"uuid": "348607ea-36bc-4758-842f-106ada78a079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25758", "type": "seen", "source": "https://t.me/cvedetector/20772", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25758 - KukuFM Android Backup Data Exposure\", \n  \"Content\": \"CVE ID : CVE-2025-25758 \nPublished : March 20, 2025, 9:15 p.m. | 1\u00a0hour, 5\u00a0minutes ago \nDescription : An issue in KukuFM Android v1.12.7 (11207) allows attackers to access sensitive cleartext data via the android:allowBackup=\"true\" in the ANdroidManifest.xml \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-21T00:05:37.000000Z"}, {"uuid": "6652fa0e-2a3f-4abf-a511-be5ae8d60285", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2547", "type": "seen", "source": "https://t.me/cvedetector/20755", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2547 - D-Link DIR-618 and DIR-605L Local File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2547 \nPublished : March 20, 2025, 4:15 p.m. | 1\u00a0hour, 55\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, has been found in D-Link DIR-618 and DIR-605L 2.02/3.02. This issue affects some unknown processing of the file /goform/formAdvNetwork. The manipulation leads to improper access controls. The attack can only be done within the local network. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-20T19:54:41.000000Z"}, {"uuid": "9428f02d-e8bc-4a49-9fae-8c3e7c41209d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25035", "type": "seen", "source": "https://t.me/cvedetector/20839", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25035 - Jalios JPlatform Cross-site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-25035 \nPublished : March 21, 2025, 7:15 p.m. | 1\u00a0hour, 34\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation Cross-site Scripting vulnerability in Jalios JPlatform 10 allows for Reflected XSS and Stored XSS.This issue affects JPlatform 10: before 10.0.8 (SP8), before 10.0.7 (SP7), before 10.0.6 (SP6) and Jalios Workplace 6.2, Jalios Workplace 6.1, Jalios Workplace 6.0, and Jalios Workplace 5.3 to 5.5 \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-21T22:39:54.000000Z"}, {"uuid": "565a41a3-e6d6-4b4b-9039-b5869a888554", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25036", "type": "seen", "source": "https://t.me/cvedetector/20836", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25036 - Jalios JPlatform XML External Entity Reference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25036 \nPublished : March 21, 2025, 8:15 p.m. | 35\u00a0minutes ago \nDescription : Improper Restriction of XML External Entity Reference vulnerability in Jalios JPlatform allows XML Injection.This issue affects all versions of JPlatform 10 before 10.0.8 (SP8). \nSeverity: 6.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-21T22:39:52.000000Z"}, {"uuid": "a81aac1c-3621-4dcd-967a-d83e49e2d7c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2593", "type": "seen", "source": "https://t.me/cvedetector/20825", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2593 - FastCMS SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2593 \nPublished : March 21, 2025, 3:15 p.m. | 1\u00a0hour, 28\u00a0minutes ago \nDescription : A vulnerability has been found in FastCMS up to 0.1.5 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /api/client/article/list. The manipulation of the argument orderBy leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-21T18:29:15.000000Z"}, {"uuid": "71dea434-6efe-4f93-acf4-0ad136b6f82d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2598", "type": "seen", "source": "https://t.me/cvedetector/20818", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2598 - AWS CDK CLI AWS Credentials Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-2598 \nPublished : March 21, 2025, 3:15 p.m. | 1\u00a0hour, 28\u00a0minutes ago \nDescription : When the AWS Cloud Development Kit (AWS CDK) Command Line Interface (AWS CDK CLI) is used with a credential plugin which returns an expiration property with the retrieved AWS credentials, the credentials are printed to the console output. To mitigate this issue, users should upgrade to version 2.178.2 or later and ensure any forked or derivative code is patched to incorporate the new fixes. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-21T18:29:04.000000Z"}, {"uuid": "0db04417-72c1-4d5e-b396-d9d6b6edc055", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2589", "type": "seen", "source": "https://t.me/cvedetector/20813", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2589 - Code-projects Human Resource Management System Unauthorized Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2589 \nPublished : March 21, 2025, 1:15 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Human Resource Management System 1.0.1 and classified as critical. This issue affects the function Index of the file \\handler\\Account.go. The manipulation of the argument user_cookie leads to improper authorization. The exploit has been disclosed to the public and may be used. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-21T15:58:42.000000Z"}, {"uuid": "8c9cdcd1-c8c0-430c-85b1-309cffb9fd86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2590", "type": "seen", "source": "https://t.me/cvedetector/20812", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2590 - Code-projects Human Resource Management System Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2590 \nPublished : March 21, 2025, 1:15 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Human Resource Management System 1.0.1. It has been classified as problematic. Affected is the function UpdateRecruitmentById of the file \\handler\\recruitment.go. The manipulation of the argument c leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 2.4 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-21T15:58:41.000000Z"}, {"uuid": "2b8c0718-0d19-46fa-95a6-91daf2327cb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2597", "type": "seen", "source": "https://t.me/cvedetector/20806", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2597 - ITIUM 6050 Reflected Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-2597 \nPublished : March 21, 2025, 12:15 p.m. | 27\u00a0minutes ago \nDescription : Reflected Cross-Site Scripting (XSS) in ITIUM 6050 version 5.5.5.2-b3526 from Impact Technologies. This vulnerability could allow an attacker to execute malicious Javascript code via GET and POST requests to the \u2018/index.php\u2019 endpoint and injecting code into the \u2018id_session. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-21T14:18:22.000000Z"}, {"uuid": "2d8c44c8-4edc-4797-b146-e1361d6883b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25274", "type": "seen", "source": "https://t.me/cvedetector/20805", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25274 - Mattermost Command Execution in Archived Channels Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25274 \nPublished : March 21, 2025, 9:15 a.m. | 1\u00a0hour, 23\u00a0minutes ago \nDescription : Mattermost versions 10.4.x <=<=<=\nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-21T11:48:06.000000Z"}, {"uuid": "28894919-da78-4f6e-a752-887bd9e5f778", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25068", "type": "seen", "source": "https://t.me/cvedetector/20804", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25068 - Mattermost Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25068 \nPublished : March 21, 2025, 9:15 a.m. | 1\u00a0hour, 23\u00a0minutes ago \nDescription : Mattermost versions 10.4.x <=<=<=<=\nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-21T11:48:02.000000Z"}, {"uuid": "f4f94936-590a-4c8f-b947-e966f29afa03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2583", "type": "seen", "source": "https://t.me/cvedetector/20794", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2583 - SMF Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2583 \nPublished : March 21, 2025, 7:15 a.m. | 1\u00a0hour, 23\u00a0minutes ago \nDescription : A vulnerability was found in SimpleMachines SMF 2.1.4. It has been classified as problematic. This affects an unknown part of the file ManageNews.php. The manipulation of the argument subject/message leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-21T10:07:38.000000Z"}, {"uuid": "812d92a0-7e38-4b5c-9cb3-696e0cb96d44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2546", "type": "seen", "source": "https://t.me/cvedetector/20738", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2546 - D-Link DIR-618 and DIR-605L Local Firewall Service Improper Access Controls Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2546 \nPublished : March 20, 2025, 3:15 p.m. | 54\u00a0minutes ago \nDescription : A vulnerability classified as problematic was found in D-Link DIR-618 and DIR-605L 2.02/3.02. This vulnerability affects unknown code of the file /goform/formAdvFirewall of the component Firewall Service. The manipulation leads to improper access controls. The attack needs to be approached within the local network. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-20T17:23:59.000000Z"}, {"uuid": "c41c30ed-6f31-4ac9-929b-8244beeb8c3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25381", "type": "seen", "source": "https://t.me/cvedetector/19741", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25381 - KSRTC AWATAR Password Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-25381 \nPublished : March 6, 2025, 7:15 p.m. | 1\u00a0hour, 9\u00a0minutes ago \nDescription : Incorrect access control in the KSRTC AWATAR app of Karnataka State Road Transport Corporation v1.3.0 allows to view sensitive information such as usernames and passwords. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T22:12:28.000000Z"}, {"uuid": "bb64413d-eea6-4e3a-b037-8c961aaba8c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2565", "type": "seen", "source": "https://t.me/cvedetector/20747", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2565 - Liferay Portal and DXP Data Exposure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2565 \nPublished : March 20, 2025, 5:15 p.m. | 55\u00a0minutes ago \nDescription : The data exposure vulnerability in Liferay Portal 7.4.0 through 7.4.3.126, and Liferay DXP 2024.Q3.0, 2024.Q2.0 through 2024.Q2.12, 2024.Q1.1 through 2024.Q1.12, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92 allows an unauthorized user to obtain entry data from forms. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-20T19:54:28.000000Z"}, {"uuid": "427ca80e-4b09-4c51-98c9-05df6b56d55a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2552", "type": "seen", "source": "https://t.me/cvedetector/20746", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2552 - D-Link DIR-618 and DIR-605L Local Network Access Control Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2552 \nPublished : March 20, 2025, 5:15 p.m. | 55\u00a0minutes ago \nDescription : A vulnerability was found in D-Link DIR-618 and DIR-605L 2.02/3.02. It has been declared as problematic. This vulnerability affects unknown code of the file /goform/formTcpipSetup. The manipulation leads to improper access controls. Access to the local network is required for this attack to succeed. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-20T19:54:28.000000Z"}, {"uuid": "4bb65028-7a20-40b3-bb6b-1cb438e10020", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2551", "type": "seen", "source": "https://t.me/cvedetector/20745", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2551 - D-Link DIR-618 and DIR-605L Improper Access Control Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2551 \nPublished : March 20, 2025, 5:15 p.m. | 55\u00a0minutes ago \nDescription : A vulnerability was found in D-Link DIR-618 and DIR-605L 2.02/3.02. It has been classified as problematic. This affects an unknown part of the file /goform/formSetPortTr. The manipulation leads to improper access controls. Access to the local network is required for this attack. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-20T19:54:27.000000Z"}, {"uuid": "d5c5ce0c-4f34-412e-a95d-75f7461ed3e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2585", "type": "seen", "source": "https://t.me/cvedetector/20778", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2585 - EBM Maintenance Center SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2585 \nPublished : March 21, 2025, 2:15 a.m. | 16\u00a0minutes ago \nDescription : EBM Maintenance Center From EBM Technologies has a SQL Injection vulnerability, allowing remote attackers with regular privileges to inject arbitrary SQL commands to read, modify, and delete database contents. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-21T04:16:26.000000Z"}, {"uuid": "bbe6218d-c3c6-4b20-b367-8cbd17e53943", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2553", "type": "seen", "source": "https://t.me/cvedetector/20768", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2553 - D-Link DIR-618 and DIR-605L Local File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2553 \nPublished : March 20, 2025, 6:15 p.m. | 1\u00a0hour, 59\u00a0minutes ago \nDescription : A vulnerability was found in D-Link DIR-618 and DIR-605L 2.02/3.02. It has been rated as problematic. This issue affects some unknown processing of the file /goform/formVirtualServ. The manipulation leads to improper access controls. The attack needs to be approached within the local network. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-20T21:35:08.000000Z"}, {"uuid": "16e817bf-7129-48fd-81ad-9a0e0a6d9a8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2557", "type": "seen", "source": "https://t.me/cvedetector/20760", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2557 - \"Audi UTR Dashcam 2.0 Command API Local Network Access Control Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-2557 \nPublished : March 20, 2025, 7:15 p.m. | 59\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in Audi UTR Dashcam 2.0. Affected by this issue is some unknown functionality of the component Command API. The manipulation leads to improper access controls. The attack needs to be done within the local network. The exploit has been disclosed to the public and may be used. Upgrading to version 2.89 and 2.90 is able to address this issue. It is recommended to upgrade the affected component. The vendor was contacted early about these issues and acted very professional. Version 2.89 is fixing this issue for new customers and 2.90 is going to fix it for existing customers. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-20T21:34:59.000000Z"}, {"uuid": "69c2824a-8f16-4dd0-8092-512133bf7406", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2548", "type": "seen", "source": "https://t.me/cvedetector/20756", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2548 - D-Link DIR-618 and DIR-605L Local Network Access Control Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2548 \nPublished : March 20, 2025, 4:15 p.m. | 1\u00a0hour, 55\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, was found in D-Link DIR-618 and DIR-605L 2.02/3.02. Affected is an unknown function of the file /goform/formSetDomainFilter. The manipulation leads to improper access controls. The attack can only be initiated within the local network. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-20T19:54:41.000000Z"}, {"uuid": "453be29d-0192-4eb6-896e-54aa119dc08d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2550", "type": "seen", "source": "https://t.me/cvedetector/20752", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2550 - D-Link DDNS Service Local Network Access Control Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2550 \nPublished : March 20, 2025, 5:15 p.m. | 55\u00a0minutes ago \nDescription : A vulnerability was found in D-Link DIR-618 and DIR-605L 2.02/3.02 and classified as problematic. Affected by this issue is some unknown functionality of the file /goform/formSetDDNS of the component DDNS Service. The manipulation leads to improper access controls. The attack needs to be initiated within the local network. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-20T19:54:35.000000Z"}, {"uuid": "38f7f4f1-01f9-42e4-94f9-65ca3538057b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2539", "type": "seen", "source": "https://t.me/cvedetector/20731", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2539 - WordPress File Away Plugin File Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2539 \nPublished : March 20, 2025, 12:15 p.m. | 1\u00a0hour, 44\u00a0minutes ago \nDescription : The File Away plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ajax() function in all versions up to, and including, 3.9.9.0.1. This makes it possible for unauthenticated attackers, leveraging the use of a reversible weak algorithm,  to read the contents of arbitrary files on the server, which can contain sensitive information. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-20T15:43:39.000000Z"}, {"uuid": "c546fcd0-7ece-4e99-bc92-d29d985b774f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2505", "type": "seen", "source": "https://t.me/cvedetector/20706", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2505 - WordPress Age Gate PHP File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2505 \nPublished : March 20, 2025, 8:15 a.m. | 1\u00a0hour, 35\u00a0minutes ago \nDescription : The Age Gate plugin for WordPress is vulnerable to Local PHP File Inclusion in all versions up to, and including, 3.5.3 via the 'lang' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary PHP files on the server, allowing the execution of code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other \u201csafe\u201d file types can be uploaded and included. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-20T11:32:45.000000Z"}, {"uuid": "e57d5c92-7620-45d6-93f9-2e231b6f0b87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25450", "type": "seen", "source": "https://t.me/cvedetector/19704", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25450 - TaagSolutions MyTaag Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25450 \nPublished : March 6, 2025, 3:15 p.m. | 53\u00a0minutes ago \nDescription : An issue in TAAGSOLUTIONS GmbH MyTaag v.2024-11-24 and before allows a remote attacker to escalate privileges via the deactivation of the activated second factor to the /session endpoint \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T17:10:56.000000Z"}, {"uuid": "6cf3ea04-9065-4a29-a045-0eb5dd0d1695", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25361", "type": "seen", "source": "https://t.me/cvedetector/19740", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25361 - PublicCMS Arbitrary Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25361 \nPublished : March 6, 2025, 7:15 p.m. | 1\u00a0hour, 9\u00a0minutes ago \nDescription : An arbitrary file upload vulnerability in the component /cms/CmsWebFileAdminController.java of PublicCMS v4.0.202406 allows attackers to execute arbitrary code via uploading a crafted svg or xml file. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T22:12:27.000000Z"}, {"uuid": "335b3af9-83bd-48bd-8f8d-43a851a79397", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25294", "type": "seen", "source": "https://t.me/cvedetector/19739", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25294 - Envoy Gateway JSON Log Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25294 \nPublished : March 6, 2025, 7:15 p.m. | 1\u00a0hour, 9\u00a0minutes ago \nDescription : Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. In all Envoy Gateway versions prior to 1.2.7 and 1.3.1 a default Envoy Proxy access log configuration is used. This format is vulnerable to log injection attacks. If the attacker uses a specially crafted user-agent which performs json injection, then he could add and overwrite fields to the access log. This vulnerability is fixed in 1.3.1 and 1.2.7. One can overwrite the old text based default format with JSON formatter by modifying the \"EnvoyProxy.spec.telemetry.accessLog\" setting. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T22:12:23.000000Z"}, {"uuid": "183e246c-6ce5-421e-93f5-f3a33312ec00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25191", "type": "seen", "source": "https://t.me/cvedetector/19738", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25191 - Group-Office Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25191 \nPublished : March 6, 2025, 7:15 p.m. | 1\u00a0hour, 9\u00a0minutes ago \nDescription : Group-Office is an enterprise CRM and groupware tool. This Stored XSS vulnerability exists where user input in the Name field is not properly sanitized before being stored. This vulnerability is fixed in 6.8.100. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T22:12:23.000000Z"}, {"uuid": "0272cdb1-9e6d-4d29-a7a0-23c0ef8b60a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25452", "type": "seen", "source": "https://t.me/cvedetector/19706", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25452 - TAAGSOLUTIONS GmbH MyTaag Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25452 \nPublished : March 6, 2025, 3:15 p.m. | 53\u00a0minutes ago \nDescription : An issue in TAAGSOLUTIONS GmbH MyTaag v.2024-11-24 and before allows a remote attacker to escalate privileges via the \"/user\" endpoint \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T17:10:57.000000Z"}, {"uuid": "ed8675e4-169b-411b-a2e7-b5f83ce6637b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25451", "type": "seen", "source": "https://t.me/cvedetector/19705", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25451 - MyTaag: Local Storage Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25451 \nPublished : March 6, 2025, 3:15 p.m. | 53\u00a0minutes ago \nDescription : An issue in TAAGSOLUTIONS GmbH MyTaag v.2024-11-24 and before allows a physically proximate attacker to escalate privileges via the \"2fa_authorized\" Local Storage key \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T17:10:56.000000Z"}, {"uuid": "ace0d8ef-aa4c-4233-bebe-742954a0ee6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25632", "type": "seen", "source": "https://t.me/cvedetector/19667", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25632 - Tenda AC15 Remote Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25632 \nPublished : March 5, 2025, 9:15 p.m. | 2\u00a0hours, 22\u00a0minutes ago \nDescription : Tenda AC15 v15.03.05.19 is vulnerable to Command Injection via the handler function in /goform/telnet. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T01:18:24.000000Z"}, {"uuid": "d23bfbe5-8de1-4f93-8e7f-e20e8ddccc92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25362", "type": "seen", "source": "https://t.me/cvedetector/19666", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25362 - Spacy-LLM SSTI Code Execution\", \n  \"Content\": \"CVE ID : CVE-2025-25362 \nPublished : March 5, 2025, 9:15 p.m. | 2\u00a0hours, 22\u00a0minutes ago \nDescription : A Server-Side Template Injection (SSTI) vulnerability in Spacy-LLM v0.7.2 allows attackers to execute arbitrary code via injecting a crafted payload into the template field. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T01:18:24.000000Z"}, {"uuid": "e991527b-3826-4e05-acf8-d34db7d8144f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25634", "type": "seen", "source": "https://t.me/cvedetector/19668", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25634 - Tenda AC15 Stack-Based Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2025-25634 \nPublished : March 5, 2025, 9:15 p.m. | 2\u00a0hours, 22\u00a0minutes ago \nDescription : A vulnerability has been found in Tenda AC15 15.03.05.19 in the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument src leads to stack-based buffer overflow. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T01:18:25.000000Z"}, {"uuid": "8a896c24-95ad-41bd-a276-cb95805e9055", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25015", "type": "seen", "source": "https://t.me/cvedetector/19606", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25015 - Kibana Prototype Pollution RCE\", \n  \"Content\": \"CVE ID : CVE-2025-25015 \nPublished : March 5, 2025, 10:15 a.m. | 48\u00a0minutes ago \nDescription : Prototype pollution in Kibana leads to arbitrary code execution via a crafted file upload and specifically crafted HTTP requests.  \nIn Kibana versions >= 8.15.0 and < 8.17.1, this is exploitable by users with the Viewer role. In Kibana versions 8.17.1 and 8.17.2 , this is only exploitable by users that have roles that contain all the following privileges: fleet-all, integrations-all, actions:execute-advanced-connectors \nSeverity: 9.9 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T12:45:45.000000Z"}, {"uuid": "f3d2ad61-dfe7-471b-860b-6a57f098a62c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25039", "type": "seen", "source": "https://t.me/cvedetector/17237", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25039 - Aruba Networking ClearPass Policy Manager Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25039 \nPublished : Feb. 4, 2025, 7:15 p.m. | 1\u00a0hour, 59\u00a0minutes ago \nDescription : A vulnerability in the web-based management interface of HPE Aruba Networking ClearPass Policy Manager (CPPM) allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as a lower privileged user on the underlying operating system. \nSeverity: 4.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-04T22:15:24.000000Z"}, {"uuid": "0fd6dc73-4914-4b6a-856f-28fac59186d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25181", "type": "seen", "source": "https://t.me/cvedetector/17102", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25181 - Advantive VeraCore SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25181 \nPublished : Feb. 3, 2025, 8:15 p.m. | 22\u00a0minutes ago \nDescription : A SQL injection vulnerability in timeoutWarning.asp in Advantive VeraCore through 2025.1.0 allows remote attackers to execute arbitrary SQL commands via the PmSess1 parameter. \nSeverity: 5.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-03T21:59:58.000000Z"}, {"uuid": "ad5beb97-6ff8-4df2-9d59-cc9a9bdeee82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25065", "type": "seen", "source": "https://t.me/cvedetector/17101", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25065 - Zimbra Collaboration SSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25065 \nPublished : Feb. 3, 2025, 8:15 p.m. | 22\u00a0minutes ago \nDescription : SSRF vulnerability in the RSS feed parser in Zimbra Collaboration 9.0.0 before Patch 43, 10.0.x before 10.0.12, and 10.1.x before 10.1.4 allows unauthorized redirection to internal network endpoints. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-03T21:59:57.000000Z"}, {"uuid": "d297019d-aba3-424a-81a1-313f909346ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25064", "type": "seen", "source": "https://t.me/cvedetector/17100", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25064 - Zimbra Collaboration SQL Injection weakness\", \n  \"Content\": \"CVE ID : CVE-2025-25064 \nPublished : Feb. 3, 2025, 8:15 p.m. | 22\u00a0minutes ago \nDescription : SQL injection vulnerability in the ZimbraSyncService SOAP endpoint in Zimbra Collaboration 10.0.x before 10.0.12 and 10.1.x before 10.1.4. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-03T21:59:56.000000Z"}, {"uuid": "83168f40-9cd9-4440-9850-3d56e83c918a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25062", "type": "seen", "source": "https://t.me/cvedetector/17041", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25062 - Backdrop CMS Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25062 \nPublished : Feb. 3, 2025, 4:15 a.m. | 1\u00a0hour, 43\u00a0minutes ago \nDescription : An XSS issue was discovered in Backdrop CMS 1.28.x before 1.28.5 and 1.29.x before 1.29.3. It doesn't sufficiently isolate long text content when the CKEditor 5 rich text editor is used. This allows a potential attacker to craft specialized HTML and JavaScript that may be executed when an administrator attempts to edit a piece of content. This vulnerability is mitigated by the fact that an attacker must have the ability to create long text content (such as through the node or comment forms) and an administrator must edit (not view) the content that contains the malicious content. This problem only exists when using the CKEditor 5 module. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-03T07:46:41.000000Z"}, {"uuid": "20125dcb-8ad7-495b-9726-7a03e2bcd4f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25063", "type": "seen", "source": "https://t.me/cvedetector/17036", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25063 - \"Backdrop CMS SVG Image XSS\"\", \n  \"Content\": \"CVE ID : CVE-2025-25063 \nPublished : Feb. 3, 2025, 4:15 a.m. | 1\u00a0hour, 43\u00a0minutes ago \nDescription : An XSS issue was discovered in Backdrop CMS 1.28.x before 1.28.5 and 1.29.x before 1.29.3. It does not sufficiently validate uploaded SVG images to ensure they do not contain potentially dangerous SVG tags. SVG images can contain clickable links and executable scripting, and using a crafted SVG, it is possible to execute scripting in the browser when an SVG image is viewed. This issue is mitigated by the attacker needing to be able to upload SVG images, and that Backdrop embeds all uploaded SVG images within tags, which prevents scripting from executing. The SVG must be viewed directly by its URL in order to run any embedded scripting. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-03T07:46:34.000000Z"}, {"uuid": "3c8ef2b8-5a0e-4c06-adac-f87fc1cc3508", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25357", "type": "seen", "source": "Telegram/PxChIE9tU9Q3G0_usOTzBGONUxU0Q6bZQRuM36rB4QqPhByO", "content": "", "creation_timestamp": "2025-02-14T21:09:18.000000Z"}, {"uuid": "65108cb2-94e5-4c0f-9e14-59f2267da6b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25224", "type": "seen", "source": "Telegram/KRkDjRShgfFQcRn1u6P_fYrsP_49_SUleK87CPXoRAZLSKnb", "content": "", "creation_timestamp": "2025-02-18T03:37:46.000000Z"}, {"uuid": "cd45bd03-9de7-450b-9ac2-d28dd5089ab0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25223", "type": "seen", "source": "Telegram/twboOtSzz0UjigiGXvhz1K6iVzDQUDIf0lE5vcfY9spfkgVc", "content": "", "creation_timestamp": "2025-02-18T03:37:46.000000Z"}, {"uuid": "fa34fc2b-ac20-4315-93bf-448011dae543", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25222", "type": "seen", "source": "Telegram/EwrRrkWKvTm9Mx_T5vGBlnMJZyMzwBgTgvzEXvRQjJKzOSWw", "content": "", "creation_timestamp": "2025-02-18T03:37:46.000000Z"}, {"uuid": "29e1dcbb-34db-447f-9939-001bcc7d2d84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25221", "type": "seen", "source": "Telegram/c3wU5t6BnFtO_5DpVaLdDZouf-34Nsw2HTFEjkoBPvEn_uaq", "content": "", "creation_timestamp": "2025-02-18T03:37:46.000000Z"}, {"uuid": "566c11e0-455e-4546-b575-5354f6e2e1ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25292", "type": "seen", "source": "https://t.me/CyberBulletin/2634", "content": "\u26a1Account hijacking possible with ruby-saml library bugs.\n\nTracked as CVE-2025-25291 and CVE-2025-25292, which could be exploited to circumvent the authentication defenses of the Security Assertion Markup Language and facilitate account takeovers.\n\n#CyberBulletin", "creation_timestamp": "2025-03-14T21:37:07.000000Z"}, {"uuid": "1323fbd2-99cc-43bb-9215-ff521cb53009", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "seen", "source": "https://t.me/CyberBulletin/2634", "content": "\u26a1Account hijacking possible with ruby-saml library bugs.\n\nTracked as CVE-2025-25291 and CVE-2025-25292, which could be exploited to circumvent the authentication defenses of the Security Assertion Markup Language and facilitate account takeovers.\n\n#CyberBulletin", "creation_timestamp": "2025-03-14T21:37:07.000000Z"}, {"uuid": "bb166c5a-34b1-4003-8963-2d3ead210482", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25451", "type": "seen", "source": "Telegram/My_9mZil9QWoCdHsRZ395amlu9zHp9MhsLusHSoj-hqrIG2I", "content": "", "creation_timestamp": "2025-03-08T04:35:52.000000Z"}, {"uuid": "06d96d54-1cdb-44d2-9bbf-276feeaf0e8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25450", "type": "seen", "source": "Telegram/3ZspW526t9OSP1br2Q9bV7j0kq7T2LZvD0cuadRc2HGKwmea", "content": "", "creation_timestamp": "2025-03-08T04:35:52.000000Z"}, {"uuid": "a5a118e6-6ad2-45a2-9674-50a1b5aea8e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25617", "type": "seen", "source": "Telegram/xujHTXledlSlp-VdzuIMRUAerSl4-NwPM4_4rIJbyF3PW2D6", "content": "", "creation_timestamp": "2025-03-08T04:35:51.000000Z"}, {"uuid": "32f4d836-b788-485e-a82b-0d5cef99af0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25431", "type": "seen", "source": "Telegram/rhKSWDAUe15XeDKZUaIe9ka_gESzkvoi0C6GKwdau-MypfdM", "content": "", "creation_timestamp": "2025-03-02T11:45:38.000000Z"}, {"uuid": "dc1d27c1-ebab-4816-a004-595c9dbcaab7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25430", "type": "seen", "source": "Telegram/v3mVXitjWDsAkRaZYnI2SY4eWBUBlHxQS9gyNbk1zZLgIOVS", "content": "", "creation_timestamp": "2025-03-02T11:45:38.000000Z"}, {"uuid": "3883954a-32ae-4f09-9d5c-27528491e9be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25570", "type": "seen", "source": "Telegram/erjuHfn6iB7pvwSU3sYNgwlxlWBDTwUfEu3WD7OMZcfyKuhP", "content": "", "creation_timestamp": "2025-03-02T11:45:38.000000Z"}, {"uuid": "9a80a53b-0170-48c2-93f7-f7d0f40cc9c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25729", "type": "seen", "source": "Telegram/HobLEJk55bUNzJCco6UaXswIhRphaFL9SuBcgOTyF7GSWXHe", "content": "", "creation_timestamp": "2025-03-02T11:45:37.000000Z"}, {"uuid": "c1b24062-7a1d-4755-9489-3d23044a7f59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25329", "type": "seen", "source": "Telegram/DGO5ttcFro3pNtERhN9Oi3VFaiahHsoIvwwAF1CirDt60tBS", "content": "", "creation_timestamp": "2025-03-02T11:45:37.000000Z"}, {"uuid": "57321197-5344-47a4-b056-8b0d89306480", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25331", "type": "seen", "source": "Telegram/7jNkVm_Kqe5Key0peF2Ahqi32RnBHVr7a5xWyUrq_YuQiwjm", "content": "", "creation_timestamp": "2025-03-02T11:45:37.000000Z"}, {"uuid": "5674dcc8-824d-45bb-8381-dd6f92e0f20f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25334", "type": "seen", "source": "Telegram/uscqOGixP5GX-PPvEBLdAxPDez--6rNRun58ogbMSxJnAXuA", "content": "", "creation_timestamp": "2025-03-02T11:45:37.000000Z"}, {"uuid": "167083c4-92e9-4221-a3c5-b0e4c02b475b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25330", "type": "seen", "source": "Telegram/chJ58hsHKAAhdcfQTZEJuZeRBXCpFKuBGOhMuUtpsc7OrVLW", "content": "", "creation_timestamp": "2025-03-02T11:45:37.000000Z"}, {"uuid": "17bd9766-7357-4271-b9cb-db0d7c216ad8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25326", "type": "seen", "source": "Telegram/i-yX1Mw7vF1gNl42tzz7TeaK7DystZIun-GUPK45LnYaXX4s", "content": "", "creation_timestamp": "2025-03-02T11:45:37.000000Z"}, {"uuid": "39a23d80-eb55-4d9d-923a-268b67e33a41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25325", "type": "seen", "source": "Telegram/iTdQgLie5-CGcmTUIXz3Fj1sZIA1cSWQMlN83NbcXV6TRr5a", "content": "", "creation_timestamp": "2025-03-02T11:45:37.000000Z"}, {"uuid": "362d03da-349e-4a67-9cfb-de6454f9326d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25324", "type": "seen", "source": "Telegram/TC6lXfe98-_XIm6jqQnJaV0JGFddP8D2v2Z6jDXWXM0FGiE-", "content": "", "creation_timestamp": "2025-03-02T11:45:37.000000Z"}, {"uuid": "42dd575a-9db1-40c6-afce-282262af731b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25323", "type": "seen", "source": "Telegram/8X-udYk_wxM3X4dhkxjb7RlZUkms1ZgogZzYrRaEUOLYWeaq", "content": "", "creation_timestamp": "2025-03-02T11:45:37.000000Z"}, {"uuid": "78436136-77cb-4d72-a39f-12b0e7641c2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25064", "type": "seen", "source": "https://t.me/ton618cyber/2370", "content": "Zimbra Releases Security Updates for SQL Injection, Stored XSS, and SSRF Vulnerabilities\n\nZimbra has patched CVE-2025-25064, a critical SQL injection flaw (CVSS 9.8), and other security bugs. Update now to protect against exploits.\n\nThe Hacker News | thehackernews.com \u2022 Feb 10, 2025", "creation_timestamp": "2025-02-10T12:34:49.000000Z"}, {"uuid": "7e8329d0-5fa4-49bb-b030-884eaafe909f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25292", "type": "seen", "source": "https://t.me/ton618cyber/3203", "content": "GitHub Uncovers New ruby-saml Vulnerabilities Allowing Account Takeover Attacks\n\nruby-saml vulnerabilities (CVE-2025-25291, CVE-2025-25292) allow SAML authentication bypass (CVSS 8.8). Update to versions 1.12.4 or 1.18.0 now.\n\nThe Hacker News | thehackernews.com \u2022 Mar 13, 2025", "creation_timestamp": "2025-03-25T00:46:05.000000Z"}, {"uuid": "929ecaf0-3534-49e5-b2fe-551f482fc621", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25292", "type": "seen", "source": "Telegram/WNRbuXq55OVE9Qh-wm0yqD8L1Jchj4VgDMTY-oahDGw04g", "content": "", "creation_timestamp": "2025-03-13T13:44:56.000000Z"}, {"uuid": "2197e9e0-5af1-46f5-8aad-e41b97dbb251", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "seen", "source": "Telegram/WNRbuXq55OVE9Qh-wm0yqD8L1Jchj4VgDMTY-oahDGw04g", "content": "", "creation_timestamp": "2025-03-13T13:44:56.000000Z"}, {"uuid": "dec9eb49-61fc-4bdc-ab32-6af69210d3e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25292", "type": "seen", "source": "https://t.me/CyberBulletin/2618", "content": "\u26a1ruby-saml Flaws Open SAML Auth to Hijacking\n\nGitHub Security Lab found CVE-2025-25291 & CVE-2025-25292 (CVSS 8.8) in ruby-saml, allowing attackers to bypass authentication using a valid signature.\n\n#CyberBulletin", "creation_timestamp": "2025-03-13T17:22:59.000000Z"}, {"uuid": "06ab33d3-1d04-4571-98d0-d07e5f2240e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "seen", "source": "https://t.me/CyberBulletin/2618", "content": "\u26a1ruby-saml Flaws Open SAML Auth to Hijacking\n\nGitHub Security Lab found CVE-2025-25291 & CVE-2025-25292 (CVSS 8.8) in ruby-saml, allowing attackers to bypass authentication using a valid signature.\n\n#CyberBulletin", "creation_timestamp": "2025-03-13T17:22:59.000000Z"}, {"uuid": "76955a0f-e8fa-4b4f-b0d2-52e3b52b5c3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "seen", "source": "https://t.me/ton618cyber/3203", "content": "GitHub Uncovers New ruby-saml Vulnerabilities Allowing Account Takeover Attacks\n\nruby-saml vulnerabilities (CVE-2025-25291, CVE-2025-25292) allow SAML authentication bypass (CVSS 8.8). Update to versions 1.12.4 or 1.18.0 now.\n\nThe Hacker News | thehackernews.com \u2022 Mar 13, 2025", "creation_timestamp": "2025-03-25T00:46:05.000000Z"}, {"uuid": "0986c1ec-e3fa-416e-ab0d-2a826adda8e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25064", "type": "seen", "source": "https://t.me/ton618cyber/6573", "content": "Zimbra Releases Security Updates for SQL Injection, Stored XSS, and SSRF Vulnerabilities\n\nZimbra has patched CVE-2025-25064, a critical SQL injection flaw (CVSS 9.8), and other security bugs. Update now to protect against exploits.\n\nThe Hacker News | thehackernews.com \u2022 Feb 10, 2025", "creation_timestamp": "2025-02-10T12:34:49.000000Z"}, {"uuid": "70f3cd49-aad8-44c8-8403-37927646cd53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25015", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/13899", "content": "\ud83d\udea8CVE-2025-25015: Kibana arbitrary code execution via prototype pollution\n\nhttps://darkwebinformer.com/cve-2025-25015-kibana-arbitrary-code-execution-via-prototype-pollution/", "creation_timestamp": "2025-03-05T21:07:06.000000Z"}, {"uuid": "66379be2-8f53-46ab-beee-d1cfed73c581", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25361", "type": "seen", "source": "Telegram/7IuFFCL9Ovx5DaPeELjn4IUeEmdMvGD6YyPU4TwE88jOs6Yy", "content": "", "creation_timestamp": "2025-03-08T04:35:53.000000Z"}, {"uuid": "373b1422-b267-4af2-bece-294e1062efe1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25355", "type": "seen", "source": "Telegram/1uP6jUj6v_MlTubeqmLGX-p0rFE_w_vLTlS41-ZokAOdxD8S", "content": "", "creation_timestamp": "2025-02-14T21:09:18.000000Z"}, {"uuid": "8aacbcb6-f40f-4c67-a383-47741dcaeec9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25916", "type": "seen", "source": "Telegram/OqtijlW6O0ZityJe562GbnWUuNQKTkLnHrDYscLPgzD6l66v", "content": "", "creation_timestamp": "2025-03-02T11:45:36.000000Z"}, {"uuid": "de3c7399-a35f-4b89-8bdd-acadf7f9c11a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25477", "type": "seen", "source": "Telegram/xvZCT4UgKPo96JnQ7twQUiScLaIvrNcCGdnoyKC_rd4mo6MD", "content": "", "creation_timestamp": "2025-03-02T11:45:37.000000Z"}, {"uuid": "3a36311c-8124-427f-a51b-08fa6be938f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25727", "type": "seen", "source": "Telegram/Y2NsbFmEtBekOkMnMS6Xj_vpntElvG_NKCOCue9JVm7Z6fxx", "content": "", "creation_timestamp": "2025-03-02T11:44:21.000000Z"}, {"uuid": "d7427b5b-b4f5-48f8-a426-7ee5d130a2e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25452", "type": "seen", "source": "Telegram/ovDPT7ZiI4OUb_QNjE02AccyNtuBUqWap7PXfZ5rTFmMZsKW", "content": "", "creation_timestamp": "2025-03-08T04:35:52.000000Z"}, {"uuid": "8ea5dd2b-f205-4e7c-b55a-7465db042ad1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25730", "type": "seen", "source": "Telegram/UY-U79WTIcuT7Fd-JFrH26LqtwWkYliQ5w9G0WbIkaQtIPKD", "content": "", "creation_timestamp": "2025-03-02T11:45:38.000000Z"}, {"uuid": "e3d3207b-effb-483d-b341-292c0c25e748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25908", "type": "seen", "source": "Telegram/4mACg6LuCuirrI4ktRIYzQ12EjgokkRm5YeOhwEsLUBNH9pz", "content": "", "creation_timestamp": "2025-03-11T04:41:13.000000Z"}, {"uuid": "8b9e5b33-15e0-47d1-9b71-61613e392d1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25477", "type": "seen", "source": "Telegram/cZiMlUZG82jBqO0dhj1yHS79N6xQ424D0JwYIM4KIH2wBj1p", "content": "", "creation_timestamp": "2025-03-02T11:44:21.000000Z"}, {"uuid": "1b7b443b-090d-4d22-8515-d99c66d1e201", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25730", "type": "seen", "source": "Telegram/4LAVekKyzrytA9fGT7pgEapGvKNM9ls2YN6sQgQwnXeaYbnH", "content": "", "creation_timestamp": "2025-03-02T11:44:21.000000Z"}, {"uuid": "06a2bdf8-7961-43d1-9953-5147265feaa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25570", "type": "seen", "source": "Telegram/U_TwxPat1lDcHzctgmC5CSqJ3QgNSu9YaaB_3rr2IK-owF8s", "content": "", "creation_timestamp": "2025-03-02T11:44:21.000000Z"}, {"uuid": "44d20b16-9c7e-466c-bdf7-716d04089255", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25763", "type": "seen", "source": "Telegram/kYBxqFuqk-DA_wOHELTgFsClxfj5C_ZhPQSAd8DskQu3Nxan", "content": "", "creation_timestamp": "2025-03-08T04:35:53.000000Z"}, {"uuid": "63e7369b-6d45-4aab-a427-1c04a0285dce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25497", "type": "seen", "source": "Telegram/XhRqXkUOmpPSkAyfqbX0CCitfq86cb_Joda3XJHlkZOLd071", "content": "", "creation_timestamp": "2025-03-08T04:35:53.000000Z"}, {"uuid": "b4da0cff-15a4-49bb-95df-13a60f504836", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25381", "type": "seen", "source": "Telegram/mdEZ2BU2JO91Awb8yI56jdsbO6C_X1VePMSgHVILnJ6RWMBD", "content": "", "creation_timestamp": "2025-03-08T04:35:53.000000Z"}, {"uuid": "f95ed27b-8262-45ff-ab67-f46204aee43f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25908", "type": "seen", "source": "Telegram/4ObzNYzA90PHAs7O0XE9osWzcA1i_fdLl2Ko-KwHuyYzMfrD", "content": "", "creation_timestamp": "2025-03-11T04:41:14.000000Z"}, {"uuid": "4e353368-e734-4283-bbb7-f1e835b770bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25181", "type": "seen", "source": "Telegram/XAyayee7Pu1r8gHKKYylMIQcAg8pYjMrlwY3qnfKXdlFW4F6", "content": "", "creation_timestamp": "2025-03-11T04:41:14.000000Z"}, {"uuid": "e95939e8-789a-4508-a3d8-37219fc000d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25476", "type": "seen", "source": "Telegram/3xB6M54-wSCQN7enHt26ebBCCT1YEan57cXsGm01RSafoLfk", "content": "", "creation_timestamp": "2025-03-02T11:46:30.000000Z"}, {"uuid": "cf2dac23-5594-4c1b-a3c6-383a00974ba3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25379", "type": "seen", "source": "Telegram/C0OXpo2dHPnljw7MS_-EyKvrdB93A96NtlABXMGO8LBw1MzD", "content": "", "creation_timestamp": "2025-03-02T11:46:30.000000Z"}, {"uuid": "494e02ec-f1be-49b0-a72e-88144832e383", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25429", "type": "seen", "source": "Telegram/pITSVEZ6Zozk8fnJWOL8OYa2TwFlpQKSsD9K53p2PDoHPoL7", "content": "", "creation_timestamp": "2025-03-02T11:46:30.000000Z"}, {"uuid": "f1771f0e-4d9f-428b-a5d4-781c97bf4f4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25723", "type": "seen", "source": "Telegram/BSty_Om8Ue6Grz_T-V9h-jX3EHbd4z0baUQvHUumRNn9Ik9J", "content": "", "creation_timestamp": "2025-03-02T11:46:30.000000Z"}, {"uuid": "1c58e93a-f921-445f-bcf4-b54d699b2d50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25478", "type": "seen", "source": "Telegram/JW5Q7YJObYM1Wu0JJadvWu-BK9ANNSMIfO7ZxTpLh5r4kDFj", "content": "", "creation_timestamp": "2025-03-02T11:46:30.000000Z"}, {"uuid": "1e7c2bd0-5234-4900-9506-b59bed338260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25958", "type": "seen", "source": "Telegram/fbZISBg_fCVr2rdM-WXYJrFHm4AAKPu_VE25sJkFa79i-lSa", "content": "", "creation_timestamp": "2025-02-20T23:38:15.000000Z"}, {"uuid": "c0089cb6-86ad-47e2-8246-3ba74cd854e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25475", "type": "seen", "source": "Telegram/PZ8weyvWQpCfgnbEDwVk7P1bqCkIVC8_ZND6FnWWswgF8E7k", "content": "", "creation_timestamp": "2025-02-20T23:38:15.000000Z"}, {"uuid": "a9bacce3-cc6a-4d21-a708-6f4d0b8ced76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25474", "type": "seen", "source": "Telegram/yRgDiY52HXM7iZQ3rZrXfjC34JHxZxaI5FRZ4FD5yASNrQgG", "content": "", "creation_timestamp": "2025-02-20T23:38:15.000000Z"}, {"uuid": "4229e2db-2af1-4de8-9da5-b4d4b797b4fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25066", "type": "seen", "source": "Telegram/A6MtQ3BRHXtlgD88Mr6MulSxSchfRnuCx7ffwFKRw4Yv6H32", "content": "", "creation_timestamp": "2025-02-06T02:39:11.000000Z"}, {"uuid": "fb94dc48-8cf9-47d6-9366-0ef41ab9161b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25958", "type": "seen", "source": "Telegram/Z0jXy0aQi8AYgznAigOqAotpTsu7_KEGMe2Z6-_UBJVhDzph", "content": "", "creation_timestamp": "2025-02-21T22:10:25.000000Z"}, {"uuid": "b5049ee7-bade-4f58-bd78-b79714250a94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25473", "type": "seen", "source": "Telegram/JpkLuH3w3ossKokdyStyTWUpxPMhOuUfclzfXA5puYx4qwbv", "content": "", "creation_timestamp": "2025-02-20T23:38:15.000000Z"}, {"uuid": "b42d9517-bfe6-4842-b895-e1d07bff7948", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25343", "type": "seen", "source": "Telegram/5jOHTUcB4sY88L4Rg_InDX98-wVCDtakhgVsc4aKBkaTJKUY", "content": "", "creation_timestamp": "2025-02-19T19:13:54.000000Z"}, {"uuid": "604b6b1d-59ae-47ee-9c05-a755d176f5d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25469", "type": "seen", "source": "Telegram/fLCF0hsKd5w5udLM45RH3dVf2OoO74QdCzK602W7HVsGWnMB", "content": "", "creation_timestamp": "2025-02-20T01:27:45.000000Z"}, {"uuid": "4dcbe482-2375-4d83-8ecb-d17a97e1a24f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25054", "type": "seen", "source": "Telegram/G6sKo8ItrdeF5QqNdyGgeFgBBUBgnYjUcS5hA8hx4UJudBZH", "content": "", "creation_timestamp": "2025-02-19T15:39:50.000000Z"}, {"uuid": "c2b24e7c-c7c3-4d01-9662-78b5c53bd251", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25286", "type": "seen", "source": "Telegram/iIi3KzIjULUXGypju4KFbWF_wBXen_gNRgrYAEOt14MXqBOb", "content": "", "creation_timestamp": "2025-02-14T10:06:08.000000Z"}, {"uuid": "5c29ff83-cb7f-48f1-ba99-b54ff6ea6b1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25160", "type": "seen", "source": "Telegram/jC2zvjx6EWZ9AKC2dZL89b6_PjjJZ0sZe_K2zKZ8njGm2_0B", "content": "", "creation_timestamp": "2025-02-14T10:03:59.000000Z"}, {"uuid": "4aa6fbda-6926-4916-844f-a175fa0fc4c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25247", "type": "seen", "source": "Telegram/ILz_2WS40nKqReYb8y92vsgGbhhSplNBjrof2uaLIDf-KCFh", "content": "", "creation_timestamp": "2025-02-14T09:46:58.000000Z"}, {"uuid": "620ba4a3-9619-4aba-822a-f409e88ea66a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25388", "type": "seen", "source": "Telegram/w_YEG2D8XLRTlq0S5ArDhruAxjAalRu-GajTsbBWlL5Sctq6", "content": "", "creation_timestamp": "2025-02-14T10:09:23.000000Z"}, {"uuid": "e4f07d2b-774b-43e9-aa4b-0b565ddd9502", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25069", "type": "seen", "source": "Telegram/zZWFpre6eOeVfGVyzPnWfO55aGT7emKyIooxqw-VQkp98wZK", "content": "", "creation_timestamp": "2025-02-14T10:09:23.000000Z"}, {"uuid": "1d249c31-0fe2-46fa-a867-21ddb0b061ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25899", "type": "seen", "source": "Telegram/LrjrhdsM85XvD-AL3XfzgOQtkKj6uf5nFFEWZKlDPy9cqu2E", "content": "", "creation_timestamp": "2025-02-14T10:09:23.000000Z"}, {"uuid": "a0b8e5c6-61ee-4377-afe5-80248d79bef8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-29)", "content": "", "creation_timestamp": "2026-04-29T00:00:00.000000Z"}, {"uuid": "07d23953-9d79-4720-a7f5-58602f1554fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25064", "type": "seen", "source": "Telegram/-9fvifp5SBhmKJGW_cGyMPBmGgQp-30e1wOClZ4NqXCMWA", "content": "", "creation_timestamp": "2025-02-10T12:07:52.000000Z"}, {"uuid": "ddd4feb3-96d0-455b-902c-f919b97f3c15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25012", "type": "published-proof-of-concept", "source": "Telegram/rNG1pajnigJoG9wazHGx1achbNN8Z-Q-wf2UyzZR69z2xQ", "content": "", "creation_timestamp": "2025-03-06T17:37:09.000000Z"}, {"uuid": "e95aa83f-1d48-46bc-8cc4-6c6f80c39587", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2563", "type": "seen", "source": "Telegram/01jIZuykzV2ZEfUYuLOtc2ZkoWyJZmQDfLImJzcAZFdhESI", "content": "", "creation_timestamp": "2025-04-14T18:00:53.000000Z"}, {"uuid": "f76b6d4e-a1ef-4442-946e-5f42e604f2b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2594", "type": "published-proof-of-concept", "source": "Telegram/XWNVTNV35dvmt9z1kuRKrDP-n4wp3QUtmRLqVkoNNpbDXx4", "content": "", "creation_timestamp": "2025-04-02T17:00:08.000000Z"}, {"uuid": "cb8de12c-f439-418d-9c98-57fcf7d5c0ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2525", "type": "published-proof-of-concept", "source": "Telegram/1nHwHmzl0TbVdYR1_lL3wCzW0pI2bWsxfRrs1LunCdsisi4", "content": "", "creation_timestamp": "2025-04-08T05:02:07.000000Z"}, {"uuid": "a5a315dc-2594-443a-8cbf-02698c4bcda0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2526", "type": "published-proof-of-concept", "source": "Telegram/1nHwHmzl0TbVdYR1_lL3wCzW0pI2bWsxfRrs1LunCdsisi4", "content": "", "creation_timestamp": "2025-04-08T05:02:07.000000Z"}, {"uuid": "fb40b0a6-8a14-4f6c-a0bd-7a757f623a9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2563", "type": "published-proof-of-concept", "source": "Telegram/iXXrSRZXi-ojvdasxd-BMH7IqLKZibvE0e6rFuxhoF-GkT8", "content": "", "creation_timestamp": "2025-03-29T16:00:07.000000Z"}, {"uuid": "7ee59192-ed1d-4859-a83f-43ab36d2d5dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25427", "type": "published-proof-of-concept", "source": "Telegram/l8rpmt9IEsaMir73BEzPWVwPlbkzU9EJpZeQ9myt0c4T-pE", "content": "", "creation_timestamp": "2025-04-18T03:00:28.000000Z"}, {"uuid": "80840a41-7c3a-42f2-b8e0-ae3b1316e65c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25284", "type": "published-proof-of-concept", "source": "Telegram/2uxF_1qoFB3hlCxfLn3xIrN9O42tmrJDZ5kGfls8NVGPMqg", "content": "", "creation_timestamp": "2025-02-18T20:31:23.000000Z"}, {"uuid": "bb9523b6-f15f-4fb5-a732-9c28552a43ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25101", "type": "published-proof-of-concept", "source": "Telegram/pWd9X9O-wxNFHc7yjrFxacF5_Xwtq-UoHUpwNipx7ufI6ko", "content": "", "creation_timestamp": "2025-03-14T10:00:06.000000Z"}, {"uuid": "02451301-d842-46a1-9742-fd7c9eed9006", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25296", "type": "published-proof-of-concept", "source": "Telegram/g_F7ts86Wf9TVkGvhLC4v8MUhSfefkchbq2qIDNQ61DvbUA", "content": "", "creation_timestamp": "2025-03-01T16:00:14.000000Z"}, {"uuid": "09041ccb-56fb-4d12-af8f-120feea31d1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25243", "type": "seen", "source": "Telegram/fDpnFMDycR34vnlZyVn6O0P_sOi8Y8G1NOFj_RFl-QCg24A", "content": "", "creation_timestamp": "2025-02-11T03:01:32.000000Z"}, {"uuid": "c2e08de3-282e-45f4-ad7a-fd20ab0d1504", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25246", "type": "seen", "source": "Telegram/WwqtEICyKU8cbOcVlgMoVXs3ldGPaOJgGec_vdN4FbMjm_A", "content": "", "creation_timestamp": "2025-02-05T06:30:19.000000Z"}, {"uuid": "4199d3be-ec97-410a-af43-dd50677cc110", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25066", "type": "published-proof-of-concept", "source": "Telegram/c60omnMfC5oLAOBaSAMV3hCsuWcrlM-TPMQ1q2b5-Yt2Mik", "content": "", "creation_timestamp": "2025-02-03T08:00:35.000000Z"}, {"uuid": "7fdcd62b-20ae-4e86-b8f7-60c1d30e1bda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25014", "type": "seen", "source": "Telegram/PwjyiTDmMCV8n5O4H8WYZUui8x-G-PcEgC06QwyqI9Pyxio", "content": "", "creation_timestamp": "2025-05-06T20:30:48.000000Z"}, {"uuid": "6084033f-8613-4a68-89c2-14ef1c316efd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25175", "type": "seen", "source": "Telegram/sYjWk0jf6234z4ClFhLqwsZqcZc81SztNeSCz0F1d0Waf3o", "content": "", "creation_timestamp": "2025-03-13T11:30:26.000000Z"}, {"uuid": "36567eaa-ed9f-42ed-8fbd-3ff770bb9699", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25460", "type": "published-proof-of-concept", "source": "Telegram/1mQHK4kzkT_tG-AzpsgjXYcB4OJr_iN6H9_45IqPO19-N9Q", "content": "", "creation_timestamp": "2025-02-22T10:00:05.000000Z"}, {"uuid": "b27960e0-44ee-4a96-ae44-9a27b00b8b37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25296", "type": "published-proof-of-concept", "source": "Telegram/g5dnSKFfRiVqVOSRBmM4iv0zdPT4UndMYFcD4S5T3oiUYT0", "content": "", "creation_timestamp": "2025-03-01T10:00:05.000000Z"}, {"uuid": "efb58052-c2d9-4ccc-b2a0-554a3c473cfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25612", "type": "published-proof-of-concept", "source": "Telegram/AUcfxApx61EFHOeSqEfIRLhfCLQTn8bpNAF6AdXUDg93-Ws", "content": "", "creation_timestamp": "2025-03-04T22:00:06.000000Z"}, {"uuid": "5d63e3a8-7be2-4a01-99fa-bc24fab977e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25748", "type": "seen", "source": "Telegram/3MBTytBz7FAWoUgV2aTVPXaX-kfAuOLht6JlK6Rx_m9ll3c", "content": "", "creation_timestamp": "2025-03-07T22:00:06.000000Z"}, {"uuid": "756e7c13-b858-45d0-b681-5ab940e293d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25461", "type": "published-proof-of-concept", "source": "Telegram/aGNrSV-9NeeBFzX2dwLEQrlSrZfsD2D7Xlk63VRWRp7GCuw", "content": "", "creation_timestamp": "2025-02-26T10:00:06.000000Z"}, {"uuid": "cc7f7129-1d9d-4eec-b819-976afc7cb7b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25266", "type": "seen", "source": "Telegram/7ohonUKXJXc8nNP-FA_LzHo1dYyqTYbEicJy56ekdY_6IuU", "content": "", "creation_timestamp": "2025-03-11T11:35:12.000000Z"}, {"uuid": "9b20597c-a4fa-4fa6-b46a-b449b584a24d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25015", "type": "seen", "source": "Telegram/QAVdouikCx2b8SMXjdnrm0Qd0Ty2Vlju35JjnNW2-_1PhOo", "content": "", "creation_timestamp": "2025-03-05T12:00:27.000000Z"}, {"uuid": "2076d6d8-18fc-43c4-ad27-22cb2e91e469", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25369", "type": "published-proof-of-concept", "source": "Telegram/eal9Ra0ypGkEhYFNQI-UasMXMNQG9dqnJsA3nKGQdMfgq1c", "content": "", "creation_timestamp": "2025-02-26T16:00:08.000000Z"}, {"uuid": "fb712542-08b9-4f36-8846-25610cfd038b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25710", "type": "seen", "source": "Telegram/MveSXve5_Hx1iuO32dm7mrnWq9NYxtXsFLG2c04SagyG1F4", "content": "", "creation_timestamp": "2025-03-12T17:01:11.000000Z"}, {"uuid": "18fa8d52-2a7c-47f7-a5c7-d41994baa27a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25711", "type": "seen", "source": "Telegram/MveSXve5_Hx1iuO32dm7mrnWq9NYxtXsFLG2c04SagyG1F4", "content": "", "creation_timestamp": "2025-03-12T17:01:11.000000Z"}, {"uuid": "681fff22-f90c-43bc-b39f-929dc86bf3aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25872", "type": "published-proof-of-concept", "source": "Telegram/fyjZX1DQJqp7cgGIoapQDmFwfZmIieEA6Oc4BrHNu7TMDmQ", "content": "", "creation_timestamp": "2025-03-06T20:00:05.000000Z"}, {"uuid": "46a849e2-65c5-464b-9933-63c5f40a0c98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25163", "type": "published-proof-of-concept", "source": "Telegram/YpUVmWcZ23hjvrJUDNNP9w3g_USnJTIv8xyIqYZIoz5QgJ0", "content": "", "creation_timestamp": "2025-02-19T10:00:05.000000Z"}, {"uuid": "1375cae1-af5c-4411-96c8-cb545d988aaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25305", "type": "published-proof-of-concept", "source": "Telegram/2uxF_1qoFB3hlCxfLn3xIrN9O42tmrJDZ5kGfls8NVGPMqg", "content": "", "creation_timestamp": "2025-02-18T20:31:23.000000Z"}, {"uuid": "c3c671d7-e864-47ea-8442-65e4288630af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25282", "type": "published-proof-of-concept", "source": "Telegram/z-TEGJuLb-MI9QSBe5sQLLsDPvx9hpDxWNGhFcSyGduHviQ", "content": "", "creation_timestamp": "2025-02-21T23:31:55.000000Z"}, {"uuid": "9452e557-d2c3-45a3-942c-4023863bed85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25964", "type": "published-proof-of-concept", "source": "Telegram/01uiN9EgivkKxd6NbVHaT5JBriknOXStz8AUkJ_gyZbdyjk", "content": "", "creation_timestamp": "2025-02-15T22:00:05.000000Z"}, {"uuid": "e5ddc0ee-cb53-452f-9d83-89732789a98d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25965", "type": "published-proof-of-concept", "source": "Telegram/01uiN9EgivkKxd6NbVHaT5JBriknOXStz8AUkJ_gyZbdyjk", "content": "", "creation_timestamp": "2025-02-15T22:00:05.000000Z"}, {"uuid": "81e75cdf-84fe-4734-89a2-4c0b5cf8aede", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25064", "type": "published-proof-of-concept", "source": "Telegram/7E49vHU2s25U1RVXxjOvncvpdcj7eVYEF75smm769Cd7IQs", "content": "", "creation_timestamp": "2025-02-15T10:00:05.000000Z"}, {"uuid": "7061f16e-15d4-4e84-829e-3d42c07fe1ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25286", "type": "seen", "source": "Telegram/r090prh8PzjJEh682vcQnlDcJfJK4dwz44titdcQaapqPXQ", "content": "", "creation_timestamp": "2025-02-13T03:00:57.000000Z"}, {"uuid": "8800dad8-ccc4-419a-ba60-7bea0aa37399", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25163", "type": "published-proof-of-concept", "source": "Telegram/Ke7Qtx69srUNZs11KMyAFiA7I0NF0hlyPNgwpSWisFGTfjQ", "content": "", "creation_timestamp": "2025-02-18T16:00:09.000000Z"}, {"uuid": "3e82f93a-b55d-4f75-83c9-cc57a265e0dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2538", "type": "seen", "source": "Telegram/ovgSwv4DzH1i4cBEpy04O7HypJ1JWUd5CIOMvicaoyVyycE", "content": "", "creation_timestamp": "2025-03-20T22:30:49.000000Z"}, {"uuid": "b7bf459b-ce0b-47f4-baa0-64ee293b6f4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2505", "type": "published-proof-of-concept", "source": "Telegram/NQlvjHhG2-VIGa7A-fQOLEf1RIrC3ATUo7ji5TmFiVmJeeU", "content": "", "creation_timestamp": "2025-03-20T09:30:37.000000Z"}, {"uuid": "58278d4a-76c1-4cfb-b417-fee0e8cc6aa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2512", "type": "published-proof-of-concept", "source": "Telegram/L3aXwbrbFsHViBW2JDCnpt1f_z9-g7vFs3DtkdXAJJRqFyM", "content": "", "creation_timestamp": "2025-03-19T18:26:49.000000Z"}, {"uuid": "707f156c-b319-48a6-90d5-f608a86a8399", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25650", "type": "seen", "source": "Telegram/Dx7vZWH_LM_56yZN0c2ZxaqMC9NEHIV5QZXHh3bHlYxpHQ0", "content": "", "creation_timestamp": "2025-03-16T16:00:09.000000Z"}, {"uuid": "9860b265-e6db-42bb-bed4-d51acc0c1acd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25964", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/4258", "content": "#GitHub #Tools \n\nA critical SQL Injection vulnerability (CVE-2025-25964) discovered in the School Information Management System v1.0\n\nhttps://github.com/Sudo-Sakib/CVE-2025-25964\n\nThe AWS exploitation framework, designed for testing the security of Amazon Web Services environments.\n\nhttps://github.com/RhinoSecurityLabs/pacu\n\nPalo Alto Networks PAN-OS \u8eab\u4efd\u9a8c\u8bc1\u7ed5\u8fc7\u6f0f\u6d1e\u6279\u91cf\u68c0\u6d4b\u811a\u672c(CVE-2025-0108)\n\nhttps://github.com/iSee857/CVE-2025-0108-PoC\n\n#HackersFactory", "creation_timestamp": "2025-03-30T04:46:04.000000Z"}, {"uuid": "0df7c3bc-b6d4-4988-9bba-a041ea3770d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25012", "type": "seen", "source": "Telegram/hPz4Bpo7t_RM69B9OcPDorkwjyPwnagNutXVAI75W_I8H0k", "content": "", "creation_timestamp": "2025-03-08T00:37:33.000000Z"}, {"uuid": "4fa8e8ff-bcaf-4d3d-96bf-1b8dad72091f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2538", "type": "seen", "source": "https://t.me/true_secator/6889", "content": "\u041f\u043e\u0441\u043b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0435\u0439 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u041e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 ForumTroll \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0432\u0448\u0438\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Google 0-day \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Mozilla \u0442\u0430\u043a\u0436\u0435\u00a0\u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u00a0\u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u0430\u043c\u0435\u0442\u0438\u0432 \u0441\u0445\u043e\u0436\u0438\u0435 \u0437\u0430\u043a\u043e\u043d\u043e\u043c\u0435\u0440\u043d\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u0434\u0435 \u0441\u0432\u043e\u0435\u0433\u043e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0434\u043b\u044f Windows.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043f\u043e\u043c\u0438\u043c\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043a\u043e\u0434\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0442\u0440\u0443\u0434\u0438\u0442\u044c\u0441\u044f \u043d\u0430\u0434 \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u044f\u043c\u0438 \u043f\u043e \u0447\u0430\u0441\u0442\u0438 \u0431\u044e\u0434\u0436\u0435\u0442\u0430.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 Consumer Affairs, Mozilla \u043e\u0431\u0440\u0430\u0442\u0438\u043b\u0430\u0441\u044c \u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441 \u043f\u0440\u043e\u0441\u044c\u0431\u043e\u0439 \u043f\u043e\u0436\u0435\u0440\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u043d\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0443 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Firefox \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0443\u0442\u0440\u0430\u0442\u0438\u043b\u0430 \u0444\u0438\u043d\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 2,5 \u043c\u043b\u043d. \u0434\u043e\u043b\u043b. \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u0421\u0428\u0410 \u043f\u043e \u043b\u0438\u043d\u0438\u0438 USAID.\n\n\u0418 \u0434\u0435\u043b\u043e \u0434\u0430\u0436\u0435 \u043d\u0435 \u0442\u043e\u043c, \u0447\u0442\u043e 2,5 \u043c\u043b\u043d. \u0432 \u043e\u0431\u0449\u0435\u043c \u043c\u043d\u043e\u0433\u043e\u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043d\u043e\u043c \u0431\u044e\u0434\u0436\u0435\u0442\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 (653 \u043c\u043b\u043d. \u0434\u043e\u043b\u043b. \u0434\u043e\u0445\u043e\u0434\u0430 \u0432 2023 \u0433\u043e\u0434\u0443) - \u044d\u0442\u043e \u043a\u0430\u043a \u043a\u0430\u043f\u043b\u044f \u0432 \u043c\u043e\u0440\u0435, \u0431\u043e\u043b\u044c\u0448\u0435 \u0432\u043e\u043f\u0440\u043e\u0441\u043e\u0432 \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 \u0432\u0435\u0437\u0434\u0435\u0441\u0443\u0449\u0435\u0435 \u0443\u0447\u0430\u0441\u0442\u0438\u0435 \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0438\u0445 \u0441\u043f\u0435\u0446\u0441\u043b\u0443\u0436\u0431 \u0432 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0442\u0435\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043a\u043e\u043d\u0446\u0435\u043f\u0442\u0443\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u043f\u043e\u0434 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0438 \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u043e\u0441\u0442\u044c.\n\n\u0412\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u044f\u0441\u044c \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u043e\u0442\u043c\u0435\u0442\u0438\u043c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435:\n\n1. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Forescout \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 46 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0443 \u0442\u0440\u0435\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 \u0441\u043e\u043b\u043d\u0435\u0447\u043d\u044b\u0445 \u0438\u043d\u0432\u0435\u0440\u0442\u043e\u0440\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0442\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u0433\u0440\u043e\u0437\u0443 \u0434\u043b\u044f \u044d\u043b\u0435\u043a\u0442\u0440\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0435\u0442\u0435\u0439.\n\n\u0412\u0441\u0435 \u043e\u043d\u0438 \u043d\u0430\u0437\u0432\u0430\u043d\u044b\u00a0SUN:DOWN \u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438\u043b\u0438 \u0438\u0445 \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b.\n\n\u0421\u0440\u0435\u0434\u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 - Growatt, SMA \u0438 Sungrown.\n\nSMA\u00a0\u0438\u00a0Sungrow\u00a0\u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u0432\u0441\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432. Growatt \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043e\u0434\u043d\u0430\u043a\u043e \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043d\u0438\u0445 \u043f\u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044e \u043d\u0430 \u043a\u043e\u043d\u0435\u0446 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0438\u0441\u044c \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c\u0438.\n\n2. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 Esri \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u00a0\u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0441\u0432\u043e\u0435\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 ArcGIS.\n\nCVE-2025-2538 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u0438 \u0438\u043c\u0435\u0435\u0442 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 9,8/10.\n\n\u041f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 ArcGIS - \u044d\u0442\u043e \u0433\u0435\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0432\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0442\u043e\u043f\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f, \u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e \u0432 \u0433\u043e\u0441\u0441\u0435\u043a\u0442\u043e\u0440\u0435. \u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043e \u0431\u043e\u043b\u0435\u0435 1100 \u0441\u0438\u0441\u0442\u0435\u043c ArcGIS.\n\n3. \u041d\u0435\u0434\u0430\u0432\u043d\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u044b\u043b\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u044b \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 CrushFTP, \u043a\u043e\u0442\u043e\u0440\u044b\u0439, \u043a\u0430\u043a \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432 \u0441\u0444\u0435\u0440\u0435 \u043f\u0440\u0438\u0441\u0442\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432.\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 CrushFTP \u0437\u0430\u044f\u0432\u0438\u043b\u0438, \u0447\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0443, \u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u043c\u044f\u0433\u0447\u0430\u0435\u0442\u0441\u044f, \u0435\u0441\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u044f DMZ.\n\nCrushFTP 11.3.1+ \u0438 10.8.4+ \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b.\n\n\u0417\u0430\u043c\u0435\u0442\u0438\u0432, \u0447\u0442\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 CrushFTP \u0442\u0443\u043f\u044f\u0442 \u0438 \u043d\u0435 \u043d\u0430\u0437\u043d\u0430\u0447\u0430\u044e\u0442 CVE, VulnCheck \u0440\u0435\u0448\u0438\u043b\u0430 \u0432\u0437\u044f\u0442\u044c \u043d\u0430 \u0441\u0435\u0431\u044f \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0438\u00a0\u043f\u0440\u0438\u0441\u0432\u043e\u0438\u043b\u0430 \u0435\u0439 CVE-2025-2825.\n\n\u041d\u043e \u0433\u0435\u043d\u0434\u0438\u0440 CrushFTP \u043f\u043e\u0441\u0442\u0443\u043f\u043e\u043a \u043d\u0435 \u043e\u0446\u0435\u043d\u0438\u043b \u0438 \u043f\u0440\u0438\u0433\u0440\u043e\u0437\u0438\u043b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u0430\u043d\u043a\u0446\u0438\u044f\u043c\u0438, \u0435\u0441\u043b\u0438 \u043e\u043d\u0438 \u0434\u043e\u0431\u0440\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u043d\u0435 \u043e\u0442\u043a\u0430\u0442\u044f\u0442 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440.\u00a0\n\n4. \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043d\u043e\u0432\u043e\u043c\u0443 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044e Sonatype,\u00a0\u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 90 \u0434\u043d\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Apache Tomcat \u0432 \u0442\u0440\u0438 \u0440\u0430\u0437\u0430 \u0447\u0430\u0449\u0435, \u0447\u0435\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435.\n\n5. PoC\u00a0\u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u043b\u0430\u043a\u0430 IngressNightmare \u0442\u0435\u043f\u0435\u0440\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0434\u043b\u044f \u0448\u0438\u0440\u043e\u043a\u043e\u0439 \u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u0438. \u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0433\u043e\u0442\u043e\u0432\u0438\u0442\u044c\u0441\u044f.", "creation_timestamp": "2025-03-28T18:30:05.000000Z"}, {"uuid": "d1318cc8-8a8a-402d-8816-2ca50cbbf67e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://t.me/reverseame/5343", "content": "Should Security Solutions Be Secure? Maybe We're All Wrong - Fortinet FortiSIEM Pre-Auth Command Injection (CVE-2025-25256) #FortiSIEM #CommandInjection #CVE202525256 #PreAuth #SIEMCompromise https://labs.watchtowr.com/should-security-solutions-be-secure-maybe-were-all-wrong-fortinet-fortisiem-pre-auth-command-injection-cve-2025-25256/", "creation_timestamp": "2026-07-30T01:01:33.030102Z"}, {"uuid": "452a983e-beb1-43e5-946a-051d9d617f46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25037", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-31)", "content": "", "creation_timestamp": "2026-08-01T10:15:08.202662Z"}, {"uuid": "3b8102fc-298d-4943-bc74-edbdc7aed191", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2563", "type": "published-proof-of-concept", "source": "https://t.me/breachdetector/771061", "content": "{\n  \"Source\": \"https://htdark.com/index.php\",\n  \"Content\": \"Metasploit - Add Unauthenticated privesc for WP User Registration & Membership plugin (CVE-2025-2563)\", \n  \"author\": \" (dEEpEst)\",\n  \"Detection Date\": \"24 May 2025\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 t.me/breachdetector \ud83d\udd39", "creation_timestamp": "2025-05-24T10:28:08.000000Z"}, {"uuid": "010464a6-2404-4852-92b5-f4fe98cd18f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25181", "type": "seen", "source": "https://t.me/purp_sec/249", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u0434\u043b\u044f \u0432\u0430\u0441 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-57968 \u0438 CVE-2025-25181 \u2014 0day-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 VeraCore, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 XE Group. \u041f\u0435\u0440\u0432\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u043d\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0432 \u043d\u0435\u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u043f\u0430\u043f\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 upload.aspx. \u0412\u0442\u043e\u0440\u0430\u044f \u2014 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b SQL \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 PmSess1.\n\n\ud83d\udd35CVE-2025-24860 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Apache Cassandra, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0435\u0439. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0426\u041e\u0414 \u0438\u043b\u0438 \u0433\u0440\u0443\u043f\u043f\u0430\u043c IP/CIDR \u0447\u0435\u0440\u0435\u0437 CassandraNetworkAuthorizer \u0438\u043b\u0438 CassandraCIDRAuthorizer. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0426\u041e\u0414 \u043c\u043e\u0433\u0443\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e data control language (DCL) \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445.\n\n\ud83d\udd35CVE-2025-24964 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Cross-site WebSocket Hijacking (CSWSH) \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 API Vitest. \u041a\u043e\u0433\u0434\u0430 \u043e\u043f\u0446\u0438\u044f api \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430, Vitest \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0441\u0435\u0440\u0432\u0435\u0440 WebSocket \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u0432 Origin \u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430\u043c\u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f.\n\n\ud83d\udd35CVE-2025-20124 \u0438 CVE-2025-20125 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Cisco, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 API ISE. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043f\u043e\u0434 \u043f\u0440\u043e\u0444\u0438\u043b\u0435\u043c \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 read-only \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\ud83d\udd35CVE-2019-18935 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Progress Telerik UI \u0434\u043b\u044f ASP.NET AJAX, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445, \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0438 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:21.270976Z"}, {"uuid": "a4e24df4-c0f2-4475-921e-8068936a5b24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25064", "type": "seen", "source": "https://t.me/purp_sec/253", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\nCVE-2024-12754 \u2014 \u0430\u043d\u0430\u043b\u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 AnyDesk, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0441 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0432\u0441\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439. \u0417\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0447\u0442\u0435\u043d\u0438\u044f/\u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u043e\u0439 \u0441\u043b\u0443\u0436\u0431\u043e\u0439 AnyDesk \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 NT AUTHORITY\\SYSTEM.\n\nCVE-2025-25064 (SQLi) \u0438 CVE-2025-25065 (SSRF) \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Zimbra Collaboration, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438.\n\nCVE-2025-24786 (Path Traversal) \u0438 CVE-2025-24787 (Parameter Injection) \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 WhoDB, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445, \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u0438 \u0432\u0437\u043b\u043e\u043c\u0443 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\nCVE-2024-48510 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ABB Drive Composer. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043d\u0430 \u0445\u043e\u0441\u0442-\u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435 \u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434. \u0417\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u043a \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432, \u0438\u0437-\u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043c\u043e\u0436\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b Drive Composer.\n\nCVE-2025-0896 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Orthanc, DICOM-\u0441\u0435\u0440\u0432\u0435\u0440\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u0441\u0444\u0435\u0440\u0435 \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0430\u0437\u0430\u043c\u0438 \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u0438\u0445 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0439. \u041e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f. \u0422\u043e \u0435\u0441\u0442\u044c \u043b\u044e\u0431\u043e\u0439, \u0443 \u043a\u043e\u0433\u043e \u0435\u0441\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438 \u0441 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c \u043a \u043d\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c Orthanc, \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0438 \u0445\u0440\u0430\u043d\u044f\u0449\u0438\u043c\u0441\u044f \u043d\u0430 \u043d\u0435\u043c \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u0438\u043c \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f\u043c.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:21.443249Z"}, {"uuid": "55c56e46-c072-4bf3-ab0e-95c124c14285", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25065", "type": "seen", "source": "https://t.me/purp_sec/253", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\nCVE-2024-12754 \u2014 \u0430\u043d\u0430\u043b\u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 AnyDesk, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0441 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0432\u0441\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439. \u0417\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0447\u0442\u0435\u043d\u0438\u044f/\u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u043e\u0439 \u0441\u043b\u0443\u0436\u0431\u043e\u0439 AnyDesk \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 NT AUTHORITY\\SYSTEM.\n\nCVE-2025-25064 (SQLi) \u0438 CVE-2025-25065 (SSRF) \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Zimbra Collaboration, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438.\n\nCVE-2025-24786 (Path Traversal) \u0438 CVE-2025-24787 (Parameter Injection) \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 WhoDB, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445, \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u0438 \u0432\u0437\u043b\u043e\u043c\u0443 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\nCVE-2024-48510 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ABB Drive Composer. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043d\u0430 \u0445\u043e\u0441\u0442-\u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435 \u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434. \u0417\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u043a \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432, \u0438\u0437-\u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043c\u043e\u0436\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b Drive Composer.\n\nCVE-2025-0896 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Orthanc, DICOM-\u0441\u0435\u0440\u0432\u0435\u0440\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u0441\u0444\u0435\u0440\u0435 \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0430\u0437\u0430\u043c\u0438 \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u0438\u0445 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0439. \u041e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f. \u0422\u043e \u0435\u0441\u0442\u044c \u043b\u044e\u0431\u043e\u0439, \u0443 \u043a\u043e\u0433\u043e \u0435\u0441\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438 \u0441 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c \u043a \u043d\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c Orthanc, \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0438 \u0445\u0440\u0430\u043d\u044f\u0449\u0438\u043c\u0441\u044f \u043d\u0430 \u043d\u0435\u043c \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u0438\u043c \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f\u043c.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:21.512153Z"}, {"uuid": "5b316dd6-dcc0-407a-ab71-35669d81ae15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25364", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/5125", "content": "CVE-2025-25364: Speedify VPN MacOS privilege Escalation #CVE-2025-25364 #SpeedifyVPN #MacOS #PrivilegeEscalation #Patch https://blog.securelayer7.net/cve-2025-25364-speedify-vpn-macos-escalation/", "creation_timestamp": "2026-08-03T02:14:12.864926Z"}, {"uuid": "b547aee0-0d57-4caf-b286-7c427f67b7b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2572", "type": "exploited", "source": "https://t.me/jj_8tl/423", "content": "\u26a1\ufe0fThe vulnerability details are now available: https://t.co/MDgOUlaMPG\n\n\ud83d\udea8\ud83d\udea8CVE-2025-2572: WhatsUp Gold vuln exposes NmConfigurationManager.exe to unauthenticated database manipulation!  Attackers can tamper with WhatsUp.dbo.WrlsMacAddressGroup in versions < 2024.0.3. \n\nZoomEye Dork\ud83d\udc49app=\"WhatsUp Gold\"\n106k+ results are found on ZoomEye.\nZoomEye Link: https://t.co/LE0HrxYtKC\n\nRefer: https://t.co/qiLVEerqL8\n\n#ZoomEye #NetSecMapping #cybersecurity #CyberSpaceInsights2025\n\n\u2728 Shared via Awham AutoFeed \u2728\nChannel: @jj_8tl", "creation_timestamp": "2025-04-16T20:05:34.000000Z"}, {"uuid": "6eba99cb-b960-4f33-a647-2e9015e70eea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25227", "type": "exploited", "source": "https://t.me/jj_8tl/206", "content": "\u26a1\ufe0fThe vulnerability details are now available: https://t.co/l3fmrvL8hO\n\n\ud83d\udea8\ud83d\udea8Two Critical Vulnerabilities in Joomla\n CVE-2025-25226: SQL injection flaw in quoteNameStr. Mishandled identifiers could let attackers manipulate your database.\nCVE-2025-25227: MFA bypass alert! Hackers could slip past multi-factor authentication, unlocking sensitive accounts.  \n\nZoomEye Dork\ud83d\udc49app=\"Joomla\"\nReveals 127.9k+ potentially exposed sites.\nZoomEye Link: https://t.co/deNA8NE7Fj\n\nRefer: https://t.co/yImcvH3thZ\n\n#ZoomEye #NetSecMapping #cybersecurity #CyberSpaceInsights2025\n\n\u2728 Shared via Awham AutoFeed \u2728\nChannel: @jj_8tl", "creation_timestamp": "2025-04-11T12:07:56.000000Z"}, {"uuid": "096bf1b5-5833-419d-a721-517cc1dbf83a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25226", "type": "exploited", "source": "https://t.me/jj_8tl/206", "content": "\u26a1\ufe0fThe vulnerability details are now available: https://t.co/l3fmrvL8hO\n\n\ud83d\udea8\ud83d\udea8Two Critical Vulnerabilities in Joomla\n CVE-2025-25226: SQL injection flaw in quoteNameStr. Mishandled identifiers could let attackers manipulate your database.\nCVE-2025-25227: MFA bypass alert! Hackers could slip past multi-factor authentication, unlocking sensitive accounts.  \n\nZoomEye Dork\ud83d\udc49app=\"Joomla\"\nReveals 127.9k+ potentially exposed sites.\nZoomEye Link: https://t.co/deNA8NE7Fj\n\nRefer: https://t.co/yImcvH3thZ\n\n#ZoomEye #NetSecMapping #cybersecurity #CyberSpaceInsights2025\n\n\u2728 Shared via Awham AutoFeed \u2728\nChannel: @jj_8tl", "creation_timestamp": "2025-04-11T12:07:56.000000Z"}, {"uuid": "e85d171d-7a0b-4026-b1ff-14ed2048ae41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25064", "type": "seen", "source": "https://t.me/thehackernews/6311", "content": "Zimbra's latest patch addresses three new vulnerabilities:\n\n\u2022 SQL Injection (CVE-2025-25064) exposing email metadata to authenticated attackers.\n\u2022 XSS vulnerability in the Classic Web Client, risking user security.\n\u2022 SSRF flaw (CVE-2025-25065) allowing unauthorized redirection to internal systems.\n\nUpgrade ASAP to avoid potential exploitation and secure your systems.\n\nRead: https://thehackernews.com/2025/02/zimbra-releases-security-updates-for.html", "creation_timestamp": "2025-02-10T10:20:12.000000Z"}, {"uuid": "b7ff5a5c-dd99-433b-a80d-87783b75419d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25065", "type": "seen", "source": "https://t.me/thehackernews/6311", "content": "Zimbra's latest patch addresses three new vulnerabilities:\n\n\u2022 SQL Injection (CVE-2025-25064) exposing email metadata to authenticated attackers.\n\u2022 XSS vulnerability in the Classic Web Client, risking user security.\n\u2022 SSRF flaw (CVE-2025-25065) allowing unauthorized redirection to internal systems.\n\nUpgrade ASAP to avoid potential exploitation and secure your systems.\n\nRead: https://thehackernews.com/2025/02/zimbra-releases-security-updates-for.html", "creation_timestamp": "2025-02-10T10:20:12.000000Z"}, {"uuid": "1f220667-583a-4742-9a21-95346eb9052f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25012", "type": "seen", "source": "https://t.me/thehackernews/6449", "content": "Elastic has rolled out critical updates to fix a major flaw in Kibana (CVE-2025-25012), a prototype pollution vulnerability with a CVSS score of 9.9.\n\nThis issue affects Kibana versions 8.15.0 to 8.17.3, risking remote code execution.\n\nGet details here: https://thehackernews.com/2025/03/elastic-releases-urgent-fix-for.html", "creation_timestamp": "2025-03-06T14:03:49.000000Z"}, {"uuid": "ce457868-c17e-4657-8e69-79f793dda503", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25292", "type": "seen", "source": "https://t.me/thehackernews/6486", "content": "\ud83d\udd34 ruby-saml Flaws Open SAML Auth to Hijacking\n\nGitHub Security Lab found CVE-2025-25291 & CVE-2025-25292 (CVSS 8.8) in ruby-saml, allowing attackers to bypass authentication using a valid signature.\n\n\ud83d\udd17 Read: https://thehackernews.com/2025/03/github-uncovers-new-ruby-saml.html\n\n\ud83d\udd11 Update now or risk account takeover.", "creation_timestamp": "2025-03-13T13:34:43.000000Z"}, {"uuid": "1f5a34dd-0aaa-4aad-a60b-eee9edf77797", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "seen", "source": "https://t.me/thehackernews/6486", "content": "\ud83d\udd34 ruby-saml Flaws Open SAML Auth to Hijacking\n\nGitHub Security Lab found CVE-2025-25291 & CVE-2025-25292 (CVSS 8.8) in ruby-saml, allowing attackers to bypass authentication using a valid signature.\n\n\ud83d\udd17 Read: https://thehackernews.com/2025/03/github-uncovers-new-ruby-saml.html\n\n\ud83d\udd11 Update now or risk account takeover.", "creation_timestamp": "2025-03-13T13:34:43.000000Z"}, {"uuid": "93376473-be0a-4e84-94f9-8678b46878e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25163", "type": "seen", "source": "https://t.me/BugCod3/1017", "content": "WordPress A/B Image Optimizer 3.3 Plugin Arbitrary File Download Vulnerability \n\n\ud83d\udcca Category: web applications\n\n\ud83d\udcbb Platform: php\n\n\ud83e\ude96 Risk: Security Risk High \ud83d\udea8\n\n\ud83d\udcac\nWordPress Plugin A/B Image Optimizer plugin versions 3.3 and below suffers from an arbitrary file download vulnerability.\n\n\ud83d\udd25 CVE: CVE-2025-25163\n\n\u2b07\ufe0f Download\n\ud83d\udd12 BugCod3\n\n#CVE #Exploit #PHP #WordPress\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\ud83d\udc64 T.me/BugCod3BOT \n\ud83d\udce3 T.me/BugCod3", "creation_timestamp": "2025-03-05T01:03:14.000000Z"}, {"uuid": "346f9724-62cc-4427-ba04-cb1b5277e5b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25067", "type": "seen", "source": "https://t.me/purp_sec/285", "content": "\u0414\u0430\u0432\u043d\u043e \u043d\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041d\u043e \u044d\u0442\u043e \u0431\u044b\u043b\u043e \u043b\u0438\u0448\u044c \u0437\u0430\u0442\u0438\u0448\u044c\u0435 \u043f\u0435\u0440\u0435\u0434 \u0431\u0443\u0440\u0435\u0439, \u043d\u0435 \u0441\u0442\u043e\u0438\u0442 \u0440\u0430\u0441\u0441\u043b\u0430\u0431\u043b\u044f\u0442\u044c\u0441\u044f.\n\n\u0412\u043e\u0442 \u0432\u0430\u043c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-12425 \u0438 CVE-2024-12426 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 LibreOffice, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0444\u0430\u0439\u043b \u0432 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0442\u044c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0438\u0437 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434, \u043a\u0440\u0430\u0441\u0442\u044c \u043a\u0440\u0435\u0434\u0435\u043d\u0448\u0435\u043b\u044b \u0438 \u0444\u0430\u0439\u043b\u044b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35CVE-2025-25067, CVE-2025-22896, CVE-2025-23411, CVE-2025-24865 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 mySCADA, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c\u0443 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u043a\u0440\u0430\u0441\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043e\u0431\u043c\u0430\u043d\u043e\u043c \u0437\u0430\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u043e\u0441\u0435\u0449\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u044b.\n\n\ud83d\udd35CVE-2025-21589 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Juniper Networks: Session Smart Router, Session Smart Conductor \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 WAN Assurance.\n\n\ud83d\udd35CVE-2024-12562 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u043f\u043b\u0430\u0433\u0438\u043d\u0435 s2Member Pro \u0434\u043b\u044f WordPress. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 PHP-\u043e\u0431\u044a\u0435\u043a\u0442\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u0430\u0439\u0442\u044b.\n\n\ud83d\udd35CVE-2023-20198 \u0438 CVE-2023-20273 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Cisco IOS XE \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435. \u0412 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0438\u0437 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 RedMike/Salt Typhoon.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:22.349422Z"}, {"uuid": "b2777f05-82d6-4e2e-9316-4b839e546df8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/5282", "content": "FortiWeb Pre-Auth RCE (CVE-2025-25257) #FortiWeb #RCE #SQLi #CVE202525257 #PreAuth https://pwner.gg/blog/2025-07-10-fortiweb-fabric-rce", "creation_timestamp": "2026-08-03T03:21:10.758897Z"}, {"uuid": "ef27961b-ea6e-4b1e-a15b-219b1c22233d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25012", "type": "seen", "source": "https://t.me/CybNux/7714", "content": "\u0623\u0637\u0644\u0642\u062a Elastic \u062a\u062d\u062f\u064a\u062b\u0627\u062a \u0645\u0647\u0645\u0629 \u0644\u0625\u0635\u0644\u0627\u062d \u062e\u0644\u0644 \u0643\u0628\u064a\u0631 \u0641\u064a Kibana (CVE-2025-25012)\u060c \u0648\u0647\u064a \u062b\u063a\u0631\u0629 \u062a\u0644\u0648\u062b \u0646\u0645\u0648\u0630\u062c\u064a\u0629 \u0628\u062f\u0631\u062c\u0629 CVSS \u062a\u0628\u0644\u063a 9.9.\n\n\u062a\u0624\u062b\u0631 \u0647\u0630\u0647 \u0627\u0644\u0645\u0634\u0643\u0644\u0629 \u0639\u0644\u0649 \u0625\u0635\u062f\u0627\u0631\u0627\u062a Kibana \u0645\u0646 8.15.0 \u0625\u0644\u0649 8.17.3\u060c \u0645\u0645\u0627 \u064a\u0639\u0631\u0636 \u062a\u0646\u0641\u064a\u0630 \u0627\u0644\u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629 \u0639\u0646 \u0628\u0639\u062f \u0644\u0644\u062e\u0637\u0631.\n\n#\u0623\u062e\u0628\u0627\u0631", "creation_timestamp": "2025-03-07T00:24:54.000000Z"}, {"uuid": "1c0af452-1e41-4d9b-bae2-c3a288941042", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25279", "type": "seen", "source": "https://t.me/purp_sec/309", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-1128 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Everest Forms \u0434\u043b\u044f WordPress, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0430\u044f\u0441\u044f \u0432 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0442\u0438\u043f\u0430 \u0444\u0430\u0439\u043b\u0430 \u0438 \u043f\u0443\u0442\u0438 \u043a \u043d\u0435\u043c\u0443 \u0432 \u043c\u0435\u0442\u043e\u0434\u0435 format \u043a\u043b\u0430\u0441\u0441\u0430 EVF_Form_Fields_Upload. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u0441\u0430\u0439\u0442, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u0434, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0444\u0430\u0439\u043b\u044b, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 wp-config.php.\n\n\ud83d\udd35CVE-2017-3066 \u0438 CVE-2024-20953 \u2014 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Adobe ColdFusion \u0438 Oracle Agile PLM, \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0435 CISA \u043a\u0430\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a \u043d\u0438\u043c \u0432\u044b\u0448\u043b\u0438 \u0432 2017 \u0438 2024 \u0433\u043e\u0434\u0430\u0445 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e. \u041e\u0434\u043d\u0430\u043a\u043e, \u043a\u0430\u043a \u043c\u044b \u0437\u043d\u0430\u0435\u043c, \u043d\u0435\u0440\u0435\u0434\u043a\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u043d\u0435\u0431\u0440\u0435\u0433\u0430\u044e\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0442\u0430\u0440\u044b\u0435 CVE.\n\n\ud83d\udd35CVE-2023-20198 \u0438 CVE-2018-0171 \u2014 \u044f \u0443\u0436\u0435 \u043f\u0438\u0441\u0430\u043b \u043f\u0440\u043e \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Cisco IOS XE \u0432 \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0435 \u043e\u0442 18 \u0444\u0435\u0432\u0440\u0430\u043b\u044f. \u0421\u0442\u043e\u0438\u0442 \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u044c \u0438\u0445 \u0435\u0449\u0435 \u0440\u0430\u0437, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 GreyNoise \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b \u0441\u0432\u0435\u0436\u0438\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438. \n\n\ud83d\udd35CVE-2025\u201327364 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 MITRE Caldera, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0446\u0438\u0435\u0439 \u0430\u0433\u0435\u043d\u0442\u043e\u0432 \u0432 Caldera Manx \u0438 Sandcat. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440, \u0433\u0434\u0435 \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0430 Caldera.\n\n\ud83d\udd35CVE-2025-20051, CVE-2025-24490, CVE-2025-25279 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Mattermost, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c SQLi-\u0430\u0442\u0430\u043a\u0438, \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c. \u0417\u043d\u0430\u044e, \u0447\u0442\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u044d\u0442\u043e\u0442 \u043c\u0435\u0441\u0441\u0435\u043d\u0434\u0436\u0435\u0440, \u0442\u0430\u043a \u0447\u0442\u043e \u043d\u0430\u0441\u0442\u043e\u0439\u0447\u0438\u0432\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043b\u0430\u0433\u0438\u043d Mattermost Boards \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 9.0.5.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:23.924126Z"}, {"uuid": "41408d58-97d1-4528-aee0-bf9177b7507a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25218", "type": "seen", "source": "https://t.me/cvedetector/24569", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25218 - OpenHarmony NULL Pointer Dereference DOS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25218 \nPublished : May 6, 2025, 9:15 a.m. | 44\u00a0minutes ago \nDescription : in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference. \nSeverity: 3.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-06T12:48:17.000000Z"}, {"uuid": "b987c3d8-0435-4981-ad62-7981b8ec507d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2545", "type": "seen", "source": "https://t.me/cvedetector/24450", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2545 - \"Best Practical Solutions, LLC Request Tracker Triple DES Encryption Weakness\"\", \n  \"Content\": \"CVE ID : CVE-2025-2545 \nPublished : May 5, 2025, 12:15 p.m. | 1\u00a0hour, 9\u00a0minutes ago \nDescription : Vulnerability in Best Practical Solutions, LLC's Request Tracker v5.0.7, where the Triple DES (3DES) cryptographic algorithm is used within SMIME code to encrypt S/MIME emails. Triple DES is considered obsolete and insecure due to its susceptibility to birthday attacks, which could compromise the confidentiality of encrypted messages. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-05T15:52:37.000000Z"}, {"uuid": "379f878f-d78f-46eb-8d30-39927824ed2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2509", "type": "seen", "source": "https://t.me/cvedetector/24526", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2509 - ChromeOS Virglrenderer Out-of-Bounds Read VM Escape\", \n  \"Content\": \"CVE ID : CVE-2025-2509 \nPublished : May 6, 2025, 1:15 a.m. | 26\u00a0minutes ago \nDescription : Out-of-Bounds Read in Virglrenderer in ChromeOS  16093.57.0 allows a malicious guest VM to achieve arbitrary address access within the crosvm sandboxed process, potentially leading to   \nVM escape via crafted vertex elements data triggering an out-of-bounds read in util_format_description. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-06T04:26:10.000000Z"}, {"uuid": "9458fd8e-0e2c-434d-8623-d3c5741ba92b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25052", "type": "seen", "source": "https://t.me/cvedetector/24578", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25052 - OpenHarmony Buffer Overflow Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2025-25052 \nPublished : May 6, 2025, 9:15 a.m. | 44\u00a0minutes ago \nDescription : in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through buffer overflow. \nSeverity: 3.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-06T12:48:30.000000Z"}, {"uuid": "51806df5-ea8d-49cd-a10f-d282a2ce96e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25014", "type": "seen", "source": "https://t.me/cvedetector/24646", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25014 - Kibana Prototype Pollution Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2025-25014 \nPublished : May 6, 2025, 6:15 p.m. | 1\u00a0hour, 58\u00a0minutes ago \nDescription : A Prototype pollution vulnerability in Kibana leads to arbitrary code execution via crafted HTTP requests to machine learning and reporting endpoints. \nSeverity: 9.1 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-06T22:51:13.000000Z"}, {"uuid": "3fc7bf71-1f93-4773-b6ad-c19003a3599f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25964", "type": "published-proof-of-concept", "source": "https://t.me/haj3imad/912", "content": "https://github.com/Sudo-Sakib/CVE-2025-25964\n\nA critical SQL Injection vulnerability (CVE-2025-25964) discovered in the School Information Management System v1.0\n#github #poc", "creation_timestamp": "2025-02-19T05:21:41.000000Z"}, {"uuid": "2973d66e-b7d2-4e85-b31c-7b078e0cf17a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25015", "type": "seen", "source": "https://t.me/purp_sec/347", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-25015 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0430 prototype pollution \u0432 Elastic Kiban, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\n\ud83d\udd35CVE-2025-1393 \u2014 \u0431\u0430\u0433 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Weidm\u00fcller PROCON-WIN, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u0432 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0445 \u0432 \u043a\u043e\u0434 \u043a\u0440\u0435\u0434\u0435\u043d\u0448\u0435\u043b\u043e\u0432 (hard-coded credentials). \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0445 \u0445\u0430\u043a\u0435\u0440 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0430 \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435.\n\n\ud83d\udd35CVE-2025-27507 \u2014 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e IDOR (Insecure direct object references) \u0432 Admin API ZITADEL. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0431\u0435\u0437 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0440\u043e\u043b\u0435\u0439 IAM \u043c\u0435\u043d\u044f\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0437\u0430\u043f\u0438\u0441\u044f\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\ud83d\udd35CVE-2025-27218 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Sitecore Experience Platform (XP). \u0418\u0437-\u0437\u0430 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35CVE-2025-26776 \u2014 \u0431\u0430\u0433 \u0432 Chaty Pro, \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u043f\u043b\u0430\u0433\u0438\u043d\u0435 \u0434\u043b\u044f WordPress. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0438\u0445 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u0434\u0435, \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u0432\u0432\u043e\u0434. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0435\u0431-\u0441\u0430\u0439\u0442.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:25.988697Z"}, {"uuid": "4a7308a7-150e-4bd2-9a5c-6cb71768597c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/5343", "content": "Should Security Solutions Be Secure? Maybe We're All Wrong - Fortinet FortiSIEM Pre-Auth Command Injection (CVE-2025-25256) #FortiSIEM #CommandInjection #CVE202525256 #PreAuth #SIEMCompromise https://labs.watchtowr.com/should-security-solutions-be-secure-maybe-were-all-wrong-fortinet-fortisiem-pre-auth-command-injection-cve-2025-25256/", "creation_timestamp": "2026-08-02T00:00:08.433624Z"}, {"uuid": "88f407ba-acd5-41cc-bc56-868288f77ffd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-30)", "content": "", "creation_timestamp": "2026-07-31T10:15:12.363139Z"}, {"uuid": "4cf6f61b-4a11-4365-b81e-32ada797785d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25231", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-04)", "content": "", "creation_timestamp": "2026-05-04T00:00:00.000000Z"}, {"uuid": "88e11bfc-408e-41bc-b2a4-70de41e96205", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25015", "type": "seen", "source": "https://t.me/purp_sec/347", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-25015 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0430 prototype pollution \u0432 Elastic Kiban, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\n\ud83d\udd35CVE-2025-1393 \u2014 \u0431\u0430\u0433 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Weidm\u00fcller PROCON-WIN, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u0432 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0445 \u0432 \u043a\u043e\u0434 \u043a\u0440\u0435\u0434\u0435\u043d\u0448\u0435\u043b\u043e\u0432 (hard-coded credentials). \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0445 \u0445\u0430\u043a\u0435\u0440 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0430 \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435.\n\n\ud83d\udd35CVE-2025-27507 \u2014 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e IDOR (Insecure direct object references) \u0432 Admin API ZITADEL. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0431\u0435\u0437 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0440\u043e\u043b\u0435\u0439 IAM \u043c\u0435\u043d\u044f\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0437\u0430\u043f\u0438\u0441\u044f\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\ud83d\udd35CVE-2025-27218 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Sitecore Experience Platform (XP). \u0418\u0437-\u0437\u0430 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35CVE-2025-26776 \u2014 \u0431\u0430\u0433 \u0432 Chaty Pro, \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u043f\u043b\u0430\u0433\u0438\u043d\u0435 \u0434\u043b\u044f WordPress. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0438\u0445 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u0434\u0435, \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u0432\u0432\u043e\u0434. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0435\u0431-\u0441\u0430\u0439\u0442.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:08.980419Z"}, {"uuid": "9753eac2-d6cf-4016-ba1e-63be74fe5960", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/5282", "content": "FortiWeb Pre-Auth RCE (CVE-2025-25257) #FortiWeb #RCE #SQLi #CVE202525257 #PreAuth https://pwner.gg/blog/2025-07-10-fortiweb-fabric-rce", "creation_timestamp": "2026-08-02T01:00:03.905424Z"}, {"uuid": "ac75943b-dbfc-4094-99b7-7e8977fd2926", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://t.me/sysodmins/26291", "content": "\ud83c\udfb9 10/10 RCE \u0432 Cisco IOS: \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u043c \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-20337 (CVSS 10) \u0432 Cisco ISE \u0438 ISE-PIC. \u0414\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043e\u0434\u043d\u043e\u0433\u043e \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e API-\u0437\u0430\u043f\u0440\u043e\u0441\u0430, \u0447\u0442\u043e\u0431\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u043b \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c.\n\n\u041f\u043e\u0434 \u0443\u0434\u0430\u0440\u043e\u043c:\n\u2022 \u0412\u0435\u0440\u0441\u0438\u0438 ISE/ISE-PIC 3.3 \u0438 3.4 (\u0432\u043d\u0435 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438);\n\u2022 ISE 3.2 \u0438 \u043d\u0438\u0436\u0435 \u2014 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b.\n\n\u0420\u0435\u0448\u0435\u043d\u0438\u0435: \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c Patch 7 \u0434\u043b\u044f v3.3 \u0438\u043b\u0438 Patch 2 \u0434\u043b\u044f v3.4. \u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 \u043f\u043e\u043a\u0430 \u043d\u0435\u0442.\n\n\u042d\u0442\u043e \u0443\u0436\u0435 \u0432\u0442\u043e\u0440\u0430\u044f RCE-\u0434\u044b\u0440\u0430 \u0432 Cisco \u0437\u0430 \u043c\u0435\u0441\u044f\u0446 (\u043f\u043e\u0441\u043b\u0435 CVE-2025-20281). \u0422\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c FortiWeb (CVE-2025-25257) \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0442: 77+ \u0437\u0430\u0440\u0430\u0436\u0451\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b.\n\n\u0422\u0438\u043f\u0438\u0447\u043d\u044b\u0439 \ud83e\udd78 \u0421\u0438\u0441\u0430\u0434\u043c\u0438\u043d", "creation_timestamp": "2025-07-19T05:08:31.000000Z"}, {"uuid": "ba8e5925-b7d2-4edc-a4b6-5bd5a9e8fae3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://t.me/sysodmins/26243", "content": "\ud83c\udfb9 FortiWeb \u0432\u0437\u043b\u043e\u043c\u0430\u043d \u0438\u0437\u043d\u0443\u0442\u0440\u0438: SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f 9.6/10 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0438\u0441\u0430\u0442\u044c \u043a\u043e\u0434 \u0432 \u0411\u0414\n\n\u0412 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Fabric Connector (\u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u044f \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Fortinet) \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-25257 (9.6/10 CVSS). \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u043c\u043e\u0433:\n\u2192 \u0412\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0439 Bearer-\u0442\u043e\u043a\u0435\u043d \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0435 Authorization;\n\u2192 \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c SELECT... INTO OUTFILE \u0434\u043b\u044f \u0437\u0430\u043f\u0438\u0441\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0434\u0438\u0441\u043a;\n\u2192 \u0417\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 Python, \u043f\u043e\u043b\u0443\u0447\u0430\u044f \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 (\u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f mysql).\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438:\nFortiWeb 7.6.0\u20137.6.3, 7.4.0\u20137.4.7, 7.2.0\u20137.2.10, 7.0.0\u20137.0.10.\n\u0420\u0435\u0448\u0435\u043d\u0438\u0435: \u0421\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e 7.6.4, 7.4.8, 7.2.11 \u0438\u043b\u0438 7.0.11. \u0414\u043e \u043f\u0430\u0442\u0447\u0430 \u2014 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u044b HTTP/HTTPS.\n\n\u041a\u0430\u043a \u043f\u043e\u0447\u0438\u043d\u0438\u043b\u0438?\nFortinet \u0437\u0430\u043c\u0435\u043d\u0438\u043b\u0430 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0444\u043e\u0440\u043c\u0430\u0442\u043d\u044b\u0435 \u0441\u0442\u0440\u043e\u043a\u0438 \u043d\u0430 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u044f (prepared statements), \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u044e\u0449\u0438\u0435 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430\u0448\u0451\u043b \u041a\u0435\u043d\u0442\u0430\u0440\u043e \u041a\u0430\u0432\u0430\u043d\u0430 (GMO Cybersecurity) \u2014 \u044d\u043a\u0441\u043f\u0435\u0440\u0442 \u043f\u043e \u0432\u0437\u043b\u043e\u043c\u0443 Cisco.\n\n\u0422\u0438\u043f\u0438\u0447\u043d\u044b\u0439 \ud83e\udd78 \u0421\u0438\u0441\u0430\u0434\u043c\u0438\u043d", "creation_timestamp": "2025-07-15T01:39:56.000000Z"}, {"uuid": "478b4fe8-7964-4b36-9021-2e3949bdd4a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25364", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/5125", "content": "CVE-2025-25364: Speedify VPN MacOS privilege Escalation #CVE-2025-25364 #SpeedifyVPN #MacOS #PrivilegeEscalation #Patch https://blog.securelayer7.net/cve-2025-25364-speedify-vpn-macos-escalation/", "creation_timestamp": "2026-08-02T02:00:03.939100Z"}, {"uuid": "5998238a-45a5-4d39-a028-d24c536f9de3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25181", "type": "seen", "source": "https://t.me/purp_sec/363", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-12297 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 MOXA PT Switch, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0435\u0432\u043e\u043c\u0443 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044e. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd35CVE-2025-27509 \u2014 \u0431\u0430\u0433 \u0432 Fleet, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0430\u043c\u0438. \u041e\u0448\u0438\u0431\u043a\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 SAML-\u0442\u043e\u043a\u0435\u043d\u043e\u0432, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\ud83d\udd35CVE-2024-38311, CVE-2024-56195, CVE-2024-56196 \u0438 CVE-2024-5620 \u2014 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Apache Traffic Server \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043f\u0430\u0442\u0447, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0439 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c DoS-\u0430\u0442\u0430\u043a\u0438, \u043a\u0440\u0430\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0442\u0440\u0430\u0444\u0438\u043a\u043e\u043c.\n\n\ud83d\udd35CVE-2025-25181, CVE-2024-57968, CVE-2024-13159, CVE-2024-13160, CVE-2024-13161 \u2014 \u043f\u044f\u0442\u044c \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Advantive VeraCore \u0438 Ivanti Endpoint Manager \u043f\u043e\u043f\u0430\u043b\u0438 \u0432 \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0443 CISA \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\ud83d\udd35CVE-2025-27816 \u2014 Veritas \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Alta Recovery Vault, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c, \u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0435 \u043a\u043e\u043f\u0438\u0438. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0435 .NET.\n\n\ud83d\udd35CVE-2025\u201327636 \u2014 PoC \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Apache Camel. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Camel, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:06.756321Z"}, {"uuid": "a1a86d5b-de97-4617-bdb9-2714b79ed3b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25034", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-07)", "content": "", "creation_timestamp": "2026-05-07T00:00:00.000000Z"}, {"uuid": "74b8ed97-314c-4008-9230-09ea84ac0a5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25279", "type": "seen", "source": "https://t.me/purp_sec/309", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-1128 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Everest Forms \u0434\u043b\u044f WordPress, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0430\u044f\u0441\u044f \u0432 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0442\u0438\u043f\u0430 \u0444\u0430\u0439\u043b\u0430 \u0438 \u043f\u0443\u0442\u0438 \u043a \u043d\u0435\u043c\u0443 \u0432 \u043c\u0435\u0442\u043e\u0434\u0435 format \u043a\u043b\u0430\u0441\u0441\u0430 EVF_Form_Fields_Upload. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u0441\u0430\u0439\u0442, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u0434, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0444\u0430\u0439\u043b\u044b, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 wp-config.php.\n\n\ud83d\udd35CVE-2017-3066 \u0438 CVE-2024-20953 \u2014 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Adobe ColdFusion \u0438 Oracle Agile PLM, \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0435 CISA \u043a\u0430\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a \u043d\u0438\u043c \u0432\u044b\u0448\u043b\u0438 \u0432 2017 \u0438 2024 \u0433\u043e\u0434\u0430\u0445 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e. \u041e\u0434\u043d\u0430\u043a\u043e, \u043a\u0430\u043a \u043c\u044b \u0437\u043d\u0430\u0435\u043c, \u043d\u0435\u0440\u0435\u0434\u043a\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u043d\u0435\u0431\u0440\u0435\u0433\u0430\u044e\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0442\u0430\u0440\u044b\u0435 CVE.\n\n\ud83d\udd35CVE-2023-20198 \u0438 CVE-2018-0171 \u2014 \u044f \u0443\u0436\u0435 \u043f\u0438\u0441\u0430\u043b \u043f\u0440\u043e \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Cisco IOS XE \u0432 \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0435 \u043e\u0442 18 \u0444\u0435\u0432\u0440\u0430\u043b\u044f. \u0421\u0442\u043e\u0438\u0442 \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u044c \u0438\u0445 \u0435\u0449\u0435 \u0440\u0430\u0437, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 GreyNoise \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b \u0441\u0432\u0435\u0436\u0438\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438. \n\n\ud83d\udd35CVE-2025\u201327364 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 MITRE Caldera, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0446\u0438\u0435\u0439 \u0430\u0433\u0435\u043d\u0442\u043e\u0432 \u0432 Caldera Manx \u0438 Sandcat. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440, \u0433\u0434\u0435 \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0430 Caldera.\n\n\ud83d\udd35CVE-2025-20051, CVE-2025-24490, CVE-2025-25279 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Mattermost, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c SQLi-\u0430\u0442\u0430\u043a\u0438, \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c. \u0417\u043d\u0430\u044e, \u0447\u0442\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u044d\u0442\u043e\u0442 \u043c\u0435\u0441\u0441\u0435\u043d\u0434\u0436\u0435\u0440, \u0442\u0430\u043a \u0447\u0442\u043e \u043d\u0430\u0441\u0442\u043e\u0439\u0447\u0438\u0432\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043b\u0430\u0433\u0438\u043d Mattermost Boards \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 9.0.5.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:09.967523Z"}, {"uuid": "9e17a659-b8fb-487f-9a85-e3ed40fb7a6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25231", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-09)", "content": "", "creation_timestamp": "2026-05-09T00:00:00.000000Z"}, {"uuid": "4dea79de-0b10-470b-bfe8-529918f4ad39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25034", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-09)", "content": "", "creation_timestamp": "2026-05-09T00:00:00.000000Z"}, {"uuid": "0cea962a-54ba-484c-8e8f-b6f72071f14b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25067", "type": "seen", "source": "https://t.me/purp_sec/285", "content": "\u0414\u0430\u0432\u043d\u043e \u043d\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041d\u043e \u044d\u0442\u043e \u0431\u044b\u043b\u043e \u043b\u0438\u0448\u044c \u0437\u0430\u0442\u0438\u0448\u044c\u0435 \u043f\u0435\u0440\u0435\u0434 \u0431\u0443\u0440\u0435\u0439, \u043d\u0435 \u0441\u0442\u043e\u0438\u0442 \u0440\u0430\u0441\u0441\u043b\u0430\u0431\u043b\u044f\u0442\u044c\u0441\u044f.\n\n\u0412\u043e\u0442 \u0432\u0430\u043c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-12425 \u0438 CVE-2024-12426 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 LibreOffice, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0444\u0430\u0439\u043b \u0432 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0442\u044c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0438\u0437 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434, \u043a\u0440\u0430\u0441\u0442\u044c \u043a\u0440\u0435\u0434\u0435\u043d\u0448\u0435\u043b\u044b \u0438 \u0444\u0430\u0439\u043b\u044b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35CVE-2025-25067, CVE-2025-22896, CVE-2025-23411, CVE-2025-24865 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 mySCADA, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c\u0443 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u043a\u0440\u0430\u0441\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043e\u0431\u043c\u0430\u043d\u043e\u043c \u0437\u0430\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u043e\u0441\u0435\u0449\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u044b.\n\n\ud83d\udd35CVE-2025-21589 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Juniper Networks: Session Smart Router, Session Smart Conductor \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 WAN Assurance.\n\n\ud83d\udd35CVE-2024-12562 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u043f\u043b\u0430\u0433\u0438\u043d\u0435 s2Member Pro \u0434\u043b\u044f WordPress. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 PHP-\u043e\u0431\u044a\u0435\u043a\u0442\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u0430\u0439\u0442\u044b.\n\n\ud83d\udd35CVE-2023-20198 \u0438 CVE-2023-20273 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Cisco IOS XE \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435. \u0412 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0438\u0437 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 RedMike/Salt Typhoon.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:11.228934Z"}, {"uuid": "7537431c-522b-4145-81a4-dd449345699a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25065", "type": "seen", "source": "https://t.me/purp_sec/253", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\nCVE-2024-12754 \u2014 \u0430\u043d\u0430\u043b\u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 AnyDesk, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0441 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0432\u0441\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439. \u0417\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0447\u0442\u0435\u043d\u0438\u044f/\u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u043e\u0439 \u0441\u043b\u0443\u0436\u0431\u043e\u0439 AnyDesk \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 NT AUTHORITY\\SYSTEM.\n\nCVE-2025-25064 (SQLi) \u0438 CVE-2025-25065 (SSRF) \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Zimbra Collaboration, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438.\n\nCVE-2025-24786 (Path Traversal) \u0438 CVE-2025-24787 (Parameter Injection) \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 WhoDB, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445, \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u0438 \u0432\u0437\u043b\u043e\u043c\u0443 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\nCVE-2024-48510 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ABB Drive Composer. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043d\u0430 \u0445\u043e\u0441\u0442-\u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435 \u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434. \u0417\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u043a \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432, \u0438\u0437-\u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043c\u043e\u0436\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b Drive Composer.\n\nCVE-2025-0896 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Orthanc, DICOM-\u0441\u0435\u0440\u0432\u0435\u0440\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u0441\u0444\u0435\u0440\u0435 \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0430\u0437\u0430\u043c\u0438 \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u0438\u0445 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0439. \u041e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f. \u0422\u043e \u0435\u0441\u0442\u044c \u043b\u044e\u0431\u043e\u0439, \u0443 \u043a\u043e\u0433\u043e \u0435\u0441\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438 \u0441 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c \u043a \u043d\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c Orthanc, \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0438 \u0445\u0440\u0430\u043d\u044f\u0449\u0438\u043c\u0441\u044f \u043d\u0430 \u043d\u0435\u043c \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u0438\u043c \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f\u043c.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:13.056556Z"}, {"uuid": "aa9f97f1-d69f-4bc1-9818-a01bf8ed86b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25181", "type": "seen", "source": "https://t.me/purp_sec/249", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u0434\u043b\u044f \u0432\u0430\u0441 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-57968 \u0438 CVE-2025-25181 \u2014 0day-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 VeraCore, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 XE Group. \u041f\u0435\u0440\u0432\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u043d\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0432 \u043d\u0435\u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u043f\u0430\u043f\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 upload.aspx. \u0412\u0442\u043e\u0440\u0430\u044f \u2014 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b SQL \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 PmSess1.\n\n\ud83d\udd35CVE-2025-24860 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Apache Cassandra, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0435\u0439. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0426\u041e\u0414 \u0438\u043b\u0438 \u0433\u0440\u0443\u043f\u043f\u0430\u043c IP/CIDR \u0447\u0435\u0440\u0435\u0437 CassandraNetworkAuthorizer \u0438\u043b\u0438 CassandraCIDRAuthorizer. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0426\u041e\u0414 \u043c\u043e\u0433\u0443\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e data control language (DCL) \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445.\n\n\ud83d\udd35CVE-2025-24964 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Cross-site WebSocket Hijacking (CSWSH) \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 API Vitest. \u041a\u043e\u0433\u0434\u0430 \u043e\u043f\u0446\u0438\u044f api \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430, Vitest \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0441\u0435\u0440\u0432\u0435\u0440 WebSocket \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u0432 Origin \u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430\u043c\u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f.\n\n\ud83d\udd35CVE-2025-20124 \u0438 CVE-2025-20125 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Cisco, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 API ISE. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043f\u043e\u0434 \u043f\u0440\u043e\u0444\u0438\u043b\u0435\u043c \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 read-only \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\ud83d\udd35CVE-2019-18935 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Progress Telerik UI \u0434\u043b\u044f ASP.NET AJAX, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445, \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0438 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:13.222251Z"}, {"uuid": "71b9feec-7de5-4830-b9d2-2f93219465ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25181", "type": "seen", "source": "https://t.me/purp_sec/363", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-12297 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 MOXA PT Switch, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0435\u0432\u043e\u043c\u0443 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044e. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd35CVE-2025-27509 \u2014 \u0431\u0430\u0433 \u0432 Fleet, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0430\u043c\u0438. \u041e\u0448\u0438\u0431\u043a\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 SAML-\u0442\u043e\u043a\u0435\u043d\u043e\u0432, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\ud83d\udd35CVE-2024-38311, CVE-2024-56195, CVE-2024-56196 \u0438 CVE-2024-5620 \u2014 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Apache Traffic Server \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043f\u0430\u0442\u0447, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0439 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c DoS-\u0430\u0442\u0430\u043a\u0438, \u043a\u0440\u0430\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0442\u0440\u0430\u0444\u0438\u043a\u043e\u043c.\n\n\ud83d\udd35CVE-2025-25181, CVE-2024-57968, CVE-2024-13159, CVE-2024-13160, CVE-2024-13161 \u2014 \u043f\u044f\u0442\u044c \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Advantive VeraCore \u0438 Ivanti Endpoint Manager \u043f\u043e\u043f\u0430\u043b\u0438 \u0432 \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0443 CISA \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\ud83d\udd35CVE-2025-27816 \u2014 Veritas \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Alta Recovery Vault, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c, \u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0435 \u043a\u043e\u043f\u0438\u0438. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0435 .NET.\n\n\ud83d\udd35CVE-2025\u201327636 \u2014 PoC \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Apache Camel. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Camel, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:27.020458Z"}, {"uuid": "1b5e9ebc-ee5c-4c06-b6c0-4f6eccbb146e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "exploited", "source": "https://t.me/CyberDispatch/846", "content": "Attacker source AS12975 (PALTEL Autonomous System) \ud83c\uddf5\ud83c\uddf8\n\nVarious fabric endpoints are being exploited similar to CVE-2025-25257 (supplying malicious SQL code through authorization headers)", "creation_timestamp": "2026-08-31T00:00:23.372490Z"}, {"uuid": "10c14476-9328-494a-85fd-5c10c76bd5c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25034", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-10)", "content": "", "creation_timestamp": "2026-05-10T00:00:00.000000Z"}, {"uuid": "db38da4e-1c6a-4e0a-869f-79c66c294ac6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2595", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-132-03", "content": "View CSAF\n\nSummary\n\nABB became aware of severe vulnerability in the products versions listed as affected in the advisory. An update is available that resolves these vulnerabilities. An attacker who successfully exploited these vulnerabilities could bypass the user management and read visualization files (CVE-2025-2595), read and write certificates and keys (CVE-2025-41659) or cause a denial-of-service (DoS) (CVE-2025-41691).\n\nThe following versions of ABB AC500 V3 Multiple Vulnerabilities are affected:\n\n\n\nAC500 V3 <3.9.0, 3.9.0 \n\n<div class=\"csaf-table\">\n\n\n\n\nCVSS\nVendor\nEquipment\nVulnerabilities\n\n\n\n\nv3 8.3\nABB\nABB AC500 V3 Multiple Vulnerabilities\nDirect Request ('Forced Browsing'), Incorrect Permission Assignment for Critical Resource, NULL Pointer Dereference\n\n\n\n</div>\n\nBackground\n\n\n\nCritical Infrastructure Sectors: Chemical, Critical Manufacturing, Energy, Water and Wastewater\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: Switzerland\n\n\n\n\nVulnerabilities\n<div class=\"csaf-accordion\">\n\nExpand All +\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-2595\n<div class=\"csaf-accordion-content\">\n\nThe visualization allows users to create browser-based visualizations for monitoring and controlling industrial processes. Access to these visualizations can be restricted using the built-in user management. However, an unauthenticated remote attacker can bypass the user management and read visualization files by means of forced browsing. The exposed files, accessible via a web browser, contain only static visualization data such as text lists, icons or images, but no live data from the controlled system.\n\nView CVE Details\n\n\n\nAffected Products\n\nABB AC500 V3 Multiple Vulnerabilities\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:ABB</div>\n<div class=\"ics-version\">Product Version:ABB AC500 V3 <3.9.0</div>\n<div class=\"ics-status\">Product Status:fixed, known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixThe problem is corrected in the following product versions: - AC500 V3 firmware version 3.9.0 ABB recommends that customers apply the update at earliest convenience. This firmware version is released for all AC500 V3 PLC types and available from Automation Builder 2.9.0. Automation Builder 2.9.0 is available for download from the related download site. https://www.abb.com/global/en/areas/motion/digital-tools/automation-builder/software-download\n\nMitigationRefer to section \u201cGeneral security recommendations\u201d for further advise on how to keep your system secure.\n\nWorkaroundNo workarounds are available\n</div>\n\nRelevant CWE: CWE-425 Direct Request ('Forced Browsing')\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.3\nMEDIUM\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:F/RL:O/RC:C\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-41659\n<div class=\"csaf-accordion-content\">\n\nA vulnerability in the runtime system allows low-privileged remote attackers to access the PKI folder via CODESYS protocol, enabling them to read and write certificates and keys. This exposes sensitive cryptographic data and allows unauthorized certificates to be trusted. However, all services remain available, only certificate based encryption and signing features are concerned. The issue affects systems using the optional CmpOpenSSL component for cryptographic operations.\n\nView CVE Details\n\n\n\nAffected Products\n\nABB AC500 V3 Multiple Vulnerabilities\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:ABB</div>\n<div class=\"ics-version\">Product Version:ABB AC500 V3 <3.9.0</div>\n<div class=\"ics-status\">Product Status:fixed, known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixThe problem is corrected in the following product versions: - AC500 V3 firmware version 3.9.0 ABB recommends that customers apply the update at earliest convenience. This firmware version is released for all AC500 V3 PLC types and available from Automation Builder 2.9.0. Automation Builder 2.9.0 is available for download from the related download site. https://www.abb.com/global/en/areas/motion/digital-tools/automation-builder/software-download\n\nMitigationRefer to section \u201cGeneral security recommendations\u201d for further advise on how to keep your system secure.\n\nWorkaroundNo workarounds are available\n</div>\n\nRelevant CWE: CWE-732 Incorrect Permission Assignment for Critical Resource\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n8.3\nHIGH\nCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L/E:F/RL:O/RC:C\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-41691\n<div class=\"csaf-accordion-content\">\n\nA vulnerability in the runtime system's CmpDevice component allows unauthenticated attackers to cause a denial-of-service (DoS) via specially crafted communication requests. The issue is triggered by a NULL pointer dereference and also affects systems when outdated clients attempt to log in.\n\nView CVE Details\n\n\n\nAffected Products\n\nABB AC500 V3 Multiple Vulnerabilities\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:ABB</div>\n<div class=\"ics-version\">Product Version:ABB AC500 V3 <3.9.0</div>\n<div class=\"ics-status\">Product Status:fixed, known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixThe problem is corrected in the following product versions: - AC500 V3 firmware version 3.9.0 ABB recommends that customers apply the update at earliest convenience. This firmware version is released for all AC500 V3 PLC types and available from Automation Builder 2.9.0. Automation Builder 2.9.0 is available for download from the related download site. https://www.abb.com/global/en/areas/motion/digital-tools/automation-builder/software-download\n\nMitigationRefer to section \u201cGeneral security recommendations\u201d for further advise on how to keep your system secure.\n\nWorkaroundNo workarounds are available\n</div>\n\nRelevant CWE: CWE-476 NULL Pointer Dereference\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.5\nHIGH\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:F/RL:O/RC:C\n\n\n\n</div>\n</div>\n</div>\n</div>\n\n\n\nAcknowledgments\n\n\n\nABB PSIRT reported these vulnerabilities to CISA.\n\n\n\n\nNotice\n\nThe information in this document is subject to change without notice, and should not be construed as a commitment by ABB. ABB provides no warranty, express or implied, including warranties of merchantability and fitness for a particular purpose, for the information contained in this document, and assumes no responsibility for any errors that may appear in this document. In no event shall ABB or any of its suppliers be liable for direct, indirect, special, incidental or consequential damages of any nature or kind arising from the use of this document, or from the use of any hardware or software described in this document, even if ABB or its suppliers have been advised of the possibility of such damages. This document and parts hereof must not be reproduced or copied without written permission from ABB, and the contents hereof must not be imparted to a third party nor used for any unauthorized purpose. All rights to registrations and trademarks reside with their respective owners.\n\n\n\nFrequently Asked Questions\n\nWhat causes the vulnerability? - Refer to section \u201cVulnerability severity and details\u201c. What is AC500 V3? - The AC500 V3 is a scalable range of Programmable Logic Controller (PLC). It provides solutions for small, medium and high-end applications. The AC500 V3 platform offers different performance levels and is the ideal choice for high availability, extreme environments, condition monitoring, motion control or safety solutions. It offers interoperability and compatibility in hardware and software from compact PLCs up to high end and safety PLCs. What might an attacker use the vulnerability to do? - An attacker who successfully exploited these vulnerabilities could bypass the user management and read visualization files (CVE-2025-2595), read and write certificates and keys (CVE-2025-41659) or cause a denial-of-service (DoS) (CVE-2025-41691). How could an attacker exploit the vulnerability? - Refer to section \u201cVulnerability severity and details\u201c. Could the vulnerability be exploited remotely? - Yes, an attacker who has network access to an affected system node could exploit the vulnerabilities. Recommended practices include that process control systems are physically protected, have no direct connections to the Internet, and are separated from other networks by means of a firewall system that has a minimal number of ports exposed. When this security advisory was issued, had this vulnerability been publicly disclosed? - Yes, the vulnerabilities have been publicly disclosed. When this security advisory was issued, had ABB received any reports that this vulnerability was being exploited? - No, ABB had not received any information indicating that this vulnerability had been exploited when this security advisory was originally issued.\n\n\n\nLegal Notice and Terms of Use\n\nThis product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy & Use policy (https://www.cisa.gov/privacy-policy).\n\n\n\nRecommended Practices\n\nCISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.\n\nMinimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.\n\nLocate control system networks and remote devices behind firewalls and isolate them from business networks.\n\nWhen remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.\n\nCISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.\n\nCISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.\n\nCISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.\n\nOrganizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.\n\n\n\nAdvisory Conversion Disclaimer\n\nThis ICSA is a verbatim republication of ABB PSIRT 3ADR011524 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided \"as-is\" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact ABB PSIRT directly for any questions regarding this advisory.\n\nRevision History\n\n\n\nInitial Release Date: 2026-02-24\n\n\n\n\n\nDate\nRevision\nSummary\n\n\n\n\n2026-02-24\n1\nInitial version.\n\n\n2026-05-12\n2\nInitial CISA Republication of ABB PSIRT 3ADR011524 advisory\n\n\n\n\n\n\nLegal Notice and Terms of Use", "creation_timestamp": "2026-05-12T10:00:00.000000Z"}, {"uuid": "2e95040a-15ce-42e1-aed5-afe1c3caaddd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-13)", "content": "", "creation_timestamp": "2026-05-13T00:00:00.000000Z"}, {"uuid": "cbf5a6d0-9045-4b00-85cc-5195146619b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25064", "type": "seen", "source": "https://t.me/purp_sec/253", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\nCVE-2024-12754 \u2014 \u0430\u043d\u0430\u043b\u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 AnyDesk, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0441 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0432\u0441\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439. \u0417\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0447\u0442\u0435\u043d\u0438\u044f/\u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u043e\u0439 \u0441\u043b\u0443\u0436\u0431\u043e\u0439 AnyDesk \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 NT AUTHORITY\\SYSTEM.\n\nCVE-2025-25064 (SQLi) \u0438 CVE-2025-25065 (SSRF) \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Zimbra Collaboration, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438.\n\nCVE-2025-24786 (Path Traversal) \u0438 CVE-2025-24787 (Parameter Injection) \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 WhoDB, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445, \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u0438 \u0432\u0437\u043b\u043e\u043c\u0443 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\nCVE-2024-48510 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ABB Drive Composer. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043d\u0430 \u0445\u043e\u0441\u0442-\u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435 \u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434. \u0417\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u043a \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432, \u0438\u0437-\u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043c\u043e\u0436\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b Drive Composer.\n\nCVE-2025-0896 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Orthanc, DICOM-\u0441\u0435\u0440\u0432\u0435\u0440\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u0441\u0444\u0435\u0440\u0435 \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0430\u0437\u0430\u043c\u0438 \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u0438\u0445 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0439. \u041e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f. \u0422\u043e \u0435\u0441\u0442\u044c \u043b\u044e\u0431\u043e\u0439, \u0443 \u043a\u043e\u0433\u043e \u0435\u0441\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438 \u0441 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c \u043a \u043d\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c Orthanc, \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0438 \u0445\u0440\u0430\u043d\u044f\u0449\u0438\u043c\u0441\u044f \u043d\u0430 \u043d\u0435\u043c \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u0438\u043c \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f\u043c.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T14:00:12.962474Z"}, {"uuid": "0768bb95-e113-48ac-adc1-3417b478559e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-24)", "content": "", "creation_timestamp": "2026-05-24T00:00:00.000000Z"}, {"uuid": "cdf1a4ec-c22a-4136-8030-b39a8382edf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25015", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mmumpp52co26", "content": "CVE-2025-25015 - Prototype pollution in Elastic Kibana leads to arbitrary code execution via crafted file upload. CVSS 9.9. Viewer role exploit in older versions, elevated privileges needed in 8.17.1-8.17.2. Patch now. #CVE #Elastic #infosec\n\nhttps://www.valtersit.com/cve/CVE-2025-25015/", "creation_timestamp": "2026-05-27T23:07:01.706589Z"}, {"uuid": "3a8e3ef0-8773-461b-94fe-c97c533d8480", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-25290", "type": "published-proof-of-concept", "source": "https://github.com/octokit/request.js/security/advisories/GHSA-rmvr-2pp2-xj38", "content": "", "creation_timestamp": "2025-02-14T17:28:40.000000Z"}, {"uuid": "8f5d7093-668f-4ee8-a04d-3cf7f2fdf091", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-25186", "type": "published-proof-of-concept", "source": "https://github.com/ruby/net-imap/security/advisories/GHSA-7fc5-f82f-cx69", "content": "", "creation_timestamp": "2025-02-08T00:01:06.000000Z"}, {"uuid": "c984cff3-c15f-4ff7-a001-c62e0262832e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-25304", "type": "published-proof-of-concept", "source": "https://github.com/vega/vega/security/advisories/GHSA-mp7w-mhcv-673j", "content": "", "creation_timestamp": "2025-02-14T16:10:32.000000Z"}, {"uuid": "d695be26-64e0-4cc3-8da8-a1e73bae9c2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-25288", "type": "published-proof-of-concept", "source": "https://github.com/octokit/plugin-paginate-rest.js/security/advisories/GHSA-h5c3-5r3r-rr8q", "content": "", "creation_timestamp": "2025-02-14T17:27:30.000000Z"}, {"uuid": "f1937bd8-b62c-45d5-b3df-75b1357313c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-25194", "type": "published-proof-of-concept", "source": "https://github.com/LemmyNet/lemmy/security/advisories/GHSA-7723-35v7-qcxw", "content": "", "creation_timestamp": "2025-02-10T18:41:43.000000Z"}, {"uuid": "65b0a861-3e53-4182-8e5c-e7894323eaf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-25193", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-389x-839f-4rhx", "content": "", "creation_timestamp": "2025-02-10T18:14:47.000000Z"}, {"uuid": "d71ed33d-93e0-4120-b624-782712663ce4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-25305", "type": "published-proof-of-concept", "source": "https://github.com/home-assistant/core/security/advisories/GHSA-m3pm-rpgg-5wj6", "content": "", "creation_timestamp": "2025-02-18T15:20:00.000000Z"}, {"uuid": "da5acb86-7f12-45d0-ab89-62610c378f58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-25289", "type": "published-proof-of-concept", "source": "https://github.com/octokit/request-error.js/security/advisories/GHSA-xx4v-prfh-6cgc", "content": "", "creation_timestamp": "2025-02-14T17:24:35.000000Z"}, {"uuid": "9ff44d67-7ca4-4a7c-b397-5d0327149f9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25286", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mmw6spufid26", "content": "CVE-2025-25286 - Critical RCE in Islandora Crayfish/Homarus. CVSS 9.8. Exploits via /convert endpoint. Update to 4.1.0 or apply workarounds immediately. #CVE #infosec #Islandora\n\nhttps://www.valtersit.com/cve/CVE-2025-25286/", "creation_timestamp": "2026-05-28T14:03:30.606007Z"}, {"uuid": "a249848d-fb30-4572-8dda-13fe300daf57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25231", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-28)", "content": "", "creation_timestamp": "2026-05-28T00:00:00.000000Z"}, {"uuid": "247f0ee6-6fe3-4fda-a52b-619a1099feea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-28)", "content": "", "creation_timestamp": "2026-05-28T00:00:00.000000Z"}, {"uuid": "1a5d4ad8-ef9f-4b8e-8c43-20bddfadb9a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-11)", "content": "", "creation_timestamp": "2026-08-12T10:15:11.123420Z"}, {"uuid": "ff4c05ea-bd29-455b-896d-c3c19cd1899a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25034", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-01)", "content": "", "creation_timestamp": "2026-06-01T00:00:00.000000Z"}, {"uuid": "5a6aeb55-3d6a-4b63-a789-461f61255dce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25050", "type": "seen", "source": "https://t.me/purp_sec/1013", "content": "\ud83d\udd12 \u0412 \u0447\u0438\u043f\u0430\u0445 Broadcom \u0441\u0435\u0440\u0438\u0438 BCM5820X \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043f\u044f\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\n\n\u0411\u0430\u0433\u0438 \u043a\u0440\u043e\u044e\u0442\u0441\u044f \u0432 \u043c\u043e\u0434\u0443\u043b\u044f\u0445 ControlVault 3, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0438\u0445 \u0437\u0430 \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0431\u0438\u043e\u043c\u0435\u0442\u0440\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435: CVE-2025-24311, CVE-2025-25215, CVE-2025-24922, CVE-2025-25050 \u0438 CVE-2025-24919. \u041e\u043d\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435, \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0442\u044c \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0435 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u044b \u0438 \u0434\u0430\u0436\u0435 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u0439 \u0431\u0435\u043a\u0434\u043e\u0440 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0438 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u0438 Dell \u0441 \u0447\u0438\u043f\u0430\u043c\u0438 Broadcom - \u0431\u043e\u043b\u0435\u0435 100 \u043c\u043e\u0434\u0435\u043b\u0435\u0439, \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0438\u0437 \u0441\u0435\u0440\u0438\u0439 Latitude \u0438 Precision. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043d\u0435 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u043d\u0438 \u043e\u0434\u043d\u043e\u0433\u043e \u0441\u043b\u0443\u0447\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 in-the-wild.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u043c\u043e\u0434\u0443\u043b\u044f. \u0415\u0441\u043b\u0438 \u043f\u043e \u043a\u0430\u043a\u0438\u043c-\u043b\u0438\u0431\u043e \u043f\u0440\u0438\u0447\u0438\u043d\u0430\u043c \u044d\u0442\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u043b\u0443\u0447\u0448\u0435 \u0435\u0433\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c.\n\n\ud83d\udd17 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435.\n\n#blue_team #Broadcom", "creation_timestamp": "2026-08-14T16:00:09.690168Z"}, {"uuid": "793e8a8c-3683-4df1-a4cd-bfe9e3f51e6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25215", "type": "seen", "source": "https://t.me/purp_sec/1013", "content": "\ud83d\udd12 \u0412 \u0447\u0438\u043f\u0430\u0445 Broadcom \u0441\u0435\u0440\u0438\u0438 BCM5820X \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043f\u044f\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\n\n\u0411\u0430\u0433\u0438 \u043a\u0440\u043e\u044e\u0442\u0441\u044f \u0432 \u043c\u043e\u0434\u0443\u043b\u044f\u0445 ControlVault 3, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0438\u0445 \u0437\u0430 \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0431\u0438\u043e\u043c\u0435\u0442\u0440\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435: CVE-2025-24311, CVE-2025-25215, CVE-2025-24922, CVE-2025-25050 \u0438 CVE-2025-24919. \u041e\u043d\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435, \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0442\u044c \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0435 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u044b \u0438 \u0434\u0430\u0436\u0435 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u0439 \u0431\u0435\u043a\u0434\u043e\u0440 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0438 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u0438 Dell \u0441 \u0447\u0438\u043f\u0430\u043c\u0438 Broadcom - \u0431\u043e\u043b\u0435\u0435 100 \u043c\u043e\u0434\u0435\u043b\u0435\u0439, \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0438\u0437 \u0441\u0435\u0440\u0438\u0439 Latitude \u0438 Precision. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043d\u0435 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u043d\u0438 \u043e\u0434\u043d\u043e\u0433\u043e \u0441\u043b\u0443\u0447\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 in-the-wild.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u043c\u043e\u0434\u0443\u043b\u044f. \u0415\u0441\u043b\u0438 \u043f\u043e \u043a\u0430\u043a\u0438\u043c-\u043b\u0438\u0431\u043e \u043f\u0440\u0438\u0447\u0438\u043d\u0430\u043c \u044d\u0442\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u043b\u0443\u0447\u0448\u0435 \u0435\u0433\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c.\n\n\ud83d\udd17 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435.\n\n#blue_team #Broadcom", "creation_timestamp": "2026-08-14T16:00:09.530573Z"}, {"uuid": "ce0ee8c2-cf37-427f-8a59-03b0531625c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25269", "type": "seen", "source": "https://t.me/purp_sec/880", "content": "\ud83d\udd12 \u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-32023 (RCE) \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0421\u0423\u0411\u0414 Redis. \u0412\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u043c\u0430\u0441\u0441\u0438\u0432\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 PFADD, PFCOUNT \u0438 PFMERGE \u0432 HyperLogLog (HLL). \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0432 Redis \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e \u0441\u0442\u0440\u043e\u043a\u0443, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u043a\u0443\u0447\u0435 \u0438\u043b\u0438 \u0441\u0442\u0435\u043a\u0435. \n\n\ud83d\udd35 CVE-2025\u201324477 \u2014 \u0431\u0430\u0433 \u0432 FortiOS. \u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 heap-based buffer overflow \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 cw_stad, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u0430 \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 FortiWiFi-\u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0430, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u043f\u043e \u0441\u0435\u0442\u0438.\n\n\ud83d\udd35 CVE-2025-25271, CVE-2025-25270, CVE-2025-25269 \u0438 CVE-2025-25268 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430\u0445 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u0437\u0430\u0440\u044f\u0434\u043e\u043a Phoenix\u202fContact (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, CHARX\u202fSEC\u20113100), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f. \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u0437\u0430\u0440\u044f\u0434\u043d\u044b\u0445 \u0441\u0442\u0430\u043d\u0446\u0438\u0439, \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u043b\u0438 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b EV\u2011\u0441\u0435\u0442\u0438.\n\n\ud83d\udd35 CVE-2025-25257 \u2014 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f \u0432 \u0432\u0435\u0431\u2011GUI FortiGate. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c SQL\u2011\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044f \u0432\u0445\u043e\u0434 \u043a \u0431\u0430\u0437\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c. \u041c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445, \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u0437\u0430\u043f\u0443\u0441\u043a\u0443 \u0432\u0442\u043e\u0440\u0438\u0447\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0432 \u0441\u0432\u044f\u0437\u043a\u0435 \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438.\n\n\ud83d\udd35 CVE-2025-1729 \u2014 \u0431\u0430\u0433 \u0432 \u041f\u041e Lenovo ThinkPad P1 Gen7. \u0418\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b TPQMAssistant.exe, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u044b\u0439 \u043f\u0440\u0438 \u0432\u0445\u043e\u0434\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442\u0441\u044f \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 DLL, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043c\u0435\u0449\u0430\u0435\u0442 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u0443\u044e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 \u0440\u044f\u0434\u043e\u043c \u0441 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u043c \u0444\u0430\u0439\u043b\u043e\u043c \u0438 \u043f\u0440\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0441 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438.\n\n#CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:10.149056Z"}, {"uuid": "f85bf879-e786-47fc-a5ec-c800767f1c49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25268", "type": "seen", "source": "https://t.me/purp_sec/880", "content": "\ud83d\udd12 \u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-32023 (RCE) \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0421\u0423\u0411\u0414 Redis. \u0412\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u043c\u0430\u0441\u0441\u0438\u0432\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 PFADD, PFCOUNT \u0438 PFMERGE \u0432 HyperLogLog (HLL). \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0432 Redis \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e \u0441\u0442\u0440\u043e\u043a\u0443, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u043a\u0443\u0447\u0435 \u0438\u043b\u0438 \u0441\u0442\u0435\u043a\u0435. \n\n\ud83d\udd35 CVE-2025\u201324477 \u2014 \u0431\u0430\u0433 \u0432 FortiOS. \u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 heap-based buffer overflow \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 cw_stad, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u0430 \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 FortiWiFi-\u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0430, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u043f\u043e \u0441\u0435\u0442\u0438.\n\n\ud83d\udd35 CVE-2025-25271, CVE-2025-25270, CVE-2025-25269 \u0438 CVE-2025-25268 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430\u0445 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u0437\u0430\u0440\u044f\u0434\u043e\u043a Phoenix\u202fContact (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, CHARX\u202fSEC\u20113100), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f. \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u0437\u0430\u0440\u044f\u0434\u043d\u044b\u0445 \u0441\u0442\u0430\u043d\u0446\u0438\u0439, \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u043b\u0438 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b EV\u2011\u0441\u0435\u0442\u0438.\n\n\ud83d\udd35 CVE-2025-25257 \u2014 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f \u0432 \u0432\u0435\u0431\u2011GUI FortiGate. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c SQL\u2011\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044f \u0432\u0445\u043e\u0434 \u043a \u0431\u0430\u0437\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c. \u041c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445, \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u0437\u0430\u043f\u0443\u0441\u043a\u0443 \u0432\u0442\u043e\u0440\u0438\u0447\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0432 \u0441\u0432\u044f\u0437\u043a\u0435 \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438.\n\n\ud83d\udd35 CVE-2025-1729 \u2014 \u0431\u0430\u0433 \u0432 \u041f\u041e Lenovo ThinkPad P1 Gen7. \u0418\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b TPQMAssistant.exe, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u044b\u0439 \u043f\u0440\u0438 \u0432\u0445\u043e\u0434\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442\u0441\u044f \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 DLL, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043c\u0435\u0449\u0430\u0435\u0442 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u0443\u044e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 \u0440\u044f\u0434\u043e\u043c \u0441 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u043c \u0444\u0430\u0439\u043b\u043e\u043c \u0438 \u043f\u0440\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0441 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438.\n\n#CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:10.186844Z"}, {"uuid": "e6c7a1fc-ed89-4e4a-9056-161eda5907cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://t.me/purp_sec/880", "content": "\ud83d\udd12 \u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-32023 (RCE) \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0421\u0423\u0411\u0414 Redis. \u0412\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u043c\u0430\u0441\u0441\u0438\u0432\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 PFADD, PFCOUNT \u0438 PFMERGE \u0432 HyperLogLog (HLL). \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0432 Redis \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e \u0441\u0442\u0440\u043e\u043a\u0443, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u043a\u0443\u0447\u0435 \u0438\u043b\u0438 \u0441\u0442\u0435\u043a\u0435. \n\n\ud83d\udd35 CVE-2025\u201324477 \u2014 \u0431\u0430\u0433 \u0432 FortiOS. \u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 heap-based buffer overflow \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 cw_stad, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u0430 \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 FortiWiFi-\u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0430, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u043f\u043e \u0441\u0435\u0442\u0438.\n\n\ud83d\udd35 CVE-2025-25271, CVE-2025-25270, CVE-2025-25269 \u0438 CVE-2025-25268 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430\u0445 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u0437\u0430\u0440\u044f\u0434\u043e\u043a Phoenix\u202fContact (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, CHARX\u202fSEC\u20113100), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f. \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u0437\u0430\u0440\u044f\u0434\u043d\u044b\u0445 \u0441\u0442\u0430\u043d\u0446\u0438\u0439, \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u043b\u0438 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b EV\u2011\u0441\u0435\u0442\u0438.\n\n\ud83d\udd35 CVE-2025-25257 \u2014 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f \u0432 \u0432\u0435\u0431\u2011GUI FortiGate. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c SQL\u2011\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044f \u0432\u0445\u043e\u0434 \u043a \u0431\u0430\u0437\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c. \u041c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445, \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u0437\u0430\u043f\u0443\u0441\u043a\u0443 \u0432\u0442\u043e\u0440\u0438\u0447\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0432 \u0441\u0432\u044f\u0437\u043a\u0435 \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438.\n\n\ud83d\udd35 CVE-2025-1729 \u2014 \u0431\u0430\u0433 \u0432 \u041f\u041e Lenovo ThinkPad P1 Gen7. \u0418\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b TPQMAssistant.exe, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u044b\u0439 \u043f\u0440\u0438 \u0432\u0445\u043e\u0434\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442\u0441\u044f \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 DLL, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043c\u0435\u0449\u0430\u0435\u0442 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u0443\u044e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 \u0440\u044f\u0434\u043e\u043c \u0441 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u043c \u0444\u0430\u0439\u043b\u043e\u043c \u0438 \u043f\u0440\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0441 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438.\n\n#CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:10.262160Z"}, {"uuid": "6563420d-6818-4156-b475-f96a6f6e5a5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25270", "type": "seen", "source": "https://t.me/purp_sec/880", "content": "\ud83d\udd12 \u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-32023 (RCE) \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0421\u0423\u0411\u0414 Redis. \u0412\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u043c\u0430\u0441\u0441\u0438\u0432\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 PFADD, PFCOUNT \u0438 PFMERGE \u0432 HyperLogLog (HLL). \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0432 Redis \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e \u0441\u0442\u0440\u043e\u043a\u0443, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u043a\u0443\u0447\u0435 \u0438\u043b\u0438 \u0441\u0442\u0435\u043a\u0435. \n\n\ud83d\udd35 CVE-2025\u201324477 \u2014 \u0431\u0430\u0433 \u0432 FortiOS. \u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 heap-based buffer overflow \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 cw_stad, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u0430 \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 FortiWiFi-\u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0430, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u043f\u043e \u0441\u0435\u0442\u0438.\n\n\ud83d\udd35 CVE-2025-25271, CVE-2025-25270, CVE-2025-25269 \u0438 CVE-2025-25268 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430\u0445 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u0437\u0430\u0440\u044f\u0434\u043e\u043a Phoenix\u202fContact (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, CHARX\u202fSEC\u20113100), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f. \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u0437\u0430\u0440\u044f\u0434\u043d\u044b\u0445 \u0441\u0442\u0430\u043d\u0446\u0438\u0439, \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u043b\u0438 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b EV\u2011\u0441\u0435\u0442\u0438.\n\n\ud83d\udd35 CVE-2025-25257 \u2014 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f \u0432 \u0432\u0435\u0431\u2011GUI FortiGate. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c SQL\u2011\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044f \u0432\u0445\u043e\u0434 \u043a \u0431\u0430\u0437\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c. \u041c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445, \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u0437\u0430\u043f\u0443\u0441\u043a\u0443 \u0432\u0442\u043e\u0440\u0438\u0447\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0432 \u0441\u0432\u044f\u0437\u043a\u0435 \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438.\n\n\ud83d\udd35 CVE-2025-1729 \u2014 \u0431\u0430\u0433 \u0432 \u041f\u041e Lenovo ThinkPad P1 Gen7. \u0418\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b TPQMAssistant.exe, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u044b\u0439 \u043f\u0440\u0438 \u0432\u0445\u043e\u0434\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442\u0441\u044f \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 DLL, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043c\u0435\u0449\u0430\u0435\u0442 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u0443\u044e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 \u0440\u044f\u0434\u043e\u043c \u0441 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u043c \u0444\u0430\u0439\u043b\u043e\u043c \u0438 \u043f\u0440\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0441 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438.\n\n#CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:10.299806Z"}, {"uuid": "60bf9c63-6faa-4fa4-8085-7632ea95283a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25271", "type": "seen", "source": "https://t.me/purp_sec/880", "content": "\ud83d\udd12 \u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-32023 (RCE) \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0421\u0423\u0411\u0414 Redis. \u0412\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u043c\u0430\u0441\u0441\u0438\u0432\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 PFADD, PFCOUNT \u0438 PFMERGE \u0432 HyperLogLog (HLL). \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0432 Redis \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e \u0441\u0442\u0440\u043e\u043a\u0443, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u043a\u0443\u0447\u0435 \u0438\u043b\u0438 \u0441\u0442\u0435\u043a\u0435. \n\n\ud83d\udd35 CVE-2025\u201324477 \u2014 \u0431\u0430\u0433 \u0432 FortiOS. \u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 heap-based buffer overflow \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 cw_stad, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u0430 \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 FortiWiFi-\u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0430, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u043f\u043e \u0441\u0435\u0442\u0438.\n\n\ud83d\udd35 CVE-2025-25271, CVE-2025-25270, CVE-2025-25269 \u0438 CVE-2025-25268 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430\u0445 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u0437\u0430\u0440\u044f\u0434\u043e\u043a Phoenix\u202fContact (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, CHARX\u202fSEC\u20113100), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f. \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u0437\u0430\u0440\u044f\u0434\u043d\u044b\u0445 \u0441\u0442\u0430\u043d\u0446\u0438\u0439, \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u043b\u0438 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b EV\u2011\u0441\u0435\u0442\u0438.\n\n\ud83d\udd35 CVE-2025-25257 \u2014 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f \u0432 \u0432\u0435\u0431\u2011GUI FortiGate. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c SQL\u2011\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044f \u0432\u0445\u043e\u0434 \u043a \u0431\u0430\u0437\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c. \u041c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445, \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u0437\u0430\u043f\u0443\u0441\u043a\u0443 \u0432\u0442\u043e\u0440\u0438\u0447\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0432 \u0441\u0432\u044f\u0437\u043a\u0435 \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438.\n\n\ud83d\udd35 CVE-2025-1729 \u2014 \u0431\u0430\u0433 \u0432 \u041f\u041e Lenovo ThinkPad P1 Gen7. \u0418\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b TPQMAssistant.exe, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u044b\u0439 \u043f\u0440\u0438 \u0432\u0445\u043e\u0434\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442\u0441\u044f \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 DLL, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043c\u0435\u0449\u0430\u0435\u0442 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u0443\u044e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 \u0440\u044f\u0434\u043e\u043c \u0441 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u043c \u0444\u0430\u0439\u043b\u043e\u043c \u0438 \u043f\u0440\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0441 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438.\n\n#CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:10.482844Z"}, {"uuid": "2b7d906f-a7ce-4882-af2f-bd0c251155de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2567", "type": "seen", "source": "https://t.me/purp_sec/614", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-47188 (Command Injection) \u0438 CVE-2025-47187 \u2014 \u0434\u0432\u0435 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Mitel SIP \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0430\u0445, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043c\u043e\u0434\u0435\u043b\u044f\u0445 \u0434\u043b\u044f \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446-\u0441\u0432\u044f\u0437\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u0440\u0430\u0431\u043e\u0442\u044b \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\ud83d\udd35 CVE-2024-26809 \u2014 \u0431\u0430\u0433 \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 nftables \u044f\u0434\u0440\u0430 Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f root) \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u044f\u0434\u0440\u0430.\n\n\ud83d\udd35 CVE-2025-24797 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Meshtastic, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35 CVE-2025-28137 \u2014 \u0431\u0430\u0433 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430 TOTOLINK A810R, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0410\u0442\u0430\u043a\u0430 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 NoticeUrl \u0444\u0443\u043d\u043a\u0446\u0438\u0438 setNoticeCfg, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u041e\u0421.\n\n\ud83d\udd35 CVE-2025-1782 \u2014 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 HylaFAX Enterprise \u0438 AvantFAX. \u0412\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 language \u0432 \u0444\u043e\u0440\u043c\u0430\u0445, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\ud83d\udd35 CVE-2025-2567 \u2014 \u0431\u0430\u0433 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Lantronix, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0431\u0435\u0437 \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:16.506679Z"}, {"uuid": "535ea6c8-0dc4-4347-8792-ac281092c47c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2558", "type": "seen", "source": "https://t.me/purp_sec/564", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2024-33452 \u2014  \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 HTTP Request Smuggling \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 lua-nginx-module \u0432 OpenResty. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0441 \u043c\u0435\u0442\u043e\u0434\u043e\u043c HEAD, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0442\u0435\u043b\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430. \u0412 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438\u0433\u043d\u043e\u0440\u0438\u0440\u0443\u044e\u0442 \u0442\u0435\u043b\u043e \u0442\u0430\u043a\u0438\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, lua-nginx-module \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u0442 \u0435\u0433\u043e \u043a\u0430\u043a \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043c\u0435\u0436\u0434\u0443 \u043f\u0440\u043e\u043a\u0441\u0438 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c.\u200b\n\n\ud83d\udd35 CVE-2025-1731 \u0438 CVE-2025-1732 \u2014 \u0431\u0430\u0433 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 Zyxel uOS, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 USG FLEX H Series. \u0421\u0432\u044f\u0437\u0430\u043d \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u043c \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0430\u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 PostgreSQL-\u043a\u043e\u043c\u0430\u043d\u0434\u0430\u0445, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0435 Linux \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\ud83d\udd35 CVE-2025-34028 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Commvault Command Center Innovation Release, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c ZIP-\u0430\u0440\u0445\u0438\u0432\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438 \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u043a\u0435 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0418 \u043f\u0430\u0440\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 WordPress:\n\n\ud83d\udd35 CVE-2025-3065 \u2014 \u043f\u043b\u0430\u0433\u0438\u043d Database Toolset. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0443\u0442\u0435\u0439 \u0444\u0430\u0439\u043b\u043e\u0432.\n\n\ud83d\udd35 CVE-2025-3603 \u2014 \u043f\u043b\u0430\u0433\u0438\u043d Flynax Bridge. \u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u0445\u0432\u0430\u0442 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438.\n\n\ud83d\udd35 CVE-2025-3058 \u2014 \u043f\u043b\u0430\u0433\u0438\u043d Xelion Webchat. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441 \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u00ab\u041f\u043e\u0434\u043f\u0438\u0441\u0447\u0438\u043a\u00bb \u0438 \u0432\u044b\u0448\u0435 \u043c\u0435\u043d\u044f\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0441\u0430\u0439\u0442\u0430.\n\n\ud83d\udd35 CVE-2025-2558 \u2014 \u0442\u0435\u043c\u0430 The Wound. \u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c LFI-\u0430\u0442\u0430\u043a\u0438 (Local File Inclusion).\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:17.292781Z"}, {"uuid": "48944f73-5549-4d1a-b245-9af684fce7c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2538", "type": "seen", "source": "https://t.me/purp_sec/409", "content": "\u041f\u043e\u0434\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-27888 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Apache Druid. \u041e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0442\u0438\u043f\u0430 SSRF (Server-Side Request Forgery) \u0438 XSS (Cross-Site Scripting).\n\n\ud83d\udd35 CVE-2025-2538 \u2014 \u0431\u0430\u0433 \u0432 ArcGIS Enterprise, \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0432\u0435\u0434\u0443\u0449\u0438\u0445 \u0433\u0435\u043e\u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439. \u0421\u0432\u044f\u0437\u0430\u043d \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\ud83d\udd35 CVE-2025-1758 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Kemp LoadMaster (\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430). \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u0432\u044b\u0441\u0448\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\ud83d\udd35 CVE-2025-29783 \u2014 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 vLLM, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0435\u0435 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0435\u0439 \u0441 Mooncake. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u043e ZMQ/TCP.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:21.292425Z"}, {"uuid": "480be248-21fd-403b-b65b-f85f342b2924", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25599", "type": "seen", "source": "https://t.me/purp_sec/395", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435\n\n\ud83d\udd35 CVE-2025-29891 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Apache Camel, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0438 \u043c\u0435\u043d\u044f\u0442\u044c \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Camel, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a camel-bean \u0438 camel-exec.\n\n\ud83d\udd35 CVE-2025-27591 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 openSUSE, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043b\u043e\u0433-\u0444\u0430\u0439\u043b\u0430\u043c\u0438, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u044f \u0443\u0433\u0440\u043e\u0437\u0443 \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u043f\u043e\u0434\u043c\u0435\u043d\u044b \u0434\u0430\u043d\u043d\u044b\u0445. \u041b\u043e\u0433-\u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u044f /var/log/below \u0438\u043c\u0435\u0435\u0442 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043c\u0435\u043d\u044f\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u043b\u043e\u0433\u043e\u0432 \u0438\u043b\u0438 \u0434\u0430\u0436\u0435 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0438\u043c\u043b\u0438\u043d\u043a\u0438, \u0432\u0435\u0434\u0443\u0449\u0438\u0435 \u043a \u0432\u0430\u0436\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c.\n\n\ud83d\udd35 CVE-2024-27564 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ChatGPT, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u0442\u0438\u043f\u0430 SSRF (Server-Side Request Forgery). \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 URL \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f. \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0431\u0430\u0433 \u0438\u0437\u0432\u0435\u0441\u0442\u0435\u043d \u0435\u0449\u0435 \u0441 2023 \u0433\u043e\u0434\u0430, \u043e\u043d \u0432\u0441\u0435 \u0435\u0449\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u0435\u043d. \u0422\u043e\u043b\u044c\u043a\u043e \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044e\u044e \u043d\u0435\u0434\u0435\u043b\u044e \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u0431\u043e\u043b\u0435\u0435 10 \u0442\u044b\u0441\u044f\u0447 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0430\u0442\u0430\u043a \u0441 \u043e\u0434\u043d\u043e\u0433\u043e IP-\u0430\u0434\u0440\u0435\u0441\u0430.\n\n\ud83d\udd35 CVE-2025-25599 \u2014 \u0431\u0430\u0433 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u043e\u043c Bolt CMS, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432. \u0417\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432, \u0438\u0437-\u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0447\u0435\u0440\u0435\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0430\u0432\u0430\u0442\u0430\u0440\u0430 \u0438\u0437 URL.\n\n\ud83d\udd35 CVE-2024-28000 \u2014 \u0430\u043d\u0430\u043b\u0438\u0437 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 LiteSpeed Cache. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u0430\u0439\u0442\u0430.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:22.144069Z"}, {"uuid": "8ea58746-d171-4ea4-b12c-bae3d0d01cc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25599", "type": "seen", "source": "https://t.me/purp_sec/386", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-25599 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u043e\u043c Bolt CMS, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0430\u0432\u0430\u0442\u0430\u0440\u043e\u0432 \u043f\u043e URL. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\ud83d\udd35CVE-2025-24016 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Wazuh, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0430\u044f\u0441\u044f \u0432 \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u044b\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 eval \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 DAPI. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a API \u0438\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0432\u0448\u0438\u0439 \u0430\u0433\u0435\u043d\u0442 \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 JSON-\u043f\u0430\u043a\u0435\u0442, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434. \u041f\u0440\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u0438 as_wazuh_object \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e Python-\u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Wazuh.\n\n\ud83d\udd35CVE-2025-24813 \u2014 PoC \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Apache Tomcat, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0439\u0441\u044f \u0432 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 payload \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\ud83d\udd35CVE-2024-12084, CVE-2024-12086, CVE-2024-12087 \u0438 CVE-2024-12088 \u2014 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 Rsync \u0432\u0435\u0440\u0441\u0438\u0438 3.2.7, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432 Debian 12. \u0412\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438, \u0443\u0442\u0435\u0447\u043a\u0443 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043e\u0431\u0445\u043e\u0434 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0441\u0441\u044b\u043b\u043e\u043a \u0438 \u043e\u0431\u0445\u043e\u0434 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:22.180298Z"}, {"uuid": "870ea4f4-74e4-4af2-9092-7a1a70038279", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25037", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-07)", "content": "", "creation_timestamp": "2026-06-07T00:00:00.000000Z"}, {"uuid": "759e41d5-f24b-4e33-b651-6331aed6cabf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25296", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-25296.yaml", "content": "", "creation_timestamp": "2026-06-08T05:02:55.000000Z"}, {"uuid": "2d0527ff-1966-44b7-bb14-fe574a702040", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-10)", "content": "", "creation_timestamp": "2026-06-10T00:00:00.000000Z"}, {"uuid": "ebb1443e-e46e-49cc-9af7-d5cd60a8d439", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-29)", "content": "", "creation_timestamp": "2026-08-30T10:00:08.626488Z"}, {"uuid": "0f9ad5e7-7a9f-4e03-b39c-68a65e7e0546", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25037", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-15)", "content": "", "creation_timestamp": "2026-06-15T00:00:00.000000Z"}, {"uuid": "acadd121-4132-4e4e-9792-92e333190bf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-15)", "content": "", "creation_timestamp": "2026-06-15T00:00:00.000000Z"}, {"uuid": "76d0a940-4e78-4f5e-92cc-33560fa45c81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2567", "type": "seen", "source": "https://t.me/purp_sec/614", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-47188 (Command Injection) \u0438 CVE-2025-47187 \u2014 \u0434\u0432\u0435 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Mitel SIP \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0430\u0445, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043c\u043e\u0434\u0435\u043b\u044f\u0445 \u0434\u043b\u044f \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446-\u0441\u0432\u044f\u0437\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u0440\u0430\u0431\u043e\u0442\u044b \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\ud83d\udd35 CVE-2024-26809 \u2014 \u0431\u0430\u0433 \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 nftables \u044f\u0434\u0440\u0430 Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f root) \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u044f\u0434\u0440\u0430.\n\n\ud83d\udd35 CVE-2025-24797 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Meshtastic, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35 CVE-2025-28137 \u2014 \u0431\u0430\u0433 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430 TOTOLINK A810R, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0410\u0442\u0430\u043a\u0430 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 NoticeUrl \u0444\u0443\u043d\u043a\u0446\u0438\u0438 setNoticeCfg, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u041e\u0421.\n\n\ud83d\udd35 CVE-2025-1782 \u2014 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 HylaFAX Enterprise \u0438 AvantFAX. \u0412\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 language \u0432 \u0444\u043e\u0440\u043c\u0430\u0445, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\ud83d\udd35 CVE-2025-2567 \u2014 \u0431\u0430\u0433 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Lantronix, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0431\u0435\u0437 \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:06.500074Z"}, {"uuid": "c02235e8-0863-4ad3-93fe-78ffc2dbfa71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25037", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-17)", "content": "", "creation_timestamp": "2026-06-17T00:00:00.000000Z"}, {"uuid": "b8035f99-e5eb-4940-8927-3392c22ac1c7", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25034", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e9e8827d-5c3b-46ba-a581-25bf65b86c82", "content": "", "creation_timestamp": "2026-06-19T12:45:47.700464Z"}, {"uuid": "4baccccd-bc13-413b-ab8c-7b53378dbb7a", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25037", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/719d3370-c64d-4d3c-a610-533d6c43506f", "content": "", "creation_timestamp": "2026-06-19T12:45:37.183083Z"}, {"uuid": "85da40bf-79dc-499f-b23d-85631229b106", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25181", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1c6a461e-5479-4568-a3e8-ade3e96fd84a", "content": "", "creation_timestamp": "2026-06-19T12:46:25.277307Z"}, {"uuid": "d7fe63a4-49d2-4547-9377-ac555c7ce29f", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/90793b9a-ed5e-4ec9-b43b-f6f1e2fe51b2", "content": "", "creation_timestamp": "2026-06-19T12:45:32.628144Z"}, {"uuid": "3980fa3f-806d-4ac8-b1e0-983ae8bcbcb0", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c94a7316-9788-4d75-bfa1-4607a256ea6a", "content": "", "creation_timestamp": "2026-06-19T12:45:55.697271Z"}, {"uuid": "a772557f-2a75-445f-b086-25f78f75c750", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25271", "type": "seen", "source": "https://t.me/purp_sec/880", "content": "\ud83d\udd12 \u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-32023 (RCE) \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0421\u0423\u0411\u0414 Redis. \u0412\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u043c\u0430\u0441\u0441\u0438\u0432\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 PFADD, PFCOUNT \u0438 PFMERGE \u0432 HyperLogLog (HLL). \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0432 Redis \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e \u0441\u0442\u0440\u043e\u043a\u0443, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u043a\u0443\u0447\u0435 \u0438\u043b\u0438 \u0441\u0442\u0435\u043a\u0435. \n\n\ud83d\udd35 CVE-2025\u201324477 \u2014 \u0431\u0430\u0433 \u0432 FortiOS. \u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 heap-based buffer overflow \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 cw_stad, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u0430 \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 FortiWiFi-\u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0430, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u043f\u043e \u0441\u0435\u0442\u0438.\n\n\ud83d\udd35 CVE-2025-25271, CVE-2025-25270, CVE-2025-25269 \u0438 CVE-2025-25268 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430\u0445 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u0437\u0430\u0440\u044f\u0434\u043e\u043a Phoenix\u202fContact (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, CHARX\u202fSEC\u20113100), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f. \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u0437\u0430\u0440\u044f\u0434\u043d\u044b\u0445 \u0441\u0442\u0430\u043d\u0446\u0438\u0439, \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u043b\u0438 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b EV\u2011\u0441\u0435\u0442\u0438.\n\n\ud83d\udd35 CVE-2025-25257 \u2014 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f \u0432 \u0432\u0435\u0431\u2011GUI FortiGate. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c SQL\u2011\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044f \u0432\u0445\u043e\u0434 \u043a \u0431\u0430\u0437\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c. \u041c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445, \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u0437\u0430\u043f\u0443\u0441\u043a\u0443 \u0432\u0442\u043e\u0440\u0438\u0447\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0432 \u0441\u0432\u044f\u0437\u043a\u0435 \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438.\n\n\ud83d\udd35 CVE-2025-1729 \u2014 \u0431\u0430\u0433 \u0432 \u041f\u041e Lenovo ThinkPad P1 Gen7. \u0418\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b TPQMAssistant.exe, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u044b\u0439 \u043f\u0440\u0438 \u0432\u0445\u043e\u0434\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442\u0441\u044f \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 DLL, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043c\u0435\u0449\u0430\u0435\u0442 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u0443\u044e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 \u0440\u044f\u0434\u043e\u043c \u0441 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u043c \u0444\u0430\u0439\u043b\u043e\u043c \u0438 \u043f\u0440\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0441 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438.\n\n#CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:12.825187Z"}, {"uuid": "2019bc0e-3b67-4564-a4cc-aa4fc47f84ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25269", "type": "seen", "source": "https://t.me/purp_sec/880", "content": "\ud83d\udd12 \u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-32023 (RCE) \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0421\u0423\u0411\u0414 Redis. \u0412\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u043c\u0430\u0441\u0441\u0438\u0432\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 PFADD, PFCOUNT \u0438 PFMERGE \u0432 HyperLogLog (HLL). \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0432 Redis \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e \u0441\u0442\u0440\u043e\u043a\u0443, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u043a\u0443\u0447\u0435 \u0438\u043b\u0438 \u0441\u0442\u0435\u043a\u0435. \n\n\ud83d\udd35 CVE-2025\u201324477 \u2014 \u0431\u0430\u0433 \u0432 FortiOS. \u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 heap-based buffer overflow \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 cw_stad, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u0430 \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 FortiWiFi-\u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0430, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u043f\u043e \u0441\u0435\u0442\u0438.\n\n\ud83d\udd35 CVE-2025-25271, CVE-2025-25270, CVE-2025-25269 \u0438 CVE-2025-25268 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430\u0445 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u0437\u0430\u0440\u044f\u0434\u043e\u043a Phoenix\u202fContact (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, CHARX\u202fSEC\u20113100), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f. \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u0437\u0430\u0440\u044f\u0434\u043d\u044b\u0445 \u0441\u0442\u0430\u043d\u0446\u0438\u0439, \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u043b\u0438 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b EV\u2011\u0441\u0435\u0442\u0438.\n\n\ud83d\udd35 CVE-2025-25257 \u2014 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f \u0432 \u0432\u0435\u0431\u2011GUI FortiGate. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c SQL\u2011\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044f \u0432\u0445\u043e\u0434 \u043a \u0431\u0430\u0437\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c. \u041c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445, \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u0437\u0430\u043f\u0443\u0441\u043a\u0443 \u0432\u0442\u043e\u0440\u0438\u0447\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0432 \u0441\u0432\u044f\u0437\u043a\u0435 \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438.\n\n\ud83d\udd35 CVE-2025-1729 \u2014 \u0431\u0430\u0433 \u0432 \u041f\u041e Lenovo ThinkPad P1 Gen7. \u0418\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b TPQMAssistant.exe, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u044b\u0439 \u043f\u0440\u0438 \u0432\u0445\u043e\u0434\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442\u0441\u044f \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 DLL, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043c\u0435\u0449\u0430\u0435\u0442 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u0443\u044e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 \u0440\u044f\u0434\u043e\u043c \u0441 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u043c \u0444\u0430\u0439\u043b\u043e\u043c \u0438 \u043f\u0440\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0441 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438.\n\n#CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:12.860451Z"}, {"uuid": "9a0e9f18-ae87-4f71-91f3-1fbfd626e93d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25268", "type": "seen", "source": "https://t.me/purp_sec/880", "content": "\ud83d\udd12 \u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-32023 (RCE) \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0421\u0423\u0411\u0414 Redis. \u0412\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u043c\u0430\u0441\u0441\u0438\u0432\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 PFADD, PFCOUNT \u0438 PFMERGE \u0432 HyperLogLog (HLL). \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0432 Redis \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e \u0441\u0442\u0440\u043e\u043a\u0443, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u043a\u0443\u0447\u0435 \u0438\u043b\u0438 \u0441\u0442\u0435\u043a\u0435. \n\n\ud83d\udd35 CVE-2025\u201324477 \u2014 \u0431\u0430\u0433 \u0432 FortiOS. \u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 heap-based buffer overflow \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 cw_stad, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u0430 \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 FortiWiFi-\u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0430, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u043f\u043e \u0441\u0435\u0442\u0438.\n\n\ud83d\udd35 CVE-2025-25271, CVE-2025-25270, CVE-2025-25269 \u0438 CVE-2025-25268 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430\u0445 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u0437\u0430\u0440\u044f\u0434\u043e\u043a Phoenix\u202fContact (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, CHARX\u202fSEC\u20113100), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f. \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u0437\u0430\u0440\u044f\u0434\u043d\u044b\u0445 \u0441\u0442\u0430\u043d\u0446\u0438\u0439, \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u043b\u0438 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b EV\u2011\u0441\u0435\u0442\u0438.\n\n\ud83d\udd35 CVE-2025-25257 \u2014 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f \u0432 \u0432\u0435\u0431\u2011GUI FortiGate. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c SQL\u2011\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044f \u0432\u0445\u043e\u0434 \u043a \u0431\u0430\u0437\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c. \u041c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445, \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u0437\u0430\u043f\u0443\u0441\u043a\u0443 \u0432\u0442\u043e\u0440\u0438\u0447\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0432 \u0441\u0432\u044f\u0437\u043a\u0435 \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438.\n\n\ud83d\udd35 CVE-2025-1729 \u2014 \u0431\u0430\u0433 \u0432 \u041f\u041e Lenovo ThinkPad P1 Gen7. \u0418\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b TPQMAssistant.exe, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u044b\u0439 \u043f\u0440\u0438 \u0432\u0445\u043e\u0434\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442\u0441\u044f \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 DLL, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043c\u0435\u0449\u0430\u0435\u0442 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u0443\u044e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 \u0440\u044f\u0434\u043e\u043c \u0441 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u043c \u0444\u0430\u0439\u043b\u043e\u043c \u0438 \u043f\u0440\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0441 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438.\n\n#CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:12.893849Z"}, {"uuid": "8aa1d353-82bb-4a60-90a8-acc93bc165d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://t.me/purp_sec/880", "content": "\ud83d\udd12 \u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-32023 (RCE) \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0421\u0423\u0411\u0414 Redis. \u0412\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u043c\u0430\u0441\u0441\u0438\u0432\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 PFADD, PFCOUNT \u0438 PFMERGE \u0432 HyperLogLog (HLL). \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0432 Redis \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e \u0441\u0442\u0440\u043e\u043a\u0443, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u043a\u0443\u0447\u0435 \u0438\u043b\u0438 \u0441\u0442\u0435\u043a\u0435. \n\n\ud83d\udd35 CVE-2025\u201324477 \u2014 \u0431\u0430\u0433 \u0432 FortiOS. \u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 heap-based buffer overflow \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 cw_stad, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u0430 \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 FortiWiFi-\u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0430, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u043f\u043e \u0441\u0435\u0442\u0438.\n\n\ud83d\udd35 CVE-2025-25271, CVE-2025-25270, CVE-2025-25269 \u0438 CVE-2025-25268 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430\u0445 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u0437\u0430\u0440\u044f\u0434\u043e\u043a Phoenix\u202fContact (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, CHARX\u202fSEC\u20113100), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f. \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u0437\u0430\u0440\u044f\u0434\u043d\u044b\u0445 \u0441\u0442\u0430\u043d\u0446\u0438\u0439, \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u043b\u0438 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b EV\u2011\u0441\u0435\u0442\u0438.\n\n\ud83d\udd35 CVE-2025-25257 \u2014 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f \u0432 \u0432\u0435\u0431\u2011GUI FortiGate. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c SQL\u2011\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044f \u0432\u0445\u043e\u0434 \u043a \u0431\u0430\u0437\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c. \u041c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445, \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u0437\u0430\u043f\u0443\u0441\u043a\u0443 \u0432\u0442\u043e\u0440\u0438\u0447\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0432 \u0441\u0432\u044f\u0437\u043a\u0435 \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438.\n\n\ud83d\udd35 CVE-2025-1729 \u2014 \u0431\u0430\u0433 \u0432 \u041f\u041e Lenovo ThinkPad P1 Gen7. \u0418\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b TPQMAssistant.exe, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u044b\u0439 \u043f\u0440\u0438 \u0432\u0445\u043e\u0434\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442\u0441\u044f \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 DLL, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043c\u0435\u0449\u0430\u0435\u0442 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u0443\u044e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 \u0440\u044f\u0434\u043e\u043c \u0441 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u043c \u0444\u0430\u0439\u043b\u043e\u043c \u0438 \u043f\u0440\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0441 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438.\n\n#CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:12.966073Z"}, {"uuid": "bbf8c6b8-c989-44b1-ac1d-263ec484be8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25270", "type": "seen", "source": "https://t.me/purp_sec/880", "content": "\ud83d\udd12 \u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-32023 (RCE) \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0421\u0423\u0411\u0414 Redis. \u0412\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u043c\u0430\u0441\u0441\u0438\u0432\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 PFADD, PFCOUNT \u0438 PFMERGE \u0432 HyperLogLog (HLL). \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0432 Redis \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e \u0441\u0442\u0440\u043e\u043a\u0443, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u043a\u0443\u0447\u0435 \u0438\u043b\u0438 \u0441\u0442\u0435\u043a\u0435. \n\n\ud83d\udd35 CVE-2025\u201324477 \u2014 \u0431\u0430\u0433 \u0432 FortiOS. \u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 heap-based buffer overflow \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 cw_stad, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u0430 \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 FortiWiFi-\u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0430, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u043f\u043e \u0441\u0435\u0442\u0438.\n\n\ud83d\udd35 CVE-2025-25271, CVE-2025-25270, CVE-2025-25269 \u0438 CVE-2025-25268 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430\u0445 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u0437\u0430\u0440\u044f\u0434\u043e\u043a Phoenix\u202fContact (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, CHARX\u202fSEC\u20113100), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f. \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u0437\u0430\u0440\u044f\u0434\u043d\u044b\u0445 \u0441\u0442\u0430\u043d\u0446\u0438\u0439, \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u043b\u0438 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b EV\u2011\u0441\u0435\u0442\u0438.\n\n\ud83d\udd35 CVE-2025-25257 \u2014 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f \u0432 \u0432\u0435\u0431\u2011GUI FortiGate. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c SQL\u2011\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044f \u0432\u0445\u043e\u0434 \u043a \u0431\u0430\u0437\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c. \u041c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445, \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u0437\u0430\u043f\u0443\u0441\u043a\u0443 \u0432\u0442\u043e\u0440\u0438\u0447\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0432 \u0441\u0432\u044f\u0437\u043a\u0435 \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438.\n\n\ud83d\udd35 CVE-2025-1729 \u2014 \u0431\u0430\u0433 \u0432 \u041f\u041e Lenovo ThinkPad P1 Gen7. \u0418\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b TPQMAssistant.exe, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u044b\u0439 \u043f\u0440\u0438 \u0432\u0445\u043e\u0434\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442\u0441\u044f \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 DLL, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043c\u0435\u0449\u0430\u0435\u0442 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u0443\u044e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 \u0440\u044f\u0434\u043e\u043c \u0441 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u043c \u0444\u0430\u0439\u043b\u043e\u043c \u0438 \u043f\u0440\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0441 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438.\n\n#CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:13.001097Z"}, {"uuid": "da0cef4e-684f-40e4-a11b-876916a8dc70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25050", "type": "seen", "source": "https://t.me/purp_sec/1013", "content": "\ud83d\udd12 \u0412 \u0447\u0438\u043f\u0430\u0445 Broadcom \u0441\u0435\u0440\u0438\u0438 BCM5820X \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043f\u044f\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\n\n\u0411\u0430\u0433\u0438 \u043a\u0440\u043e\u044e\u0442\u0441\u044f \u0432 \u043c\u043e\u0434\u0443\u043b\u044f\u0445 ControlVault 3, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0438\u0445 \u0437\u0430 \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0431\u0438\u043e\u043c\u0435\u0442\u0440\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435: CVE-2025-24311, CVE-2025-25215, CVE-2025-24922, CVE-2025-25050 \u0438 CVE-2025-24919. \u041e\u043d\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435, \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0442\u044c \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0435 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u044b \u0438 \u0434\u0430\u0436\u0435 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u0439 \u0431\u0435\u043a\u0434\u043e\u0440 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0438 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u0438 Dell \u0441 \u0447\u0438\u043f\u0430\u043c\u0438 Broadcom - \u0431\u043e\u043b\u0435\u0435 100 \u043c\u043e\u0434\u0435\u043b\u0435\u0439, \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0438\u0437 \u0441\u0435\u0440\u0438\u0439 Latitude \u0438 Precision. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043d\u0435 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u043d\u0438 \u043e\u0434\u043d\u043e\u0433\u043e \u0441\u043b\u0443\u0447\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 in-the-wild.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u043c\u043e\u0434\u0443\u043b\u044f. \u0415\u0441\u043b\u0438 \u043f\u043e \u043a\u0430\u043a\u0438\u043c-\u043b\u0438\u0431\u043e \u043f\u0440\u0438\u0447\u0438\u043d\u0430\u043c \u044d\u0442\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u043b\u0443\u0447\u0448\u0435 \u0435\u0433\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c.\n\n\ud83d\udd17 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435.\n\n#blue_team #Broadcom", "creation_timestamp": "2026-08-15T00:00:13.594626Z"}, {"uuid": "05dd2a4b-2054-491a-b827-89b0b0e1d873", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25215", "type": "seen", "source": "https://t.me/purp_sec/1013", "content": "\ud83d\udd12 \u0412 \u0447\u0438\u043f\u0430\u0445 Broadcom \u0441\u0435\u0440\u0438\u0438 BCM5820X \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043f\u044f\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\n\n\u0411\u0430\u0433\u0438 \u043a\u0440\u043e\u044e\u0442\u0441\u044f \u0432 \u043c\u043e\u0434\u0443\u043b\u044f\u0445 ControlVault 3, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0438\u0445 \u0437\u0430 \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0431\u0438\u043e\u043c\u0435\u0442\u0440\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435: CVE-2025-24311, CVE-2025-25215, CVE-2025-24922, CVE-2025-25050 \u0438 CVE-2025-24919. \u041e\u043d\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435, \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0442\u044c \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0435 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u044b \u0438 \u0434\u0430\u0436\u0435 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u0439 \u0431\u0435\u043a\u0434\u043e\u0440 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0438 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u0438 Dell \u0441 \u0447\u0438\u043f\u0430\u043c\u0438 Broadcom - \u0431\u043e\u043b\u0435\u0435 100 \u043c\u043e\u0434\u0435\u043b\u0435\u0439, \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0438\u0437 \u0441\u0435\u0440\u0438\u0439 Latitude \u0438 Precision. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043d\u0435 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u043d\u0438 \u043e\u0434\u043d\u043e\u0433\u043e \u0441\u043b\u0443\u0447\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 in-the-wild.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u043c\u043e\u0434\u0443\u043b\u044f. \u0415\u0441\u043b\u0438 \u043f\u043e \u043a\u0430\u043a\u0438\u043c-\u043b\u0438\u0431\u043e \u043f\u0440\u0438\u0447\u0438\u043d\u0430\u043c \u044d\u0442\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u043b\u0443\u0447\u0448\u0435 \u0435\u0433\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c.\n\n\ud83d\udd17 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435.\n\n#blue_team #Broadcom", "creation_timestamp": "2026-08-15T00:00:13.689911Z"}, {"uuid": "5f497e27-07aa-4f92-aadb-9a6d1e861ab2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25037", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-21)", "content": "", "creation_timestamp": "2026-06-21T00:00:00.000000Z"}, {"uuid": "59ad702f-4140-4974-894a-a56d58df3bdb", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25034", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/589e558f-3822-48da-919c-af835cc0ded7", "content": "", "creation_timestamp": "2026-06-23T14:03:14.743425Z"}, {"uuid": "91c7e220-46bd-4e8a-b299-f8d1d9bd623b", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/74d2e758-a5e4-4d29-b156-ca41b247f0c7", "content": "", "creation_timestamp": "2026-06-23T14:03:54.096681Z"}, {"uuid": "bdf40d34-2ed0-49c7-9bf3-3890806bb3a9", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25037", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e23b616a-966c-4b2f-8494-2d652fc30410", "content": "", "creation_timestamp": "2026-06-23T14:03:05.549046Z"}, {"uuid": "db8eecda-69c5-4931-9aee-948537d93139", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25231", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3acfad0f-cd6b-4c6b-b342-12088eae87c6", "content": "", "creation_timestamp": "2026-06-23T14:03:57.746155Z"}, {"uuid": "e9d63e2a-c3a6-4a4a-9317-095839231709", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25181", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9c08943d-7b4b-43ff-bee5-efddb8d857d0", "content": "", "creation_timestamp": "2026-06-23T14:06:06.353102Z"}, {"uuid": "d1b984c4-8297-4e3d-88e9-9c4c1842ce92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2558", "type": "seen", "source": "https://t.me/purp_sec/564", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2024-33452 \u2014  \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 HTTP Request Smuggling \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 lua-nginx-module \u0432 OpenResty. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0441 \u043c\u0435\u0442\u043e\u0434\u043e\u043c HEAD, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0442\u0435\u043b\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430. \u0412 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438\u0433\u043d\u043e\u0440\u0438\u0440\u0443\u044e\u0442 \u0442\u0435\u043b\u043e \u0442\u0430\u043a\u0438\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, lua-nginx-module \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u0442 \u0435\u0433\u043e \u043a\u0430\u043a \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043c\u0435\u0436\u0434\u0443 \u043f\u0440\u043e\u043a\u0441\u0438 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c.\u200b\n\n\ud83d\udd35 CVE-2025-1731 \u0438 CVE-2025-1732 \u2014 \u0431\u0430\u0433 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 Zyxel uOS, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 USG FLEX H Series. \u0421\u0432\u044f\u0437\u0430\u043d \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u043c \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0430\u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 PostgreSQL-\u043a\u043e\u043c\u0430\u043d\u0434\u0430\u0445, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0435 Linux \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\ud83d\udd35 CVE-2025-34028 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Commvault Command Center Innovation Release, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c ZIP-\u0430\u0440\u0445\u0438\u0432\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438 \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u043a\u0435 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0418 \u043f\u0430\u0440\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 WordPress:\n\n\ud83d\udd35 CVE-2025-3065 \u2014 \u043f\u043b\u0430\u0433\u0438\u043d Database Toolset. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0443\u0442\u0435\u0439 \u0444\u0430\u0439\u043b\u043e\u0432.\n\n\ud83d\udd35 CVE-2025-3603 \u2014 \u043f\u043b\u0430\u0433\u0438\u043d Flynax Bridge. \u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u0445\u0432\u0430\u0442 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438.\n\n\ud83d\udd35 CVE-2025-3058 \u2014 \u043f\u043b\u0430\u0433\u0438\u043d Xelion Webchat. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441 \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u00ab\u041f\u043e\u0434\u043f\u0438\u0441\u0447\u0438\u043a\u00bb \u0438 \u0432\u044b\u0448\u0435 \u043c\u0435\u043d\u044f\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0441\u0430\u0439\u0442\u0430.\n\n\ud83d\udd35 CVE-2025-2558 \u2014 \u0442\u0435\u043c\u0430 The Wound. \u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c LFI-\u0430\u0442\u0430\u043a\u0438 (Local File Inclusion).\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:36.374162Z"}, {"uuid": "c95bffa6-32b2-4151-b803-b2f9c901924a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25205", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/audiobookshelf_auth_bypass.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"swiftbird07\", \"Kenneth LaCroix\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module detects Audiobookshelf servers affected by CVE-2025-25205, an\\n          unauthenticated authentication bypass. Affected versions (2.17.0 through\\n          2.19.0) decide whether a GET request may skip authentication by testing an\\n          unanchored regular expression against the request's full original URL,\\n          including the query string, rather than the normalized path. By appending a\\n          query parameter whose value contains a whitelisted substring such as\\n          /api/items/1/cover, an unauthenticated client reaches protected API\\n          endpoints.\\n\\n          The module fingerprints the server and version through the unauthenticated\\n          /status endpoint, then sends two requests to the protected /api/libraries\\n          endpoint: a baseline request that must be rejected with HTTP 401, and a\\n          bypass request carrying the whitelisted substring in its query string. On a\\n          vulnerable server the bypass request is processed instead of rejected, which\\n          this module treats as confirmation. It deliberately avoids endpoints such as\\n          /api/users that crash the server process (the denial-of-service half of this\\n          CVE).\", \"disclosure_date\": \"2025-02-12\", \"fullname\": \"auxiliary/scanner/http/audiobookshelf_auth_bypass\", \"is_install_path\": true, \"mod_time\": \"2026-06-21 11:58:01 +0000\", \"name\": \"Audiobookshelf Unauthenticated API Authentication Bypass Scanner\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/scanner/http/audiobookshelf_auth_bypass.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/http/audiobookshelf_auth_bypass\", \"references\": [\"CVE-2025-25205\", \"GHSA-pg8v-5jcv-wrvw\", \"URL-https://github.com/advplyr/audiobookshelf/commit/ec6537656925a43871b07cfee12c9f383844d224\"], \"rport\": 13378, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-06-24T15:45:11.078576Z"}, {"uuid": "5860c551-ec6a-4676-b3e2-662a42e4ee03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2538", "type": "seen", "source": "https://t.me/purp_sec/409", "content": "\u041f\u043e\u0434\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-27888 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Apache Druid. \u041e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0442\u0438\u043f\u0430 SSRF (Server-Side Request Forgery) \u0438 XSS (Cross-Site Scripting).\n\n\ud83d\udd35 CVE-2025-2538 \u2014 \u0431\u0430\u0433 \u0432 ArcGIS Enterprise, \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0432\u0435\u0434\u0443\u0449\u0438\u0445 \u0433\u0435\u043e\u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439. \u0421\u0432\u044f\u0437\u0430\u043d \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\ud83d\udd35 CVE-2025-1758 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Kemp LoadMaster (\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430). \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u0432\u044b\u0441\u0448\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\ud83d\udd35 CVE-2025-29783 \u2014 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 vLLM, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0435\u0435 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0435\u0439 \u0441 Mooncake. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u043e ZMQ/TCP.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:43.548732Z"}, {"uuid": "8c79f287-a2f3-4061-8b98-01a90b7cf05f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25599", "type": "seen", "source": "https://t.me/purp_sec/386", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-25599 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u043e\u043c Bolt CMS, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0430\u0432\u0430\u0442\u0430\u0440\u043e\u0432 \u043f\u043e URL. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\ud83d\udd35CVE-2025-24016 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Wazuh, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0430\u044f\u0441\u044f \u0432 \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u044b\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 eval \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 DAPI. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a API \u0438\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0432\u0448\u0438\u0439 \u0430\u0433\u0435\u043d\u0442 \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 JSON-\u043f\u0430\u043a\u0435\u0442, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434. \u041f\u0440\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u0438 as_wazuh_object \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e Python-\u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Wazuh.\n\n\ud83d\udd35CVE-2025-24813 \u2014 PoC \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Apache Tomcat, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0439\u0441\u044f \u0432 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 payload \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\ud83d\udd35CVE-2024-12084, CVE-2024-12086, CVE-2024-12087 \u0438 CVE-2024-12088 \u2014 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 Rsync \u0432\u0435\u0440\u0441\u0438\u0438 3.2.7, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432 Debian 12. \u0412\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438, \u0443\u0442\u0435\u0447\u043a\u0443 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043e\u0431\u0445\u043e\u0434 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0441\u0441\u044b\u043b\u043e\u043a \u0438 \u043e\u0431\u0445\u043e\u0434 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:45.768911Z"}, {"uuid": "5178c5c5-b9b4-4270-8c7d-552fdd8d5af3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25599", "type": "seen", "source": "https://t.me/purp_sec/395", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435\n\n\ud83d\udd35 CVE-2025-29891 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Apache Camel, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0438 \u043c\u0435\u043d\u044f\u0442\u044c \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Camel, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a camel-bean \u0438 camel-exec.\n\n\ud83d\udd35 CVE-2025-27591 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 openSUSE, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043b\u043e\u0433-\u0444\u0430\u0439\u043b\u0430\u043c\u0438, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u044f \u0443\u0433\u0440\u043e\u0437\u0443 \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u043f\u043e\u0434\u043c\u0435\u043d\u044b \u0434\u0430\u043d\u043d\u044b\u0445. \u041b\u043e\u0433-\u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u044f /var/log/below \u0438\u043c\u0435\u0435\u0442 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043c\u0435\u043d\u044f\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u043b\u043e\u0433\u043e\u0432 \u0438\u043b\u0438 \u0434\u0430\u0436\u0435 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0438\u043c\u043b\u0438\u043d\u043a\u0438, \u0432\u0435\u0434\u0443\u0449\u0438\u0435 \u043a \u0432\u0430\u0436\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c.\n\n\ud83d\udd35 CVE-2024-27564 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ChatGPT, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u0442\u0438\u043f\u0430 SSRF (Server-Side Request Forgery). \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 URL \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f. \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0431\u0430\u0433 \u0438\u0437\u0432\u0435\u0441\u0442\u0435\u043d \u0435\u0449\u0435 \u0441 2023 \u0433\u043e\u0434\u0430, \u043e\u043d \u0432\u0441\u0435 \u0435\u0449\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u0435\u043d. \u0422\u043e\u043b\u044c\u043a\u043e \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044e\u044e \u043d\u0435\u0434\u0435\u043b\u044e \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u0431\u043e\u043b\u0435\u0435 10 \u0442\u044b\u0441\u044f\u0447 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0430\u0442\u0430\u043a \u0441 \u043e\u0434\u043d\u043e\u0433\u043e IP-\u0430\u0434\u0440\u0435\u0441\u0430.\n\n\ud83d\udd35 CVE-2025-25599 \u2014 \u0431\u0430\u0433 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u043e\u043c Bolt CMS, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432. \u0417\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432, \u0438\u0437-\u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0447\u0435\u0440\u0435\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0430\u0432\u0430\u0442\u0430\u0440\u0430 \u0438\u0437 URL.\n\n\ud83d\udd35 CVE-2024-28000 \u2014 \u0430\u043d\u0430\u043b\u0438\u0437 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 LiteSpeed Cache. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u0430\u0439\u0442\u0430.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:45.725637Z"}, {"uuid": "4c94a723-496a-4a53-a724-b1e7e30aa013", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25034", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-28)", "content": "", "creation_timestamp": "2026-06-29T10:15:05.156062Z"}, {"uuid": "d25b2baf-ed7f-48ae-b709-f3dd926c9e62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25205", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3mpggudv6x32m", "content": "\ud83d\udd0d Top signals this week:\n\nCVEs: CVE-2026-20230, CVE-2026-12569, CVE-2026-8461, CVE-2026-20245, CVE-2025-25205\nActors: Play, Ransomware, Apt\n\nFull intel: https://matlock.ca/cybersecnews", "creation_timestamp": "2026-06-29T12:00:33.977405Z"}, {"uuid": "f4b1132d-fcf4-4f89-8504-22dc1c215562", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2515", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mphm3knidb2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-2515 \u0432 BlueChi: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/B148706E-5ED5-4DCE-BCB2-81EC51F389D7", "creation_timestamp": "2026-06-29T23:06:44.498124Z"}, {"uuid": "e8381aa2-5e71-4949-a142-f343a78b6af3", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-25257", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/027c1ed4-b1e5-40b6-8881-39c957057d92", "content": "", "creation_timestamp": "2026-06-30T09:22:42.110736Z"}, {"uuid": "181fe6fa-d727-4b42-ab6a-1a0fdb524bc4", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-25037", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1eeefc53-90ed-4fdd-8517-a319905a5d9e", "content": "", "creation_timestamp": "2026-06-30T09:22:48.684449Z"}, {"uuid": "5be21830-1985-41da-a298-461649742b7b", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-25034", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ab721c85-2582-4936-8de4-58e7d1f8f0ca", "content": "", "creation_timestamp": "2026-06-30T09:23:56.995547Z"}, {"uuid": "1f8a1df6-a8a7-4ddc-9f04-dc12600711d2", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-25231", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a23349f5-0aa0-4f9f-ade7-52468e9c3c97", "content": "", "creation_timestamp": "2026-06-30T09:23:46.544699Z"}, {"uuid": "f7c54524-f9b0-4b43-9500-0a915a36ce4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/24852", "content": "https://github.com/watchtowrlabs/watchTowr-vs-FortiWeb-CVE-2025-25257", "creation_timestamp": "2026-08-15T06:00:03.770272Z"}, {"uuid": "71809f45-c89b-4547-b644-b3d075059e48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25034", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-30)", "content": "", "creation_timestamp": "2026-07-01T10:15:13.114732Z"}, {"uuid": "46f446b8-c207-4f11-801c-95fa9933c009", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://t.me/aktivcons/1863", "content": "\ud83d\udd10 \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Cisco (CVSS 10.0): \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438\n\nCisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-20337 \u0432 ISE \u0438 ISE-PIC (\u0432\u0435\u0440\u0441\u0438\u0438 3.3 \u0438 3.4). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0447\u0435\u0440\u0435\u0437 \u043e\u0441\u043e\u0431\u044b\u0439 API-\u0437\u0430\u043f\u0440\u043e\u0441 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 root-\u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udccc \u0412\u0430\u0436\u043d\u043e:\n\ud83d\udfe0\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 3.3 \u0438 3.4\n\ud83d\udfe0\u0412\u0435\u0440\u0441\u0438\u0438 3.2 \u0438 \u043d\u0438\u0436\u0435 \u043d\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b\n\ud83d\udfe0Cisco \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0430\u0442\u0447\u0438: \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f #7 \u0434\u043b\u044f 3.3 \u0438 #2 \u0434\u043b\u044f 3.4\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f.\n\n\ud83d\udd25 \u0410 \u0432\u043e\u0442 Fortinet \u0443\u0436\u0435 \u0432 \u043e\u0433\u043d\u0435\nRCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-25257 \u0432 FortiWeb \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438. \u0421 11 \u0438\u044e\u043b\u044f \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0430\u0442\u0430\u043a\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430: \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u0435\u043a \u0447\u0435\u0440\u0435\u0437 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e.\n\n77 \u0437\u0430\u0440\u0430\u0436\u0451\u043d\u043d\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432: \u0421\u0435\u0432\u0435\u0440\u043d\u0430\u044f \u0410\u043c\u0435\u0440\u0438\u043a\u0430, \u0410\u0437\u0438\u044f, \u0415\u0432\u0440\u043e\u043f\u0430. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Censys, \u0432 \u0441\u0435\u0442\u0438 \u0431\u043e\u043b\u0435\u0435 20 \u0442\u044b\u0441\u044f\u0447 FortiWeb-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432. \u0411\u043e\u043b\u044c\u0448\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u0431\u0435\u0437 \u044f\u0432\u043d\u044b\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0437\u0430\u0449\u0438\u0442\u044b.\n\n\n\ud83d\udcacTelegram | \ud83d\udc99VK | \ud83c\udf10\u0421\u0430\u0439\u0442 | \ud83d\udcf9\u041f\u043e\u0434\u043a\u0430\u0441\u0442", "creation_timestamp": "2026-08-15T08:00:09.750099Z"}, {"uuid": "a0daf2b4-df45-453c-a5ec-84df41747762", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2505", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3612d282-9304-45bb-8a1d-d71c8c14eeb2", "content": "", "creation_timestamp": "2026-08-11T08:00:26.809580Z"}, {"uuid": "cd66d499-f263-4895-a611-9d4f5818a3b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-10)", "content": "", "creation_timestamp": "2026-08-11T10:15:14.743953Z"}, {"uuid": "4140dfc9-bb64-4f44-a585-d5935e792971", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25691", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxg5ptbi52i", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-25691 \u0432 PrestaShop: \u0440\u0438\u0441\u043a\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 PHAR \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/3E7C309B-BC9B-42D0-B4B8-70B2545A3F07", "creation_timestamp": "2026-07-06T06:03:10.361160Z"}, {"uuid": "59acc9a3-cb1a-47af-aa8e-e1451de77a3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25037", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-06)", "content": "", "creation_timestamp": "2026-07-07T10:15:11.905216Z"}, {"uuid": "4b783640-af2d-4dc0-a09d-7f9b86c704ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-07)", "content": "", "creation_timestamp": "2026-07-08T10:15:09.603199Z"}, {"uuid": "05ec0164-55fa-412d-8ab6-185b2b529692", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25012", "type": "seen", "source": "https://t.me/brutsecurity/1610", "content": "\ud83d\udea8 CVE-2025-25012 (CVSS 9.9): Critical Code Execution Vulnerability Patched in Elastic Kibana\n\n\ud83d\udc47Dorks:\nHUNTER : http://product.name=\"Elastic Kibana\"\nFOFA : product=\"Kibana\"\n\n\ud83d\udcf0Refer:https://securityonline.info/cve-2025-25012-cvss-9-9-critical-code-execution-vulnerability-patched-in-elastic-kibana/\n\n#Kibana#hunterhow #infosec #infosecurity #OSINT #Vulnerability", "creation_timestamp": "2026-07-09T03:00:09.268522Z"}, {"uuid": "1c7b4c3b-7417-44a4-9d20-79ba5159abba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2563", "type": "seen", "source": "https://t.me/brutsecurity/1898", "content": "\ud83d\udea8 CVE-2025-2563 \ud83d\udea8- A Metasploit module to exploit an unauthenticated privilege escalation in the WordPress User Registration & Membership plugin (Free < 4.1.2, Pro < 5.1.2) [+70k installs]. \n\n\u25b6\ufe0f https://github.com/rapid7/metasploit-framework/pull/20159", "creation_timestamp": "2026-07-09T03:00:08.221046Z"}, {"uuid": "7effd449-b247-476f-8b4e-40398263833a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "seen", "source": "https://t.me/brutsecurity/1632", "content": "CVE-2025-25291, -25292 and other: Multiple vulnerabilitites in GitLab, 8.8 rating\u2757\ufe0f\n\nTraditionally, GitLab publishes information about several vulnerabilities at once. These include Interpretation Conflict, DoS, Credentials Disclose, etc.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/PDxYA\n\ud83d\udc49 Dork: http.favicon.hash_sha256:72a2cad5025aa931d6ea56c3201d1f18e68a8cd39788c7c80d5b2b82aa5143ef OR http.headers.set_cookie:\"gitlab\" OR http.headers.location:\"gitlab\"\n\nVendor's advisory: https://about.gitlab.com/releases/2025/03/12/patch-release-gitlab-17-9-2-released/", "creation_timestamp": "2026-07-09T03:00:09.006882Z"}, {"uuid": "426dbd5b-4299-4617-9938-040a4bed4c21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://t.me/aktivcons/1863", "content": "\ud83d\udd10 \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Cisco (CVSS 10.0): \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438\n\nCisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-20337 \u0432 ISE \u0438 ISE-PIC (\u0432\u0435\u0440\u0441\u0438\u0438 3.3 \u0438 3.4). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0447\u0435\u0440\u0435\u0437 \u043e\u0441\u043e\u0431\u044b\u0439 API-\u0437\u0430\u043f\u0440\u043e\u0441 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 root-\u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udccc \u0412\u0430\u0436\u043d\u043e:\n\ud83d\udfe0\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 3.3 \u0438 3.4\n\ud83d\udfe0\u0412\u0435\u0440\u0441\u0438\u0438 3.2 \u0438 \u043d\u0438\u0436\u0435 \u043d\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b\n\ud83d\udfe0Cisco \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0430\u0442\u0447\u0438: \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f #7 \u0434\u043b\u044f 3.3 \u0438 #2 \u0434\u043b\u044f 3.4\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f.\n\n\ud83d\udd25 \u0410 \u0432\u043e\u0442 Fortinet \u0443\u0436\u0435 \u0432 \u043e\u0433\u043d\u0435\nRCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-25257 \u0432 FortiWeb \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438. \u0421 11 \u0438\u044e\u043b\u044f \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0430\u0442\u0430\u043a\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430: \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u0435\u043a \u0447\u0435\u0440\u0435\u0437 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e.\n\n77 \u0437\u0430\u0440\u0430\u0436\u0451\u043d\u043d\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432: \u0421\u0435\u0432\u0435\u0440\u043d\u0430\u044f \u0410\u043c\u0435\u0440\u0438\u043a\u0430, \u0410\u0437\u0438\u044f, \u0415\u0432\u0440\u043e\u043f\u0430. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Censys, \u0432 \u0441\u0435\u0442\u0438 \u0431\u043e\u043b\u0435\u0435 20 \u0442\u044b\u0441\u044f\u0447 FortiWeb-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432. \u0411\u043e\u043b\u044c\u0448\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u0431\u0435\u0437 \u044f\u0432\u043d\u044b\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0437\u0430\u0449\u0438\u0442\u044b.\n\n\n\ud83d\udcacTelegram | \ud83d\udc99VK | \ud83c\udf10\u0421\u0430\u0439\u0442 | \ud83d\udcf9\u041f\u043e\u0434\u043a\u0430\u0441\u0442", "creation_timestamp": "2026-08-16T00:00:14.633122Z"}, {"uuid": "7acb560c-25a5-4220-adb1-3c3d389ceeb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2563", "type": "seen", "source": "https://t.me/brutsecurity/1898", "content": "\ud83d\udea8 CVE-2025-2563 \ud83d\udea8- A Metasploit module to exploit an unauthenticated privilege escalation in the WordPress User Registration & Membership plugin (Free < 4.1.2, Pro < 5.1.2) [+70k installs]. \n\n\u25b6\ufe0f https://github.com/rapid7/metasploit-framework/pull/20159", "creation_timestamp": "2026-07-10T00:00:31.731697Z"}, {"uuid": "e90b67c5-ac22-4320-b8c2-5a2a2e3757fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "seen", "source": "https://t.me/brutsecurity/1632", "content": "CVE-2025-25291, -25292 and other: Multiple vulnerabilitites in GitLab, 8.8 rating\u2757\ufe0f\n\nTraditionally, GitLab publishes information about several vulnerabilities at once. These include Interpretation Conflict, DoS, Credentials Disclose, etc.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/PDxYA\n\ud83d\udc49 Dork: http.favicon.hash_sha256:72a2cad5025aa931d6ea56c3201d1f18e68a8cd39788c7c80d5b2b82aa5143ef OR http.headers.set_cookie:\"gitlab\" OR http.headers.location:\"gitlab\"\n\nVendor's advisory: https://about.gitlab.com/releases/2025/03/12/patch-release-gitlab-17-9-2-released/", "creation_timestamp": "2026-07-10T00:00:32.579395Z"}, {"uuid": "39b6d920-b23b-4840-a79e-8c61388645ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25012", "type": "seen", "source": "https://t.me/brutsecurity/1610", "content": "\ud83d\udea8 CVE-2025-25012 (CVSS 9.9): Critical Code Execution Vulnerability Patched in Elastic Kibana\n\n\ud83d\udc47Dorks:\nHUNTER : http://product.name=\"Elastic Kibana\"\nFOFA : product=\"Kibana\"\n\n\ud83d\udcf0Refer:https://securityonline.info/cve-2025-25012-cvss-9-9-critical-code-execution-vulnerability-patched-in-elastic-kibana/\n\n#Kibana#hunterhow #infosec #infosecurity #OSINT #Vulnerability", "creation_timestamp": "2026-07-10T00:00:32.869283Z"}, {"uuid": "6ad09b83-160a-4415-b392-c40250d33c9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25037", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-09)", "content": "", "creation_timestamp": "2026-07-10T10:15:07.992536Z"}, {"uuid": "a40dc65c-8d51-4b80-9f39-8b3196e43076", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2563", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1898", "content": "\ud83d\udea8 CVE-2025-2563 \ud83d\udea8- A Metasploit module to exploit an unauthenticated privilege escalation in the WordPress User Registration & Membership plugin (Free < 4.1.2, Pro < 5.1.2) [+70k installs]. \n\n\u25b6\ufe0f https://github.com/rapid7/metasploit-framework/pull/20159", "creation_timestamp": "2026-07-11T13:00:05.648404Z"}, {"uuid": "6fb76dc0-169c-46ab-8c3b-4c55df9cbd64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25012", "type": "seen", "source": "https://t.me/brutsecurity/1610", "content": "\ud83d\udea8 CVE-2025-25012 (CVSS 9.9): Critical Code Execution Vulnerability Patched in Elastic Kibana\n\n\ud83d\udc47Dorks:\nHUNTER : http://product.name=\"Elastic Kibana\"\nFOFA : product=\"Kibana\"\n\n\ud83d\udcf0Refer:https://securityonline.info/cve-2025-25012-cvss-9-9-critical-code-execution-vulnerability-patched-in-elastic-kibana/\n\n#Kibana#hunterhow #infosec #infosecurity #OSINT #Vulnerability", "creation_timestamp": "2026-07-11T14:00:04.174226Z"}, {"uuid": "fb43348d-c35a-4e18-943b-b635f527cfdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "seen", "source": "https://t.me/brutsecurity/1632", "content": "CVE-2025-25291, -25292 and other: Multiple vulnerabilitites in GitLab, 8.8 rating\u2757\ufe0f\n\nTraditionally, GitLab publishes information about several vulnerabilities at once. These include Interpretation Conflict, DoS, Credentials Disclose, etc.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/PDxYA\n\ud83d\udc49 Dork: http.favicon.hash_sha256:72a2cad5025aa931d6ea56c3201d1f18e68a8cd39788c7c80d5b2b82aa5143ef OR http.headers.set_cookie:\"gitlab\" OR http.headers.location:\"gitlab\"\n\nVendor's advisory: https://about.gitlab.com/releases/2025/03/12/patch-release-gitlab-17-9-2-released/", "creation_timestamp": "2026-07-11T14:00:04.546133Z"}, {"uuid": "b76fa7c0-34a9-49da-9ea0-50dfa17a8cf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "seen", "source": "https://t.me/brutsecurity/1632", "content": "CVE-2025-25291, -25292 and other: Multiple vulnerabilitites in GitLab, 8.8 rating\u2757\ufe0f\n\nTraditionally, GitLab publishes information about several vulnerabilities at once. These include Interpretation Conflict, DoS, Credentials Disclose, etc.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/PDxYA\n\ud83d\udc49 Dork: http.favicon.hash_sha256:72a2cad5025aa931d6ea56c3201d1f18e68a8cd39788c7c80d5b2b82aa5143ef OR http.headers.set_cookie:\"gitlab\" OR http.headers.location:\"gitlab\"\n\nVendor's advisory: https://about.gitlab.com/releases/2025/03/12/patch-release-gitlab-17-9-2-released/", "creation_timestamp": "2026-07-12T00:00:48.286860Z"}, {"uuid": "af7a721c-b3e6-4604-a135-9ea480db8f54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25012", "type": "seen", "source": "https://t.me/brutsecurity/1610", "content": "\ud83d\udea8 CVE-2025-25012 (CVSS 9.9): Critical Code Execution Vulnerability Patched in Elastic Kibana\n\n\ud83d\udc47Dorks:\nHUNTER : http://product.name=\"Elastic Kibana\"\nFOFA : product=\"Kibana\"\n\n\ud83d\udcf0Refer:https://securityonline.info/cve-2025-25012-cvss-9-9-critical-code-execution-vulnerability-patched-in-elastic-kibana/\n\n#Kibana#hunterhow #infosec #infosecurity #OSINT #Vulnerability", "creation_timestamp": "2026-07-12T00:00:47.939215Z"}, {"uuid": "83558857-a280-4b67-8639-d637ac9e035a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2563", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1898", "content": "\ud83d\udea8 CVE-2025-2563 \ud83d\udea8- A Metasploit module to exploit an unauthenticated privilege escalation in the WordPress User Registration & Membership plugin (Free < 4.1.2, Pro < 5.1.2) [+70k installs]. \n\n\u25b6\ufe0f https://github.com/rapid7/metasploit-framework/pull/20159", "creation_timestamp": "2026-07-12T00:00:49.671598Z"}, {"uuid": "e49970fc-214f-4436-ad3f-67c548969c28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/24852", "content": "https://github.com/watchtowrlabs/watchTowr-vs-FortiWeb-CVE-2025-25257", "creation_timestamp": "2026-08-16T00:00:49.641929Z"}, {"uuid": "4c12d13e-d305-4a52-9641-27476a9b5e22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25599", "type": "seen", "source": "https://t.me/purp_sec/386", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-25599 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u043e\u043c Bolt CMS, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0430\u0432\u0430\u0442\u0430\u0440\u043e\u0432 \u043f\u043e URL. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\ud83d\udd35CVE-2025-24016 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Wazuh, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0430\u044f\u0441\u044f \u0432 \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u044b\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 eval \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 DAPI. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a API \u0438\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0432\u0448\u0438\u0439 \u0430\u0433\u0435\u043d\u0442 \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 JSON-\u043f\u0430\u043a\u0435\u0442, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434. \u041f\u0440\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u0438 as_wazuh_object \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e Python-\u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Wazuh.\n\n\ud83d\udd35CVE-2025-24813 \u2014 PoC \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Apache Tomcat, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0439\u0441\u044f \u0432 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 payload \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\ud83d\udd35CVE-2024-12084, CVE-2024-12086, CVE-2024-12087 \u0438 CVE-2024-12088 \u2014 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 Rsync \u0432\u0435\u0440\u0441\u0438\u0438 3.2.7, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432 Debian 12. \u0412\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438, \u0443\u0442\u0435\u0447\u043a\u0443 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043e\u0431\u0445\u043e\u0434 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0441\u0441\u044b\u043b\u043e\u043a \u0438 \u043e\u0431\u0445\u043e\u0434 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-16T00:00:51.134714Z"}, {"uuid": "83952ca0-860d-44b8-933b-5242b868e513", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25599", "type": "seen", "source": "https://t.me/purp_sec/395", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435\n\n\ud83d\udd35 CVE-2025-29891 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Apache Camel, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0438 \u043c\u0435\u043d\u044f\u0442\u044c \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Camel, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a camel-bean \u0438 camel-exec.\n\n\ud83d\udd35 CVE-2025-27591 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 openSUSE, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043b\u043e\u0433-\u0444\u0430\u0439\u043b\u0430\u043c\u0438, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u044f \u0443\u0433\u0440\u043e\u0437\u0443 \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u043f\u043e\u0434\u043c\u0435\u043d\u044b \u0434\u0430\u043d\u043d\u044b\u0445. \u041b\u043e\u0433-\u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u044f /var/log/below \u0438\u043c\u0435\u0435\u0442 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043c\u0435\u043d\u044f\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u043b\u043e\u0433\u043e\u0432 \u0438\u043b\u0438 \u0434\u0430\u0436\u0435 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0438\u043c\u043b\u0438\u043d\u043a\u0438, \u0432\u0435\u0434\u0443\u0449\u0438\u0435 \u043a \u0432\u0430\u0436\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c.\n\n\ud83d\udd35 CVE-2024-27564 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ChatGPT, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u0442\u0438\u043f\u0430 SSRF (Server-Side Request Forgery). \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 URL \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f. \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0431\u0430\u0433 \u0438\u0437\u0432\u0435\u0441\u0442\u0435\u043d \u0435\u0449\u0435 \u0441 2023 \u0433\u043e\u0434\u0430, \u043e\u043d \u0432\u0441\u0435 \u0435\u0449\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u0435\u043d. \u0422\u043e\u043b\u044c\u043a\u043e \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044e\u044e \u043d\u0435\u0434\u0435\u043b\u044e \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u0431\u043e\u043b\u0435\u0435 10 \u0442\u044b\u0441\u044f\u0447 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0430\u0442\u0430\u043a \u0441 \u043e\u0434\u043d\u043e\u0433\u043e IP-\u0430\u0434\u0440\u0435\u0441\u0430.\n\n\ud83d\udd35 CVE-2025-25599 \u2014 \u0431\u0430\u0433 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u043e\u043c Bolt CMS, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432. \u0417\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432, \u0438\u0437-\u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0447\u0435\u0440\u0435\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0430\u0432\u0430\u0442\u0430\u0440\u0430 \u0438\u0437 URL.\n\n\ud83d\udd35 CVE-2024-28000 \u2014 \u0430\u043d\u0430\u043b\u0438\u0437 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 LiteSpeed Cache. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u0430\u0439\u0442\u0430.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-16T00:00:51.353071Z"}, {"uuid": "278def23-38e9-405c-a7fd-7c320c2bb834", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2538", "type": "seen", "source": "https://t.me/purp_sec/409", "content": "\u041f\u043e\u0434\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-27888 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Apache Druid. \u041e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0442\u0438\u043f\u0430 SSRF (Server-Side Request Forgery) \u0438 XSS (Cross-Site Scripting).\n\n\ud83d\udd35 CVE-2025-2538 \u2014 \u0431\u0430\u0433 \u0432 ArcGIS Enterprise, \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0432\u0435\u0434\u0443\u0449\u0438\u0445 \u0433\u0435\u043e\u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439. \u0421\u0432\u044f\u0437\u0430\u043d \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\ud83d\udd35 CVE-2025-1758 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Kemp LoadMaster (\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430). \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u0432\u044b\u0441\u0448\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\ud83d\udd35 CVE-2025-29783 \u2014 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 vLLM, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0435\u0435 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0435\u0439 \u0441 Mooncake. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u043e ZMQ/TCP.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-16T00:00:51.874193Z"}, {"uuid": "2563d891-c514-4bf0-9ff2-7f206b771329", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25012", "type": "seen", "source": "https://t.me/securixy_kz/1123", "content": "\u0415\u0449\u0435 \u043e\u0434\u0438\u043d SOC \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441\u0434\u044b\u0440\u044f\u0432\u0438\u043b\u0441\u044f \u0441\u043b\u0435\u0434\u043e\u043c \u0437\u0430 \u0432\u0430\u0437\u0443\u0445\u043e\u043c  \n\n\ud83d\udea8 \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 #Kibana : ESA-2025-06 - \u0412 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u043e\u0442 8.15.0 \u0434\u043e 8.17.2 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 Prototype Pollution. \u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2025-25012) \u0438\u043c\u0435\u0435\u0442 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9.9.\n\n\u041a\u0442\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d \u0440\u0438\u0441\u043a\u0443?\n\u0412 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 8.15.0\u20138.17.0: \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441 \u0440\u043e\u043b\u044c\u044e Viewer.\n\u0412 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 8.17.1 \u0438 8.17.2: \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441 \u0440\u043e\u043b\u044f\u043c\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 fleet-all, integrations-all \u0438 actions:execute-advanced-connectors.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f:\n\u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435\u0441\u044c \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 Kibana 8.17.3.\n\u0415\u0441\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0434\u043e\u0431\u0430\u0432\u044c\u0442\u0435 \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e Kibana \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440:\n\nxpack.integration_assistant.enabled: false", "creation_timestamp": "2026-07-12T22:00:07.683564Z"}, {"uuid": "0812dd47-de28-45cc-8de1-21bf90c157a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25012", "type": "seen", "source": "https://t.me/securixy_kz/1123", "content": "\u0415\u0449\u0435 \u043e\u0434\u0438\u043d SOC \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441\u0434\u044b\u0440\u044f\u0432\u0438\u043b\u0441\u044f \u0441\u043b\u0435\u0434\u043e\u043c \u0437\u0430 \u0432\u0430\u0437\u0443\u0445\u043e\u043c  \n\n\ud83d\udea8 \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 #Kibana : ESA-2025-06 - \u0412 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u043e\u0442 8.15.0 \u0434\u043e 8.17.2 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 Prototype Pollution. \u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2025-25012) \u0438\u043c\u0435\u0435\u0442 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9.9.\n\n\u041a\u0442\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d \u0440\u0438\u0441\u043a\u0443?\n\u0412 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 8.15.0\u20138.17.0: \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441 \u0440\u043e\u043b\u044c\u044e Viewer.\n\u0412 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 8.17.1 \u0438 8.17.2: \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441 \u0440\u043e\u043b\u044f\u043c\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 fleet-all, integrations-all \u0438 actions:execute-advanced-connectors.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f:\n\u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435\u0441\u044c \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 Kibana 8.17.3.\n\u0415\u0441\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0434\u043e\u0431\u0430\u0432\u044c\u0442\u0435 \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e Kibana \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440:\n\nxpack.integration_assistant.enabled: false", "creation_timestamp": "2026-07-13T00:00:18.758573Z"}, {"uuid": "a49f30db-94c9-49b0-b47d-c63a14030da7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2558", "type": "seen", "source": "https://t.me/purp_sec/564", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2024-33452 \u2014  \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 HTTP Request Smuggling \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 lua-nginx-module \u0432 OpenResty. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0441 \u043c\u0435\u0442\u043e\u0434\u043e\u043c HEAD, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0442\u0435\u043b\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430. \u0412 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438\u0433\u043d\u043e\u0440\u0438\u0440\u0443\u044e\u0442 \u0442\u0435\u043b\u043e \u0442\u0430\u043a\u0438\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, lua-nginx-module \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u0442 \u0435\u0433\u043e \u043a\u0430\u043a \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043c\u0435\u0436\u0434\u0443 \u043f\u0440\u043e\u043a\u0441\u0438 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c.\u200b\n\n\ud83d\udd35 CVE-2025-1731 \u0438 CVE-2025-1732 \u2014 \u0431\u0430\u0433 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 Zyxel uOS, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 USG FLEX H Series. \u0421\u0432\u044f\u0437\u0430\u043d \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u043c \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0430\u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 PostgreSQL-\u043a\u043e\u043c\u0430\u043d\u0434\u0430\u0445, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0435 Linux \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\ud83d\udd35 CVE-2025-34028 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Commvault Command Center Innovation Release, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c ZIP-\u0430\u0440\u0445\u0438\u0432\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438 \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u043a\u0435 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0418 \u043f\u0430\u0440\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 WordPress:\n\n\ud83d\udd35 CVE-2025-3065 \u2014 \u043f\u043b\u0430\u0433\u0438\u043d Database Toolset. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0443\u0442\u0435\u0439 \u0444\u0430\u0439\u043b\u043e\u0432.\n\n\ud83d\udd35 CVE-2025-3603 \u2014 \u043f\u043b\u0430\u0433\u0438\u043d Flynax Bridge. \u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u0445\u0432\u0430\u0442 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438.\n\n\ud83d\udd35 CVE-2025-3058 \u2014 \u043f\u043b\u0430\u0433\u0438\u043d Xelion Webchat. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441 \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u00ab\u041f\u043e\u0434\u043f\u0438\u0441\u0447\u0438\u043a\u00bb \u0438 \u0432\u044b\u0448\u0435 \u043c\u0435\u043d\u044f\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0441\u0430\u0439\u0442\u0430.\n\n\ud83d\udd35 CVE-2025-2558 \u2014 \u0442\u0435\u043c\u0430 The Wound. \u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c LFI-\u0430\u0442\u0430\u043a\u0438 (Local File Inclusion).\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-16T00:00:56.736734Z"}, {"uuid": "c14829ff-5542-4c64-8cf1-cf9df84b6d47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25012", "type": "seen", "source": "https://t.me/securixy_kz/1123", "content": "\u0415\u0449\u0435 \u043e\u0434\u0438\u043d SOC \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441\u0434\u044b\u0440\u044f\u0432\u0438\u043b\u0441\u044f \u0441\u043b\u0435\u0434\u043e\u043c \u0437\u0430 \u0432\u0430\u0437\u0443\u0445\u043e\u043c  \n\n\ud83d\udea8 \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 #Kibana : ESA-2025-06 - \u0412 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u043e\u0442 8.15.0 \u0434\u043e 8.17.2 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 Prototype Pollution. \u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2025-25012) \u0438\u043c\u0435\u0435\u0442 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9.9.\n\n\u041a\u0442\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d \u0440\u0438\u0441\u043a\u0443?\n\u0412 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 8.15.0\u20138.17.0: \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441 \u0440\u043e\u043b\u044c\u044e Viewer.\n\u0412 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 8.17.1 \u0438 8.17.2: \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441 \u0440\u043e\u043b\u044f\u043c\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 fleet-all, integrations-all \u0438 actions:execute-advanced-connectors.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f:\n\u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435\u0441\u044c \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 Kibana 8.17.3.\n\u0415\u0441\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0434\u043e\u0431\u0430\u0432\u044c\u0442\u0435 \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e Kibana \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440:\n\nxpack.integration_assistant.enabled: false", "creation_timestamp": "2026-07-14T00:01:01.772687Z"}, {"uuid": "67e7690a-29fa-4808-bc96-8d01c457cca9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25231", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-14)", "content": "", "creation_timestamp": "2026-07-15T10:00:14.702325Z"}, {"uuid": "8b4a1a3c-53f0-4f1d-a3d9-50ac343f11fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-17)", "content": "", "creation_timestamp": "2026-08-18T10:15:08.509237Z"}, {"uuid": "aa1b974d-7490-4a02-9c71-6386b1d2472d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25034", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-17)", "content": "", "creation_timestamp": "2026-08-18T10:15:13.437617Z"}, {"uuid": "4e24d716-fa4b-44e5-86cd-e69139fca643", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "Telegram/LppojwiQV5PI9qngPj6LQs_MwSAU7d0ss-XrB3HRKp37Mv4", "content": "", "creation_timestamp": "2026-07-14T23:00:03.666861Z"}, {"uuid": "14b92667-2868-46f6-a9bf-8d8ac7b03b51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "Telegram/_AKWFO-a0ktG5Ekeag2S3B_FQYwNlIf6Tfc85k5ctm5VbY4", "content": "", "creation_timestamp": "2026-07-14T23:00:03.835603Z"}, {"uuid": "e12482e3-ac46-4f93-9cf9-c739295d0d55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "published-proof-of-concept", "source": "Telegram/_AKWFO-a0ktG5Ekeag2S3B_FQYwNlIf6Tfc85k5ctm5VbY4", "content": "", "creation_timestamp": "2026-07-15T00:00:05.360900Z"}, {"uuid": "410bf924-44e7-4909-9052-c4adc251d3b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "Telegram/LppojwiQV5PI9qngPj6LQs_MwSAU7d0ss-XrB3HRKp37Mv4", "content": "", "creation_timestamp": "2026-07-15T00:00:05.392322Z"}, {"uuid": "c0564ea8-c5a9-492e-b558-b1f14bb23b06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://t.me/HackerNewsAR/2146", "content": "\u062b\u063a\u0631\u0629 Fortinet FortiWeb \u0627\u0644\u062d\u0631\u062c\u0629\u060c \u062a\u0639\u062a\u0628\u0631 \u062d\u0627\u0644\u064a\u0627\u064b \u0627\u0644\u0623\u062e\u0637\u0631 \u0628\u064a\u0646 \u062b\u063a\u0631\u0627\u062a SQL Injection \u0627\u0644\u0646\u0634\u0637\u0629 \u0628\u0633\u0628\u0628 \u0633\u0647\u0648\u0644\u0629 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0648\u0634\u0645\u0648\u0644\u064a\u0629 \u062a\u0623\u062b\u064a\u0631\u0647\u0627 \u0639\u0644\u0649 \u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u0645\u0624\u0633\u0633\u0627\u062a \u0627\u0644\u062d\u0633\u0627\u0633\u0629.\n\n\u062c\u062f\u0627\u0631 \u062d\u0645\u0627\u064a\u0629 \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u0627\u062a Fortinet FortiWeb \u0647\u0648 \u062c\u0647\u0627\u0632 \u0623\u0648 \u0628\u0631\u0646\u0627\u0645\u062c \u0645\u0646 \u0634\u0631\u0643\u0629 Fortinet \u0645\u062e\u0635\u0635 \u0644\u062d\u0645\u0627\u064a\u0629 \u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0627\u0644\u0648\u064a\u0628 (Web Application Firewall)\u060c \u0648\u064a\u064f\u0633\u062a\u062e\u062f\u0645 \u0645\u0646 \u0642\u0628\u0644 \u0627\u0644\u0645\u0624\u0633\u0633\u0627\u062a \u0627\u0644\u0643\u0628\u0631\u0649 \u0645\u062b\u0644 \u0627\u0644\u0628\u0646\u0648\u0643\u060c \u0627\u0644\u0645\u0624\u0633\u0633\u0627\u062a \u0627\u0644\u0645\u0627\u0644\u064a\u0629\u060c \u0627\u0644\u062c\u0647\u0627\u062a \u0627\u0644\u062d\u0643\u0648\u0645\u064a\u0629 \u0648\u0627\u0644\u0634\u0631\u0643\u0627\u062a\u060c \u0644\u062d\u0645\u0627\u064a\u0629 \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0648\u0627\u0644\u0645\u0648\u0627\u0642\u0639 \u0627\u0644\u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a\u0629 \u0639\u0644\u0649 \u0627\u0644\u0625\u0646\u062a\u0631\u0646\u062a \u0645\u0646 \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a\u0629\u060c \u062e\u0627\u0635\u0629 \u0647\u062c\u0645\u0627\u062a SQL Injection \u0648XSS \u0648\u0633\u0648\u0621 \u0627\u0644\u062a\u0643\u0648\u064a\u0646 \u0648\u063a\u064a\u0631\u0647\u0627.\n\n\u062a\u0645 \u0627\u0643\u062a\u0634\u0627\u0641 \u0627\u0644\u062b\u063a\u0631\u0629 \u0641\u064a \u064a\u0648\u0644\u064a\u0648 2025 \u0648\u062d\u0645\u0644\u062a \u0627\u0644\u0631\u0645\u0632 CVE-2025-25257 \u0648\u062a\u0624\u062b\u0631 \u0639\u0644\u0649 \u0646\u0638\u0627\u0645 FortiWeb \u060c \u0648\u064a\u0633\u062a\u0637\u064a\u0639 \u0623\u064a \u0645\u0647\u0627\u062c\u0645 \u0625\u0631\u0633\u0627\u0644 \u0637\u0644\u0628\u0627\u062a HTTP \u0623\u0648 HTTPS \u0645\u0635\u0645\u0645\u0629 \u062e\u0635\u064a\u0635\u064b\u0627 \u0625\u0644\u0649 \u0645\u0643\u0648\u0646 Fabric Connector \u0641\u064a FortiWeb\u060c \u0644\u062a\u0646\u0641\u0630 \u0627\u0633\u062a\u0639\u0644\u0627\u0645\u0627\u062a SQL \u0645\u0628\u0627\u0634\u0631\u0629 \u0641\u064a \u0642\u0627\u0639\u062f\u0629 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u062e\u0644\u0641\u064a\u0629 \u0628\u062f\u0648\u0646 \u0627\u0644\u062d\u0627\u062c\u0629 \u0644\u0623\u064a \u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0639\u062a\u0645\u0627\u062f\u060c \u0648\u0627\u0644\u0633\u0628\u0628 \u0647\u0648 \u0623\u0646 \u0627\u0644\u0646\u0638\u0627\u0645 \u0643\u0627\u0646 \u064a\u064f\u062f\u0631\u062c \u0645\u062f\u062e\u0644\u0627\u062a \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u064a\u0646 \u0645\u0628\u0627\u0634\u0631\u0629\u064b \u062f\u0627\u062e\u0644 \u0627\u0633\u062a\u0639\u0644\u0627\u0645\u0627\u062a SQL \u062f\u0648\u0646 \u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0635\u062d\u0629 \u0623\u0648 \u062a\u0639\u0642\u064a\u0645 \u0647\u0630\u0647 \u0627\u0644\u0645\u062f\u062e\u0644\u0627\u062a. \u064a\u0633\u062a\u063a\u0644 \u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u0627\u0644\u062b\u063a\u0631\u0629 \u0644\u0633\u0631\u0642\u0629 \u0628\u064a\u0627\u0646\u0627\u062a \u0633\u0631\u064a\u0629\u060c \u0631\u0641\u0639 \u0627\u0644\u0627\u0645\u062a\u064a\u0627\u0632\u0627\u062a\u060c \u0648\u062a\u062e\u0631\u064a\u0628 \u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u062d\u0645\u0627\u064a\u0629 \u0623\u0648 \u062a\u0639\u0637\u064a\u0644 \u062e\u062f\u0645\u0627\u062a \u0627\u0644\u0645\u0624\u0633\u0633\u0629 \u0628\u0627\u0644\u0643\u0627\u0645\u0644.\n#HackerNews #Fortinet #FortiWeb #CVE202525257", "creation_timestamp": "2026-07-15T10:00:04.545710Z"}, {"uuid": "64846d12-adeb-4ecb-916d-4790d3b3fb51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "published-proof-of-concept", "source": "https://t.me/breachdetector/834726", "content": "{\n  \"Source\": \"https://gerki.pw/\",\n  \"Content\": \"CVE-2025-25256: FortiSIEM \u043b\u043e\u043c\u0430\u044e\u0442 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438. \u0427\u0435\u0440\u0435\u0437 \u043e\u0434\u0438\u043d \u0437\u0430\u043f\u0440\u043e\u0441 \u043a CLI-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443\", \n  \"author\": \"\",\n  \"Detection Date\": \"14 Aug 2025\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 t.me/breachdetector \ud83d\udd39", "creation_timestamp": "2026-07-15T10:00:04.816487Z"}, {"uuid": "8da6ddf6-771e-4ae1-9b5a-71a8c93ce990", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-14)", "content": "", "creation_timestamp": "2026-07-15T10:15:07.605825Z"}, {"uuid": "521af056-8f4c-44f7-a452-f6e149b4e8de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25037", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-27)", "content": "", "creation_timestamp": "2026-08-28T10:15:50.279758Z"}, {"uuid": "d8d113b6-024c-443a-8a5c-d3bfd660e9cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://t.me/HackerNewsAR/2146", "content": "\u062b\u063a\u0631\u0629 Fortinet FortiWeb \u0627\u0644\u062d\u0631\u062c\u0629\u060c \u062a\u0639\u062a\u0628\u0631 \u062d\u0627\u0644\u064a\u0627\u064b \u0627\u0644\u0623\u062e\u0637\u0631 \u0628\u064a\u0646 \u062b\u063a\u0631\u0627\u062a SQL Injection \u0627\u0644\u0646\u0634\u0637\u0629 \u0628\u0633\u0628\u0628 \u0633\u0647\u0648\u0644\u0629 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0648\u0634\u0645\u0648\u0644\u064a\u0629 \u062a\u0623\u062b\u064a\u0631\u0647\u0627 \u0639\u0644\u0649 \u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u0645\u0624\u0633\u0633\u0627\u062a \u0627\u0644\u062d\u0633\u0627\u0633\u0629.\n\n\u062c\u062f\u0627\u0631 \u062d\u0645\u0627\u064a\u0629 \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u0627\u062a Fortinet FortiWeb \u0647\u0648 \u062c\u0647\u0627\u0632 \u0623\u0648 \u0628\u0631\u0646\u0627\u0645\u062c \u0645\u0646 \u0634\u0631\u0643\u0629 Fortinet \u0645\u062e\u0635\u0635 \u0644\u062d\u0645\u0627\u064a\u0629 \u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0627\u0644\u0648\u064a\u0628 (Web Application Firewall)\u060c \u0648\u064a\u064f\u0633\u062a\u062e\u062f\u0645 \u0645\u0646 \u0642\u0628\u0644 \u0627\u0644\u0645\u0624\u0633\u0633\u0627\u062a \u0627\u0644\u0643\u0628\u0631\u0649 \u0645\u062b\u0644 \u0627\u0644\u0628\u0646\u0648\u0643\u060c \u0627\u0644\u0645\u0624\u0633\u0633\u0627\u062a \u0627\u0644\u0645\u0627\u0644\u064a\u0629\u060c \u0627\u0644\u062c\u0647\u0627\u062a \u0627\u0644\u062d\u0643\u0648\u0645\u064a\u0629 \u0648\u0627\u0644\u0634\u0631\u0643\u0627\u062a\u060c \u0644\u062d\u0645\u0627\u064a\u0629 \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0648\u0627\u0644\u0645\u0648\u0627\u0642\u0639 \u0627\u0644\u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a\u0629 \u0639\u0644\u0649 \u0627\u0644\u0625\u0646\u062a\u0631\u0646\u062a \u0645\u0646 \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a\u0629\u060c \u062e\u0627\u0635\u0629 \u0647\u062c\u0645\u0627\u062a SQL Injection \u0648XSS \u0648\u0633\u0648\u0621 \u0627\u0644\u062a\u0643\u0648\u064a\u0646 \u0648\u063a\u064a\u0631\u0647\u0627.\n\n\u062a\u0645 \u0627\u0643\u062a\u0634\u0627\u0641 \u0627\u0644\u062b\u063a\u0631\u0629 \u0641\u064a \u064a\u0648\u0644\u064a\u0648 2025 \u0648\u062d\u0645\u0644\u062a \u0627\u0644\u0631\u0645\u0632 CVE-2025-25257 \u0648\u062a\u0624\u062b\u0631 \u0639\u0644\u0649 \u0646\u0638\u0627\u0645 FortiWeb \u060c \u0648\u064a\u0633\u062a\u0637\u064a\u0639 \u0623\u064a \u0645\u0647\u0627\u062c\u0645 \u0625\u0631\u0633\u0627\u0644 \u0637\u0644\u0628\u0627\u062a HTTP \u0623\u0648 HTTPS \u0645\u0635\u0645\u0645\u0629 \u062e\u0635\u064a\u0635\u064b\u0627 \u0625\u0644\u0649 \u0645\u0643\u0648\u0646 Fabric Connector \u0641\u064a FortiWeb\u060c \u0644\u062a\u0646\u0641\u0630 \u0627\u0633\u062a\u0639\u0644\u0627\u0645\u0627\u062a SQL \u0645\u0628\u0627\u0634\u0631\u0629 \u0641\u064a \u0642\u0627\u0639\u062f\u0629 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u062e\u0644\u0641\u064a\u0629 \u0628\u062f\u0648\u0646 \u0627\u0644\u062d\u0627\u062c\u0629 \u0644\u0623\u064a \u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0639\u062a\u0645\u0627\u062f\u060c \u0648\u0627\u0644\u0633\u0628\u0628 \u0647\u0648 \u0623\u0646 \u0627\u0644\u0646\u0638\u0627\u0645 \u0643\u0627\u0646 \u064a\u064f\u062f\u0631\u062c \u0645\u062f\u062e\u0644\u0627\u062a \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u064a\u0646 \u0645\u0628\u0627\u0634\u0631\u0629\u064b \u062f\u0627\u062e\u0644 \u0627\u0633\u062a\u0639\u0644\u0627\u0645\u0627\u062a SQL \u062f\u0648\u0646 \u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0635\u062d\u0629 \u0623\u0648 \u062a\u0639\u0642\u064a\u0645 \u0647\u0630\u0647 \u0627\u0644\u0645\u062f\u062e\u0644\u0627\u062a. \u064a\u0633\u062a\u063a\u0644 \u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u0627\u0644\u062b\u063a\u0631\u0629 \u0644\u0633\u0631\u0642\u0629 \u0628\u064a\u0627\u0646\u0627\u062a \u0633\u0631\u064a\u0629\u060c \u0631\u0641\u0639 \u0627\u0644\u0627\u0645\u062a\u064a\u0627\u0632\u0627\u062a\u060c \u0648\u062a\u062e\u0631\u064a\u0628 \u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u062d\u0645\u0627\u064a\u0629 \u0623\u0648 \u062a\u0639\u0637\u064a\u0644 \u062e\u062f\u0645\u0627\u062a \u0627\u0644\u0645\u0624\u0633\u0633\u0629 \u0628\u0627\u0644\u0643\u0627\u0645\u0644.\n#HackerNews #Fortinet #FortiWeb #CVE202525257", "creation_timestamp": "2026-07-16T00:00:19.983002Z"}, {"uuid": "3605e2b2-57cc-427d-b7e3-5bcf4ad30202", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "published-proof-of-concept", "source": "https://t.me/breachdetector/834726", "content": "{\n  \"Source\": \"https://gerki.pw/\",\n  \"Content\": \"CVE-2025-25256: FortiSIEM \u043b\u043e\u043c\u0430\u044e\u0442 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438. \u0427\u0435\u0440\u0435\u0437 \u043e\u0434\u0438\u043d \u0437\u0430\u043f\u0440\u043e\u0441 \u043a CLI-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443\", \n  \"author\": \"\",\n  \"Detection Date\": \"14 Aug 2025\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 t.me/breachdetector \ud83d\udd39", "creation_timestamp": "2026-07-16T00:00:20.251721Z"}, {"uuid": "64b8be6f-80ff-4245-9fed-f26922e042dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-15)", "content": "", "creation_timestamp": "2026-07-16T10:15:08.901165Z"}, {"uuid": "49f442a6-1727-4002-9f1c-f8db0d629528", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2563", "type": "seen", "source": "Telegram/qGjGKvIHGl6Yn5_gHhOpvFnUuL8T5z_DsxEiDzeWGTkisZw", "content": "", "creation_timestamp": "2026-08-27T12:00:05.741520Z"}, {"uuid": "03ae67fd-b5ff-4c1d-87ca-aae87d8fa32f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2563", "type": "seen", "source": "Telegram/FMxKlI5Q8oe-wqfdJhLf519zmPU2wTxgtOLa-sFM77th6qo", "content": "", "creation_timestamp": "2026-08-27T12:00:09.920656Z"}, {"uuid": "813d34bf-1e0d-4c0b-a27e-9dee438d229d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25250", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqrzvmjy3k2m", "content": "\u300cFortiOS\u300d\u306e\u300cSSL VPN\u300d\u8106\u5f31\u6027\u306b\u95a2\u3059\u308b\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u66f4\u65b0\n\nFortinet\u306f\u73fe\u5730\u6642\u95932026\u5e746\u670815\u65e5\u3001\u300cFortiOS\u300d\u3084\u300cFortiSASE\u300d\u304c\u5f71\u97ff\u3092\u53d7\u3051\u308b\u65e2\u77e5\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u66f4\u65b0\u3057\u3001\u56de\u907f\u7b56\u306b\u3064\u3044\u3066\u30a2\u30ca\u30a6\u30f3\u30b9\u3057\u305f\u3002\n\n\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u884c\u3063\u305f\u306e\u306f\u30012025\u5e746\u670810\u65e5\u306b\u516c\u958b\u3057\u305f\u8106\u5f31\u6027\u300cCVE-2025-25250\u300d\u306b\u95a2\u3059\u308b\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3002\u300cFortiOS\u300d\u306e\u300cSSL VPN\u30a6\u30a7\u30d6\u30e2\u30fc\u30c9\u300d\u306b\u304a\u3044\u3066\u6a5f\u5bc6\u60c5\u5831\u304c\u6f0f\u6d29\u3059\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u3002\n\n\u7d30\u5de5\u3055\u308c\u305fURL\u3092\u7528\u3044\u308b\u3053\u3068\u3067\u3001\u8a8d\u8a3c\u3055\u308c\u305f\u30e6\u30fc\u30b6\u30fc\u304c\u300cSSL VPN\u300d\u306e\u8a2d\u5b9a\u306b\u30a2\u30af\u30bb\u30b9\u3059\u308b\u3053\u3068\u304c\u53ef\u80fd\u3068\u306a\u308b\u3002", "creation_timestamp": "2026-07-16T20:05:48.255335Z"}, {"uuid": "61e8ad4b-65e2-46f1-beef-b00d53ec36ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-16)", "content": "", "creation_timestamp": "2026-07-17T10:15:08.140655Z"}, {"uuid": "36bfac5b-9a8e-4feb-9b0b-e8304bac8b01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-17)", "content": "", "creation_timestamp": "2026-07-18T10:15:08.321965Z"}, {"uuid": "08211347-7cd8-4146-a965-6b6a24c927c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2563", "type": "published-proof-of-concept", "source": "Telegram/qGjGKvIHGl6Yn5_gHhOpvFnUuL8T5z_DsxEiDzeWGTkisZw", "content": "", "creation_timestamp": "2026-08-28T00:00:44.129783Z"}, {"uuid": "8b2c6ecf-2b17-4e84-aa33-091bc1ba8530", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-18)", "content": "", "creation_timestamp": "2026-07-19T10:15:11.327803Z"}, {"uuid": "a2ab0774-a94f-42a7-b32d-1d56e5881dc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "Telegram/yxknKOz_f0BNHm86eQ59WitOHvMJp_PMyAlwa2X5Ygij0_g", "content": "", "creation_timestamp": "2026-07-20T19:00:03.848474Z"}, {"uuid": "d8892202-9beb-40c2-9968-3f0da645ef5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "Telegram/w1rTJbF1WgwANU6H-_gZsoXK42A_cpNJRwImWMk1u30TAzQ", "content": "", "creation_timestamp": "2026-07-20T19:00:04.163677Z"}, {"uuid": "f1da8ce1-4448-47f8-ae27-cb38dca6937d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/6356", "content": "Fortinet Warns About FortiSIEM Vulnerability (CVE-2025-25256) With In-the-Wild Exploit Code \u2013 thehackernews.com\n\nWed, 13 Aug 2025 19:37:00", "creation_timestamp": "2026-07-20T19:00:06.385756Z"}, {"uuid": "c18a426e-386a-44fb-929a-654afa827d26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25226", "type": "seen", "source": "https://t.me/pphm_HackerNews/307", "content": "Critical Weaknesses in Popular CMS Demand Urgent Fixes\n\nResearchers have discovered a critical SQL injection vulnerability in Joomla\u2019s Database library, specifically affecting the quoteNameStr function. While this function isn't used directly in the CMS core, custom-developed extensions that override it may be at serious risk.- CVE ID: CVE-2025-25226  - Severity: 9.8 (Critical)  - Impact: Potential execution of malicious SQL queries by remote attackers\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-20T22:00:03.726961Z"}, {"uuid": "df6a501d-244c-45e9-8df6-e5c9a41cd3ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25012", "type": "seen", "source": "https://t.me/claytechsolution/189", "content": "The Hacker News\nElastic Releases Urgent Fix for Critical Kibana Vulnerability Enabling Remote Code Execution\n\nElastic has rolled out security updates to address a critical security flaw impacting the Kibana data visualization dashboard software for Elasticsearch that could result in arbitrary code execution.\nThe vulnerability, tracked as CVE-2025-25012, carries a CVSS score of 9.9 out of a maximum of 10.0. It has been described as a case of prototype pollution.\n\"Prototype pollution in Kibana leads to", "creation_timestamp": "2026-07-20T22:00:05.877241Z"}, {"uuid": "4942a923-a61b-4040-975f-524d588706df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25012", "type": "seen", "source": "https://t.me/claytechsolution/189", "content": "The Hacker News\nElastic Releases Urgent Fix for Critical Kibana Vulnerability Enabling Remote Code Execution\n\nElastic has rolled out security updates to address a critical security flaw impacting the Kibana data visualization dashboard software for Elasticsearch that could result in arbitrary code execution.\nThe vulnerability, tracked as CVE-2025-25012, carries a CVSS score of 9.9 out of a maximum of 10.0. It has been described as a case of prototype pollution.\n\"Prototype pollution in Kibana leads to", "creation_timestamp": "2026-07-21T00:00:08.489965Z"}, {"uuid": "da98a012-d77c-4db0-af38-bb0964947135", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "exploited", "source": "Telegram/w1rTJbF1WgwANU6H-_gZsoXK42A_cpNJRwImWMk1u30TAzQ", "content": "", "creation_timestamp": "2026-07-21T00:00:19.944589Z"}, {"uuid": "7f41b0b3-a249-4644-97a5-f17e44814c69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25226", "type": "seen", "source": "https://t.me/pphm_HackerNews/307", "content": "Critical Weaknesses in Popular CMS Demand Urgent Fixes\n\nResearchers have discovered a critical SQL injection vulnerability in Joomla\u2019s Database library, specifically affecting the quoteNameStr function. While this function isn't used directly in the CMS core, custom-developed extensions that override it may be at serious risk.- CVE ID: CVE-2025-25226  - Severity: 9.8 (Critical)  - Impact: Potential execution of malicious SQL queries by remote attackers\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-21T00:00:10.106401Z"}, {"uuid": "280a5e38-230d-4eb9-8476-d30af3873250", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "exploited", "source": "Telegram/yxknKOz_f0BNHm86eQ59WitOHvMJp_PMyAlwa2X5Ygij0_g", "content": "", "creation_timestamp": "2026-07-21T00:00:20.300660Z"}, {"uuid": "0317d8ab-b7b3-44a0-8d43-cea02c6def99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/6356", "content": "Fortinet Warns About FortiSIEM Vulnerability (CVE-2025-25256) With In-the-Wild Exploit Code \u2013 thehackernews.com\n\nWed, 13 Aug 2025 19:37:00", "creation_timestamp": "2026-07-21T00:00:24.174870Z"}, {"uuid": "e443e91b-66ab-4351-a6f1-496421c01d25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25037", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-20)", "content": "", "creation_timestamp": "2026-07-21T10:16:16.917403Z"}, {"uuid": "edb4d076-3fe9-4329-8bc3-777153cfcac8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/6356", "content": "Fortinet Warns About FortiSIEM Vulnerability (CVE-2025-25256) With In-the-Wild Exploit Code \u2013 thehackernews.com\n\nWed, 13 Aug 2025 19:37:00", "creation_timestamp": "2026-07-22T00:00:29.947002Z"}, {"uuid": "5cb0ce16-db3c-4392-8b82-ac3415f15f4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2563", "type": "seen", "source": "Telegram/FMxKlI5Q8oe-wqfdJhLf519zmPU2wTxgtOLa-sFM77th6qo", "content": "", "creation_timestamp": "2026-08-28T00:00:52.591240Z"}, {"uuid": "195e4532-bd5b-447c-9bf7-cea05240b412", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://t.me/pphm_HackerNews/818", "content": "Centralized Security Tool Exposes Critical Risk via Remote Injection\n\nFortinet has confirmed the presence of a severe vulnerability\u2014CVE-2025-25256\u2014in FortiSIEM, its security information and event management platform. This flaw enables unauthenticated remote attackers to execute arbitrary OS commands. Alarmingly, the company noted that \u201cpractical exploit code for this vulnerability was found in the wild.\u201d\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-22T05:00:05.426752Z"}, {"uuid": "fdfb0dc0-d1d9-448d-9a45-4536256700ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "exploited", "source": "https://t.me/pphm_HackerNews/818", "content": "Centralized Security Tool Exposes Critical Risk via Remote Injection\n\nFortinet has confirmed the presence of a severe vulnerability\u2014CVE-2025-25256\u2014in FortiSIEM, its security information and event management platform. This flaw enables unauthenticated remote attackers to execute arbitrary OS commands. Alarmingly, the company noted that \u201cpractical exploit code for this vulnerability was found in the wild.\u201d\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-23T00:00:24.636419Z"}, {"uuid": "f73506fa-aa6a-4c1f-b9d9-bc1d5bfa6f09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-30)", "content": "", "creation_timestamp": "2026-08-31T10:15:10.872983Z"}, {"uuid": "99e1f43c-ed6c-4bb5-9be6-4c50d25cbbec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "seen", "source": "https://t.me/ZerodayAlert/445", "content": "Signature Wrapping \u0430\u0442\u0430\u043a\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0447\u0435\u0440\u0435\u0437 ruby-saml\n\n\ud83d\udd10 \u0412 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 ruby-saml \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-25291 \u0438 CVE-2025-25292 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 8.8, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0440\u0430\u0437\u043b\u0438\u0447\u0438\u044f\u043c\u0438 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 XML \u043c\u0435\u0436\u0434\u0443 \u043f\u0430\u0440\u0441\u0435\u0440\u0430\u043c\u0438 REXML \u0438 Nokogiri, \u0447\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0430\u0442\u0430\u043a Signature Wrapping.\n\n\ud83d\udee1 \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043e\u0434\u043d\u0443 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u043f\u043e\u0434\u043f\u0438\u0441\u044c, \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u0442\u044c SAML-\u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u041f\u0440\u043e\u0442\u043e\u043a\u043e\u043b SAML \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0435\u0434\u0438\u043d\u043e\u0433\u043e \u0432\u0445\u043e\u0434\u0430 (SSO) \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u044b\u043c\u0438.\n\n\u26a1\ufe0f \u041f\u043e\u043c\u0438\u043c\u043e \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 ruby-saml \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 CVE-2025-25293 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 7.7, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043e\u0442\u043a\u0430\u0437\u043e\u043c \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0436\u0430\u0442\u044b\u0445 SAML-\u043e\u0442\u0432\u0435\u0442\u043e\u0432. \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439 1.12.4 \u0438\u043b\u0438 1.18.0, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u0432\u0441\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b.\n\n#saml #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:16.769237Z"}, {"uuid": "7d291af3-fd06-497f-a85c-3c250929cf77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25292", "type": "seen", "source": "https://t.me/ZerodayAlert/445", "content": "Signature Wrapping \u0430\u0442\u0430\u043a\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0447\u0435\u0440\u0435\u0437 ruby-saml\n\n\ud83d\udd10 \u0412 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 ruby-saml \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-25291 \u0438 CVE-2025-25292 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 8.8, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0440\u0430\u0437\u043b\u0438\u0447\u0438\u044f\u043c\u0438 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 XML \u043c\u0435\u0436\u0434\u0443 \u043f\u0430\u0440\u0441\u0435\u0440\u0430\u043c\u0438 REXML \u0438 Nokogiri, \u0447\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0430\u0442\u0430\u043a Signature Wrapping.\n\n\ud83d\udee1 \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043e\u0434\u043d\u0443 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u043f\u043e\u0434\u043f\u0438\u0441\u044c, \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u0442\u044c SAML-\u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u041f\u0440\u043e\u0442\u043e\u043a\u043e\u043b SAML \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0435\u0434\u0438\u043d\u043e\u0433\u043e \u0432\u0445\u043e\u0434\u0430 (SSO) \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u044b\u043c\u0438.\n\n\u26a1\ufe0f \u041f\u043e\u043c\u0438\u043c\u043e \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 ruby-saml \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 CVE-2025-25293 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 7.7, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043e\u0442\u043a\u0430\u0437\u043e\u043c \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0436\u0430\u0442\u044b\u0445 SAML-\u043e\u0442\u0432\u0435\u0442\u043e\u0432. \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439 1.12.4 \u0438\u043b\u0438 1.18.0, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u0432\u0441\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b.\n\n#saml #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:15.355099Z"}, {"uuid": "c1bbc390-80b8-4e4b-b021-8d282e3ace65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25293", "type": "seen", "source": "https://t.me/ZerodayAlert/445", "content": "Signature Wrapping \u0430\u0442\u0430\u043a\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0447\u0435\u0440\u0435\u0437 ruby-saml\n\n\ud83d\udd10 \u0412 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 ruby-saml \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-25291 \u0438 CVE-2025-25292 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 8.8, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0440\u0430\u0437\u043b\u0438\u0447\u0438\u044f\u043c\u0438 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 XML \u043c\u0435\u0436\u0434\u0443 \u043f\u0430\u0440\u0441\u0435\u0440\u0430\u043c\u0438 REXML \u0438 Nokogiri, \u0447\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0430\u0442\u0430\u043a Signature Wrapping.\n\n\ud83d\udee1 \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043e\u0434\u043d\u0443 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u043f\u043e\u0434\u043f\u0438\u0441\u044c, \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u0442\u044c SAML-\u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u041f\u0440\u043e\u0442\u043e\u043a\u043e\u043b SAML \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0435\u0434\u0438\u043d\u043e\u0433\u043e \u0432\u0445\u043e\u0434\u0430 (SSO) \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u044b\u043c\u0438.\n\n\u26a1\ufe0f \u041f\u043e\u043c\u0438\u043c\u043e \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 ruby-saml \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 CVE-2025-25293 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 7.7, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043e\u0442\u043a\u0430\u0437\u043e\u043c \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0436\u0430\u0442\u044b\u0445 SAML-\u043e\u0442\u0432\u0435\u0442\u043e\u0432. \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439 1.12.4 \u0438\u043b\u0438 1.18.0, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u0432\u0441\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b.\n\n#saml #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:16.713765Z"}, {"uuid": "17d88478-a4ec-4623-ba82-d87a5fffce91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25291", "type": "seen", "source": "https://t.me/ZerodayAlert/445", "content": "Signature Wrapping \u0430\u0442\u0430\u043a\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0447\u0435\u0440\u0435\u0437 ruby-saml\n\n\ud83d\udd10 \u0412 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 ruby-saml \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-25291 \u0438 CVE-2025-25292 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 8.8, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0440\u0430\u0437\u043b\u0438\u0447\u0438\u044f\u043c\u0438 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 XML \u043c\u0435\u0436\u0434\u0443 \u043f\u0430\u0440\u0441\u0435\u0440\u0430\u043c\u0438 REXML \u0438 Nokogiri, \u0447\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0430\u0442\u0430\u043a Signature Wrapping.\n\n\ud83d\udee1 \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043e\u0434\u043d\u0443 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u043f\u043e\u0434\u043f\u0438\u0441\u044c, \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u0442\u044c SAML-\u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u041f\u0440\u043e\u0442\u043e\u043a\u043e\u043b SAML \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0435\u0434\u0438\u043d\u043e\u0433\u043e \u0432\u0445\u043e\u0434\u0430 (SSO) \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u044b\u043c\u0438.\n\n\u26a1\ufe0f \u041f\u043e\u043c\u0438\u043c\u043e \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 ruby-saml \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 CVE-2025-25293 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 7.7, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043e\u0442\u043a\u0430\u0437\u043e\u043c \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0436\u0430\u0442\u044b\u0445 SAML-\u043e\u0442\u0432\u0435\u0442\u043e\u0432. \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439 1.12.4 \u0438\u043b\u0438 1.18.0, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u0432\u0441\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b.\n\n#saml #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:13.567320Z"}, {"uuid": "4ced8805-7006-422a-8e65-be0f9f64dcbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25293", "type": "seen", "source": "https://t.me/ZerodayAlert/445", "content": "Signature Wrapping \u0430\u0442\u0430\u043a\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0447\u0435\u0440\u0435\u0437 ruby-saml\n\n\ud83d\udd10 \u0412 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 ruby-saml \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-25291 \u0438 CVE-2025-25292 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 8.8, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0440\u0430\u0437\u043b\u0438\u0447\u0438\u044f\u043c\u0438 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 XML \u043c\u0435\u0436\u0434\u0443 \u043f\u0430\u0440\u0441\u0435\u0440\u0430\u043c\u0438 REXML \u0438 Nokogiri, \u0447\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0430\u0442\u0430\u043a Signature Wrapping.\n\n\ud83d\udee1 \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043e\u0434\u043d\u0443 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u043f\u043e\u0434\u043f\u0438\u0441\u044c, \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u0442\u044c SAML-\u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u041f\u0440\u043e\u0442\u043e\u043a\u043e\u043b SAML \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0435\u0434\u0438\u043d\u043e\u0433\u043e \u0432\u0445\u043e\u0434\u0430 (SSO) \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u044b\u043c\u0438.\n\n\u26a1\ufe0f \u041f\u043e\u043c\u0438\u043c\u043e \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 ruby-saml \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 CVE-2025-25293 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 7.7, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043e\u0442\u043a\u0430\u0437\u043e\u043c \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0436\u0430\u0442\u044b\u0445 SAML-\u043e\u0442\u0432\u0435\u0442\u043e\u0432. \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439 1.12.4 \u0438\u043b\u0438 1.18.0, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u0432\u0441\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b.\n\n#saml #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:13.523473Z"}, {"uuid": "c29eec1d-ebb0-4252-89ce-04ed2069632a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25292", "type": "seen", "source": "https://t.me/ZerodayAlert/445", "content": "Signature Wrapping \u0430\u0442\u0430\u043a\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0447\u0435\u0440\u0435\u0437 ruby-saml\n\n\ud83d\udd10 \u0412 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 ruby-saml \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-25291 \u0438 CVE-2025-25292 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 8.8, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0440\u0430\u0437\u043b\u0438\u0447\u0438\u044f\u043c\u0438 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 XML \u043c\u0435\u0436\u0434\u0443 \u043f\u0430\u0440\u0441\u0435\u0440\u0430\u043c\u0438 REXML \u0438 Nokogiri, \u0447\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0430\u0442\u0430\u043a Signature Wrapping.\n\n\ud83d\udee1 \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043e\u0434\u043d\u0443 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u043f\u043e\u0434\u043f\u0438\u0441\u044c, \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u0442\u044c SAML-\u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u041f\u0440\u043e\u0442\u043e\u043a\u043e\u043b SAML \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0435\u0434\u0438\u043d\u043e\u0433\u043e \u0432\u0445\u043e\u0434\u0430 (SSO) \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u044b\u043c\u0438.\n\n\u26a1\ufe0f \u041f\u043e\u043c\u0438\u043c\u043e \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 ruby-saml \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 CVE-2025-25293 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 7.7, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043e\u0442\u043a\u0430\u0437\u043e\u043c \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0436\u0430\u0442\u044b\u0445 SAML-\u043e\u0442\u0432\u0435\u0442\u043e\u0432. \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439 1.12.4 \u0438\u043b\u0438 1.18.0, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u0432\u0441\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b.\n\n#saml #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:13.612356Z"}, {"uuid": "2c9cd921-5f1e-47c1-a100-8abe063a9e49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25012", "type": "seen", "source": "https://t.me/EchelonEyes/3714", "content": "Elastic \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0441\u0440\u043e\u0447\u043d\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Kibana\n\nElastic \u0441\u0440\u043e\u0447\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u043b\u0438\u044f\u044e\u0449\u0443\u044e \u043d\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u043f\u0430\u043d\u0435\u043b\u0438 \u0432\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 Kibana \u0434\u043b\u044f Elasticsearch. \u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2025-25012 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,9). \n\n\u00ab\u0417\u0430\u0433\u0440\u044f\u0437\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f\u0430 \u0432 Kibana \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b\u00bb, - \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0422\u0430\u043a\u043e\u0439 \u0442\u0438\u043f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u0430\u043a \u0437\u0430\u0433\u0440\u044f\u0437\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u0431\u044a\u0435\u043a\u0442\u0430\u043c\u0438 \u0438 \u0441\u0432\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 JavaScript \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u043a \u0434\u0430\u043d\u043d\u044b\u043c, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Kibana \u043c\u0435\u0436\u0434\u0443 8.15.0 \u0438 8.17.3 \u0438 \u0431\u044b\u043b \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 8.17.3.\n\n\u0423\u0442\u043e\u0447\u043d\u044f\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 Kibana \u043e\u0442 8.15.0 \u0438 \u0434\u043e 8.17.1 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0441 \u0440\u043e\u043b\u044c\u044e Viewer. \u0412 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 Kibana 8.17.1 \u0438 8.17.2 \u0435\u044e \u043c\u043e\u0433\u0443\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u0441\u0440\u0430\u0437\u0443 \u0442\u0440\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438: fleet-all, integrations-all \u0438 actions:execute-advanced-connectors.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e, \u0430 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u2013 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0444\u043b\u0430\u0433 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 Integration Assistant \u043d\u0430 false (\"xpack.integration_assistant.enabled: false\") \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Kibana (\"kibana.yml\").\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://discuss.elastic.co/t/kibana-8-17-3-security-update-esa-2025-06/375441 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c", "creation_timestamp": "2026-07-26T02:00:32.266529Z"}, {"uuid": "34472b57-aaab-4930-ade6-0d660fe8159a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25012", "type": "seen", "source": "https://t.me/EchelonEyes/3714", "content": "Elastic \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0441\u0440\u043e\u0447\u043d\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Kibana\n\nElastic \u0441\u0440\u043e\u0447\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u043b\u0438\u044f\u044e\u0449\u0443\u044e \u043d\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u043f\u0430\u043d\u0435\u043b\u0438 \u0432\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 Kibana \u0434\u043b\u044f Elasticsearch. \u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2025-25012 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,9). \n\n\u00ab\u0417\u0430\u0433\u0440\u044f\u0437\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f\u0430 \u0432 Kibana \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b\u00bb, - \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0422\u0430\u043a\u043e\u0439 \u0442\u0438\u043f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u0430\u043a \u0437\u0430\u0433\u0440\u044f\u0437\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u0431\u044a\u0435\u043a\u0442\u0430\u043c\u0438 \u0438 \u0441\u0432\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 JavaScript \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u043a \u0434\u0430\u043d\u043d\u044b\u043c, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Kibana \u043c\u0435\u0436\u0434\u0443 8.15.0 \u0438 8.17.3 \u0438 \u0431\u044b\u043b \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 8.17.3.\n\n\u0423\u0442\u043e\u0447\u043d\u044f\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 Kibana \u043e\u0442 8.15.0 \u0438 \u0434\u043e 8.17.1 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0441 \u0440\u043e\u043b\u044c\u044e Viewer. \u0412 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 Kibana 8.17.1 \u0438 8.17.2 \u0435\u044e \u043c\u043e\u0433\u0443\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u0441\u0440\u0430\u0437\u0443 \u0442\u0440\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438: fleet-all, integrations-all \u0438 actions:execute-advanced-connectors.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e, \u0430 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u2013 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0444\u043b\u0430\u0433 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 Integration Assistant \u043d\u0430 false (\"xpack.integration_assistant.enabled: false\") \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Kibana (\"kibana.yml\").\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://discuss.elastic.co/t/kibana-8-17-3-security-update-esa-2025-06/375441 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c", "creation_timestamp": "2026-07-27T00:00:38.033395Z"}, {"uuid": "d419ed9e-b9ff-42e1-b68d-3909feb79994", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2563", "type": "published-proof-of-concept", "source": "Telegram/FMxKlI5Q8oe-wqfdJhLf519zmPU2wTxgtOLa-sFM77th6qo", "content": "", "creation_timestamp": "2026-08-29T00:00:27.880952Z"}, {"uuid": "53a6cb4d-02a4-4eb7-8f6e-f8be89d8cd0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25012", "type": "seen", "source": "https://t.me/EchelonEyes/3714", "content": "Elastic \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0441\u0440\u043e\u0447\u043d\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Kibana\n\nElastic \u0441\u0440\u043e\u0447\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u043b\u0438\u044f\u044e\u0449\u0443\u044e \u043d\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u043f\u0430\u043d\u0435\u043b\u0438 \u0432\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 Kibana \u0434\u043b\u044f Elasticsearch. \u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2025-25012 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,9). \n\n\u00ab\u0417\u0430\u0433\u0440\u044f\u0437\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f\u0430 \u0432 Kibana \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b\u00bb, - \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0422\u0430\u043a\u043e\u0439 \u0442\u0438\u043f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u0430\u043a \u0437\u0430\u0433\u0440\u044f\u0437\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u0431\u044a\u0435\u043a\u0442\u0430\u043c\u0438 \u0438 \u0441\u0432\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 JavaScript \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u043a \u0434\u0430\u043d\u043d\u044b\u043c, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Kibana \u043c\u0435\u0436\u0434\u0443 8.15.0 \u0438 8.17.3 \u0438 \u0431\u044b\u043b \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 8.17.3.\n\n\u0423\u0442\u043e\u0447\u043d\u044f\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 Kibana \u043e\u0442 8.15.0 \u0438 \u0434\u043e 8.17.1 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0441 \u0440\u043e\u043b\u044c\u044e Viewer. \u0412 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 Kibana 8.17.1 \u0438 8.17.2 \u0435\u044e \u043c\u043e\u0433\u0443\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u0441\u0440\u0430\u0437\u0443 \u0442\u0440\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438: fleet-all, integrations-all \u0438 actions:execute-advanced-connectors.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e, \u0430 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u2013 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0444\u043b\u0430\u0433 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 Integration Assistant \u043d\u0430 false (\"xpack.integration_assistant.enabled: false\") \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Kibana (\"kibana.yml\").\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://discuss.elastic.co/t/kibana-8-17-3-security-update-esa-2025-06/375441 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c", "creation_timestamp": "2026-07-28T00:00:51.597480Z"}, {"uuid": "b9922c73-5736-430c-8462-780225ec0ae4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-23)", "content": "", "creation_timestamp": "2026-08-24T10:00:09.082444Z"}, {"uuid": "b041952e-8fb2-45fe-92f2-9eb223c8eb19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-23)", "content": "", "creation_timestamp": "2026-08-24T10:15:35.562482Z"}, {"uuid": "dc9bd7de-be93-41b5-b20b-888e8db75e5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25256", "type": "seen", "source": "https://t.me/reverseame/5343", "content": "Should Security Solutions Be Secure? Maybe We're All Wrong - Fortinet FortiSIEM Pre-Auth Command Injection (CVE-2025-25256) #FortiSIEM #CommandInjection #CVE202525256 #PreAuth #SIEMCompromise https://labs.watchtowr.com/should-security-solutions-be-secure-maybe-were-all-wrong-fortinet-fortisiem-pre-auth-command-injection-cve-2025-25256/", "creation_timestamp": "2026-07-29T12:02:02.107016Z"}, {"uuid": "232efb67-b3dd-4491-bf28-2c7a8ad442c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://t.me/reverseame/5282", "content": "FortiWeb Pre-Auth RCE (CVE-2025-25257) #FortiWeb #RCE #SQLi #CVE202525257 #PreAuth https://pwner.gg/blog/2025-07-10-fortiweb-fabric-rce", "creation_timestamp": "2026-07-29T12:02:02.847170Z"}, {"uuid": "644164a0-79a3-4863-9b5b-69261c6ece9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25364", "type": "seen", "source": "https://t.me/reverseame/5125", "content": "CVE-2025-25364: Speedify VPN MacOS privilege Escalation #CVE-2025-25364 #SpeedifyVPN #MacOS #PrivilegeEscalation #Patch https://blog.securelayer7.net/cve-2025-25364-speedify-vpn-macos-escalation/", "creation_timestamp": "2026-07-29T12:02:04.062384Z"}, {"uuid": "52d4d16a-6ccf-4456-904d-22bd259c7eee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25364", "type": "seen", "source": "https://t.me/reverseame/5125", "content": "CVE-2025-25364: Speedify VPN MacOS privilege Escalation #CVE-2025-25364 #SpeedifyVPN #MacOS #PrivilegeEscalation #Patch https://blog.securelayer7.net/cve-2025-25364-speedify-vpn-macos-escalation/", "creation_timestamp": "2026-07-30T00:02:15.151676Z"}, {"uuid": "a68c3dd6-155a-4f7c-a080-804b610995da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://t.me/reverseame/5282", "content": "FortiWeb Pre-Auth RCE (CVE-2025-25257) #FortiWeb #RCE #SQLi #CVE202525257 #PreAuth https://pwner.gg/blog/2025-07-10-fortiweb-fabric-rce", "creation_timestamp": "2026-07-30T00:02:14.099774Z"}, {"uuid": "1a77d826-8f18-4ee8-8303-2acf1d77363d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25037", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-26)", "content": "", "creation_timestamp": "2026-08-27T10:15:13.439985Z"}, {"uuid": "55e3aabd-3c61-43e2-b373-11958744c89f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://t.me/CyberDispatch/846", "content": "Attacker source AS12975 (PALTEL Autonomous System) \ud83c\uddf5\ud83c\uddf8\n\nVarious fabric endpoints are being exploited similar to CVE-2025-25257 (supplying malicious SQL code through authorization headers)", "creation_timestamp": "2026-08-29T20:00:21.096598Z"}, {"uuid": "22602c10-d50a-4d02-9a8d-3af5b4b59223", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://t.me/CyberDispatch/846", "content": "Attacker source AS12975 (PALTEL Autonomous System) \ud83c\uddf5\ud83c\uddf8\n\nVarious fabric endpoints are being exploited similar to CVE-2025-25257 (supplying malicious SQL code through authorization headers)", "creation_timestamp": "2026-08-30T00:00:46.795812Z"}, {"uuid": "5cd98ae6-e278-435e-83fd-85c3653dff91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://t.me/hacking_Attack/165766", "content": "CVE-2025\u201325257: FortiWeb SQL Injection to RCE Exposed\nhttps://medium.com/@kalariyahet23/cve-2025-25257-fortiweb-sql-injection-to-rce-exposed-9a2e0e9dd78e?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-01T20:00:20.887537Z"}, {"uuid": "71ac704d-f7eb-489b-8e12-f426e33b1bc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://t.me/hacking_Attack/165768", "content": "Intro: A Critical Flaw Under AttackContinue reading on Medium \u00bb (https://medium.com/@kalariyahet23/cve-2025-25257-fortiweb-sql-injection-to-rce-exposed-9a2e0e9dd78e?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-01T20:00:20.944348Z"}, {"uuid": "f1f9649f-22a1-47a6-b21e-80b2b7a3205a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2539", "type": "seen", "source": "https://t.me/hacking_Attack/160972", "content": "POC\u200a\u2014\u200aCVE-2025\u20132539 File Away <= 3.9.9.0.1\nhttps://medium.com/@verylazytech/poc-cve-2025-2539-file-away-3-9-9-0-1-ee5c84e42a92?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-01T20:00:23.811931Z"}, {"uuid": "8cbce0a5-c1c9-4c11-a9fc-12aa5acb8a26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2539", "type": "seen", "source": "https://t.me/hacking_Attack/160974", "content": "\u2728 Free linkContinue reading on Medium \u00bb (https://medium.com/@verylazytech/poc-cve-2025-2539-file-away-3-9-9-0-1-ee5c84e42a92?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-01T20:00:23.880459Z"}, {"uuid": "71a55e77-2ca9-4b3d-bbd9-2b758a2030fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://t.me/hacking_Attack/165768", "content": "Intro: A Critical Flaw Under AttackContinue reading on Medium \u00bb (https://medium.com/@kalariyahet23/cve-2025-25257-fortiweb-sql-injection-to-rce-exposed-9a2e0e9dd78e?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-02T01:00:38.183612Z"}, {"uuid": "6eab6b9c-76ef-43ac-a27a-7c93b1e9bc8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2539", "type": "seen", "source": "https://t.me/hacking_Attack/160972", "content": "POC\u200a\u2014\u200aCVE-2025\u20132539 File Away <= 3.9.9.0.1\nhttps://medium.com/@verylazytech/poc-cve-2025-2539-file-away-3-9-9-0-1-ee5c84e42a92?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-02T01:00:40.374567Z"}, {"uuid": "b7e0e073-15e5-4f49-8540-1f4f8ce0a70d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2539", "type": "seen", "source": "https://t.me/hacking_Attack/160974", "content": "\u2728 Free linkContinue reading on Medium \u00bb (https://medium.com/@verylazytech/poc-cve-2025-2539-file-away-3-9-9-0-1-ee5c84e42a92?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-02T01:00:40.432866Z"}, {"uuid": "37c8958b-45ce-4ec3-96dc-a94f15fd0673", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "seen", "source": "https://t.me/hacking_Attack/165766", "content": "CVE-2025\u201325257: FortiWeb SQL Injection to RCE Exposed\nhttps://medium.com/@kalariyahet23/cve-2025-25257-fortiweb-sql-injection-to-rce-exposed-9a2e0e9dd78e?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-02T01:00:38.128451Z"}, {"uuid": "ca9a7905-5b99-4db8-98c0-734f8ad0e7b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "exploited", "source": "https://t.me/hacking_Attack/165768", "content": "Intro: A Critical Flaw Under AttackContinue reading on Medium \u00bb (https://medium.com/@kalariyahet23/cve-2025-25257-fortiweb-sql-injection-to-rce-exposed-9a2e0e9dd78e?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T07:00:04.313832Z"}, {"uuid": "8826f28f-8f01-489e-8e1d-a5d78ca2f70b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/165766", "content": "CVE-2025\u201325257: FortiWeb SQL Injection to RCE Exposed\nhttps://medium.com/@kalariyahet23/cve-2025-25257-fortiweb-sql-injection-to-rce-exposed-9a2e0e9dd78e?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-03T07:00:04.372051Z"}, {"uuid": "14ac25a4-8800-404e-ac68-0ecf18234961", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2539", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/160974", "content": "\u2728 Free linkContinue reading on Medium \u00bb (https://medium.com/@verylazytech/poc-cve-2025-2539-file-away-3-9-9-0-1-ee5c84e42a92?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T10:00:04.135668Z"}, {"uuid": "5bb753bb-5969-4e48-973f-ad0fc611262c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2539", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/160972", "content": "POC\u200a\u2014\u200aCVE-2025\u20132539 File Away <= 3.9.9.0.1\nhttps://medium.com/@verylazytech/poc-cve-2025-2539-file-away-3-9-9-0-1-ee5c84e42a92?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-03T10:00:04.189328Z"}, {"uuid": "dc899ef7-1a6a-4e5c-98b4-c4d3e8afd679", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2539", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/160972", "content": "POC\u200a\u2014\u200aCVE-2025\u20132539 File Away <= 3.9.9.0.1\nhttps://medium.com/@verylazytech/poc-cve-2025-2539-file-away-3-9-9-0-1-ee5c84e42a92?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-04T00:00:53.596438Z"}, {"uuid": "11f9b61b-c333-4c36-80f5-661c3122e46a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2539", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/160974", "content": "\u2728 Free linkContinue reading on Medium \u00bb (https://medium.com/@verylazytech/poc-cve-2025-2539-file-away-3-9-9-0-1-ee5c84e42a92?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:00:53.545422Z"}, {"uuid": "35fb2d4d-c7e5-4f00-8049-63ae44f8bb86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "exploited", "source": "https://t.me/hacking_Attack/165768", "content": "Intro: A Critical Flaw Under AttackContinue reading on Medium \u00bb (https://medium.com/@kalariyahet23/cve-2025-25257-fortiweb-sql-injection-to-rce-exposed-9a2e0e9dd78e?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:00:58.690647Z"}, {"uuid": "f9fe92a0-ae18-4da3-ac9d-f279c450eafd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/165766", "content": "CVE-2025\u201325257: FortiWeb SQL Injection to RCE Exposed\nhttps://medium.com/@kalariyahet23/cve-2025-25257-fortiweb-sql-injection-to-rce-exposed-9a2e0e9dd78e?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-04T00:00:58.734035Z"}, {"uuid": "5c281563-fd6d-4ecc-8756-c4d76b74f85e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25615", "type": "seen", "source": "Telegram/PY8bWpO043D-Z_8Y-HNjpKbgrcjpV_8amEBJErFv8jCkTtc", "content": "", "creation_timestamp": "2026-09-04T05:00:05.324821Z"}, {"uuid": "54ee506a-b40e-4ecd-bd4a-11399749e3f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25615", "type": "published-proof-of-concept", "source": "Telegram/PY8bWpO043D-Z_8Y-HNjpKbgrcjpV_8amEBJErFv8jCkTtc", "content": "", "creation_timestamp": "2026-09-05T01:00:37.550477Z"}, {"uuid": "ae99ce02-ec8e-41c3-982b-6fcb756597ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25037", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-04)", "content": "", "creation_timestamp": "2026-09-05T10:15:36.894617Z"}, {"uuid": "720fd527-7cbc-47dc-8736-3585e6222915", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "published-proof-of-concept", "source": "Telegram/E_WyzaOudgwaNXoA105LhIEanQUj5hipt6F_RZ98nQPfTHQ", "content": "", "creation_timestamp": "2026-09-05T13:00:04.779852Z"}, {"uuid": "491a7785-93fb-45db-a956-5415680ef746", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "published-proof-of-concept", "source": "Telegram/E_WyzaOudgwaNXoA105LhIEanQUj5hipt6F_RZ98nQPfTHQ", "content": "", "creation_timestamp": "2026-09-06T00:00:46.159573Z"}, {"uuid": "3479bf7f-3cb9-427d-8c59-141347aa849d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25205", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/audiobookshelf_auth_bypass.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"swiftbird07\", \"Kenneth LaCroix\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module detects Audiobookshelf servers affected by CVE-2025-25205, an\\n          unauthenticated authentication bypass. Affected versions (2.17.0 through\\n          2.19.0) decide whether a GET request may skip authentication by testing an\\n          unanchored regular expression against the request's full original URL,\\n          including the query string, rather than the normalized path. By appending a\\n          query parameter whose value contains a whitelisted substring such as\\n          /api/items/1/cover, an unauthenticated client reaches protected API\\n          endpoints.\\n\\n          The module fingerprints the server and version through the unauthenticated\\n          /status endpoint, then sends two requests to the protected /api/libraries\\n          endpoint: a baseline request that must be rejected with HTTP 401, and a\\n          bypass request carrying the whitelisted substring in its query string. On a\\n          vulnerable server the bypass request is processed instead of rejected, which\\n          this module treats as confirmation. It deliberately avoids endpoints such as\\n          /api/users that crash the server process (the denial-of-service half of this\\n          CVE).\", \"disclosure_date\": \"2025-02-12\", \"fullname\": \"auxiliary/scanner/http/audiobookshelf_auth_bypass\", \"is_install_path\": true, \"mod_time\": \"2026-06-21 11:58:01 +0000\", \"name\": \"Audiobookshelf Unauthenticated API Authentication Bypass Scanner\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/scanner/http/audiobookshelf_auth_bypass.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/http/audiobookshelf_auth_bypass\", \"references\": [\"CVE-2025-25205\", \"GHSA-pg8v-5jcv-wrvw\", \"URL-https://github.com/advplyr/audiobookshelf/commit/ec6537656925a43871b07cfee12c9f383844d224\"], \"rport\": 13378, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:27.801126Z"}, {"uuid": "eee82393-3855-418a-817b-4500451eae99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3muyv4iz2nk2q", "content": "CVE-2025-25249 Exploitation Delivers PivotC2, a FortiGate Post-Exploitation RAT", "creation_timestamp": "2026-09-08T11:09:33.498334Z"}, {"uuid": "8c9d4e16-866b-4b5f-b47f-7ca4ba1d4b3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/theitnerd.ca/post/3muzctk7zya2o", "content": "FortiGate Post-Exploitation RAT, PivotC2\u00a0Spotted by\u00a0SOCRadar\n\nThe SOCRadar Threat Research Unit (STRU) identified, with high confidence, exploitation of CVE-2025-25249, a heap-based buffer overflow vulnerability in FortiOS and FortiSwitchManager cw_acd daemon....", "creation_timestamp": "2026-09-08T15:15:05.898963Z"}, {"uuid": "d7ffcb3f-d6d8-48e0-927f-4f8d7d452bfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3muzj6j3onp2t", "content": "FortiGate firewalls hit by CVE-2025-25249 exploit deploying PivotC2 malware at scale. #Security #FortiGate #NodeJS #PivotC2 #CyberAttack #Vulnerability thedailytechfeed.com/major-fortig...", "creation_timestamp": "2026-09-08T17:08:36.275133Z"}, {"uuid": "c35bb098-4c0e-4fa7-b53b-8d5495233ad4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-25249", "type": "seen", "source": "https://infosec.exchange/users/threatcodex/statuses/117236565143530281", "content": "CVE-2025-25249 Exploitation Delivers PivotC2, a FortiGate Post-Exploitation RAT#CVE_2025_25249 #PivotC2 https://socradar.io/blog/cve-2025-25249-pivotc2-fortigate-rat/", "creation_timestamp": "2026-09-08T17:20:18.364292Z"}, {"uuid": "19db44aa-a754-4a8e-834d-40d0c5877f47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-2524", "type": "seen", "source": "https://infosec.exchange/users/threatcodex/statuses/117236565143530281", "content": "CVE-2025-25249 Exploitation Delivers PivotC2, a FortiGate Post-Exploitation RAT#CVE_2025_25249 #PivotC2 https://socradar.io/blog/cve-2025-25249-pivotc2-fortigate-rat/", "creation_timestamp": "2026-09-08T17:20:18.412224Z"}, {"uuid": "fde937e1-ea93-49db-9dd7-d6e5fbb67f64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2563", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_user_registration_membership_escalation.rb", "content": "{\"aliases\": [], \"arch\": \"php, cmd\", \"author\": [\"wesley (wcraft)\", \"Valentin Lobstein\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"Exploits CVE-2025-2563 in the WordPress User Registration & Membership plugin.\\n          1) Registers a free-membership user via AJAX.\\n          2) Elevates that user to administrator via the membership AJAX action.\\n          3) Logs in, uploads & executes a PHP payload.\", \"disclosure_date\": \"2025-03-24\", \"fullname\": \"exploit/multi/http/wp_user_registration_membership_escalation\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:04 +0000\", \"name\": \"WP User Registration and Membership Unauthenticated Privilege Escalation (CVE-2025-2563)\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/wp_user_registration_membership_escalation.rb\", \"platform\": \"Linux,PHP,Unix,Windows\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"multi/http/wp_user_registration_membership_escalation\", \"references\": [\"CVE-2025-2563\", \"WPVDB-2c0f62a1-9510-4f90-a297-17634e6c8b75\", \"URL-https://pentest-tools.com/vulnerabilities-exploits/user-registration-and-membership-411-unauthenticated-privilege-escalation_26968\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"PHP In-Memory\", \"Unix In-Memory\", \"Windows In-Memory\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:23.449705Z"}, {"uuid": "0c75aa53-2521-429f-a6ee-f52c7d516065", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25034", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/sugarcrm_rest_unserialize_exec.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"EgiX\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a PHP Object Injection vulnerability in SugarCRM CE <= 6.5.23\\n          which could be abused to allow unauthenticated users to execute arbitrary PHP code with\\n          the permissions of the webserver. The dangerous unserialize() call exists in the\\n          '/service/core/REST/SugarRestSerialize.php' script. The exploit abuses the __destruct()\\n          method from the SugarCacheFile class to write arbitrary PHP code into the /custom directory.\", \"disclosure_date\": \"2016-06-23\", \"fullname\": \"exploit/unix/webapp/sugarcrm_rest_unserialize_exec\", \"is_install_path\": true, \"mod_time\": \"2025-10-06 17:15:11 +0000\", \"name\": \"SugarCRM REST Unserialize PHP Code Execution\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/unix/webapp/sugarcrm_rest_unserialize_exec.rb\", \"platform\": \"PHP\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"unix/webapp/sugarcrm_rest_unserialize_exec\", \"references\": [\"CVE-2025-25034\", \"URL-http://karmainsecurity.com/KIS-2016-07\", \"URL-http://www.sugarcrm.com/security/sugarcrm-sa-2016-001\", \"URL-http://www.sugarcrm.com/security/sugarcrm-sa-2016-008\", \"URL-https://bugs.php.net/bug.php?id=72663\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"SugarCRM CE <= 6.5.23\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:47.725998Z"}, {"uuid": "fd598703-4d95-452b-bb62-d2990a5d6758", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3muzonm45ls2t", "content": "CVE-2025-25249 is trending. Hype score 18, currently #1 on cvemon.\n\nA heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2025-25249", "creation_timestamp": "2026-09-08T18:46:30.776318Z"}, {"uuid": "6d02165a-c389-4be6-8756-f208d9030ec1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://t.me/hacking_Attack/193561", "content": "CVE-2025-25249 Exploitation Delivers PivotC2, a FortiGate Post-Exploitation RAT\nhttps://www.reddit.com/r/redteamsec/comments/1wal658/cve202525249_exploitation_delivers_pivotc2_a/\n\n  submitted by    /u/socradario  (https://www.reddit.com/user/socradario) \n [link] (https://socradar.io/blog/cve-2025-25249-pivotc2-fortigate-rat/)   [comments] (https://www.reddit.com/r/redteamsec/comments/1wal658/cve202525249_exploitation_delivers_pivotc2_a/)", "creation_timestamp": "2026-09-08T20:00:04.289163Z"}, {"uuid": "e2474f46-672c-4b93-92ea-0ffd0ef6320a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "MISP/616cfae2-9da9-48bb-8be3-053d5b26bf13", "content": "", "creation_timestamp": "2026-09-10T12:15:02.476487Z"}, {"uuid": "21542173-a906-4ce5-8ee2-bd6d7ddfe8f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/193561", "content": "CVE-2025-25249 Exploitation Delivers PivotC2, a FortiGate Post-Exploitation RAT\nhttps://www.reddit.com/r/redteamsec/comments/1wal658/cve202525249_exploitation_delivers_pivotc2_a/\n\n  submitted by    /u/socradario  (https://www.reddit.com/user/socradario) \n [link] (https://socradar.io/blog/cve-2025-25249-pivotc2-fortigate-rat/)   [comments] (https://www.reddit.com/r/redteamsec/comments/1wal658/cve202525249_exploitation_delivers_pivotc2_a/)", "creation_timestamp": "2026-09-09T00:00:25.880673Z"}, {"uuid": "465742c4-f33c-4074-adf8-7b4f2a66e95a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25734", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/2667", "content": "\u2728 General Cyber News \u2728\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0434\u043e\u0440\u043e\u0436\u043d\u044b\u0445 \u0431\u043b\u043e\u043a\u0430\u0445 \u0441\u0432\u044f\u0437\u0438 Kapsch \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b\n\n\u2014\n\nSummary:\n\u0412 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0434\u043e\u0440\u043e\u0436\u043d\u044b\u0445 \u0431\u043b\u043e\u043a\u043e\u0432 \u0441\u0432\u044f\u0437\u0438 RIS-9160 \u0438 RIS-9260 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Kapsch TrafficCom AG \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438. \u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (BDU) - 2025-14396, \u0442\u0430\u043a\u0436\u0435 \u0435\u0439 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2025-25734. \u0414\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0440\u043e\u0436\u043d\u044b\u0445 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043d\u044b\u0445 \u0441\u0442\u0430\u043d\u0446\u0438\u0439 (Roadside Unit, RSU), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u043c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u043c...\n\n\u2014\n\nSource: SEC-1275-1\nPublished: 2025-11-19 08:00 | Author: Vulner Queen\n\n#general_cyber_news #kapsch\n\nhttps://1275.ru/vulnerability/kriticheskaya-uyazvimost-v-dorozhnyh-blokah-svyazi-kapsch-ugrozhaet-bezopasnosti-transportnoy-infrastruktury_16421", "creation_timestamp": "2026-09-09T05:00:10.882447Z"}, {"uuid": "c27cdae5-1993-4b59-beb0-24e6d90295f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2567", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/2670", "content": "\u2728 General Cyber News \u2728\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Lantronix XPort: \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\n\n\u2014\n\nSummary:\n\u0412 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 \u0430\u043f\u0440\u0435\u043b\u044f 2025 \u0433\u043e\u0434\u0430 \u0431\u044b\u043b\u0430 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Lantronix XPort, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b BDU:2025-14397 \u0438 CVE-2025-2567. \u0414\u0430\u043d\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u043e\u043b\u043d\u044b\u043c \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u043d\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 XPort \u0432 \u0448\u0438\u0440\u043e\u043a\u043e\u043c \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0435 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a - \u043e\u0442 6.5.0.7 [\u2026]\n\u0421\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435...\n\n\u2014\n\nSource: SEC-1275-1\nPublished: 2025-11-19 07:49 | Author: Vulner Queen\n\n#lantronix #general_cyber_news #xport\n\nhttps://1275.ru/vulnerability/obnaruzhena-kriticheskaya-uyazvimost-v-ustroystvah-lantronix-xport-otsutstvie-autentifikatsii-ugrozhaet-promyshlennym-sistemam_16418", "creation_timestamp": "2026-09-09T05:00:10.956045Z"}, {"uuid": "1d54da21-3f50-4a18-89c9-187e31f47d1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mv2ybmykxe2x", "content": "FortiGate qurilmalari nishonda: CVE-2025-25249 orqali PivotC2 zararli dasturi tarqatilmoqda!\n\n", "creation_timestamp": "2026-09-09T07:11:26.302368Z"}, {"uuid": "210b823a-ba17-4a7c-955d-a45eae97cf88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/hack4career.com/post/3mv3lcu6r2k2j", "content": "\ud83d\udea8 New research from the SOCRadar Threat Research Unit!\n\nCVE-2025-25249 is being actively exploited to deploy PivotC2, a FortiGate-focused Node.js RAT.\n\n30K+ targets. 178 confirmed infections. AI-assisted development, tunneling & autonomous post-exploitation.\n\nRead more \ud83d\udc47\nsocradar.io/blog/cve-202...", "creation_timestamp": "2026-09-09T12:52:11.141285Z"}, {"uuid": "6946cbd4-bb92-4739-a13c-761cc7d07af0", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/64f2d211-92cd-4826-92a9-c4f61659b1fb", "content": "", "creation_timestamp": "2026-09-09T16:00:29.476863Z"}, {"uuid": "8f2c9f6d-9eb8-4a2a-b9c0-cb17a0012995", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mv4ci5kpcz2z", "content": "\ud83d\uded1 CVE-2025-25249\nFortinet Multiple Products\nCVSS 8.1 / EPSS 1% / KEV \u2705\nTL;DR: A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3\u2026\nhttps://cvesentinel.com/report/CVE-2025-25249?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-09-09T19:46:42.167525Z"}, {"uuid": "ed495074-3cbe-4ad7-b57d-b92a36751184", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/76235c89-e484-4042-96ad-26f9515fbf7e", "content": "", "creation_timestamp": "2026-09-09T20:00:03.901162Z"}, {"uuid": "9fccd02a-5a74-4b84-a734-7cf94401d22d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mv4dlq7rg52g", "content": "~Cisa~\nCISA added four actively exploited Fortinet, Citrix, Chromium, and Cisco vulnerabilities to its KEV Catalog.\n-\nIOCs: CVE-2025-25249, CVE-2026-19490, CVE-2026-87491\n-\n#CVE #Cybersecurity #ThreatIntel", "creation_timestamp": "2026-09-09T20:06:36.584623Z"}, {"uuid": "52c0703d-8a65-4d9b-9f91-f7169d51337b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/insomnisec.bsky.social/post/3mv4hhopzom2k", "content": "\ud83d\udce1 CVE-2025-25249: A Patched FortiGate Flaw Is Now Delivering a Custom RAT Called PivotC2", "creation_timestamp": "2026-09-09T21:15:55.142974Z"}, {"uuid": "8303a3ad-bc82-4882-8965-5879ded174d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mv4lxuum2m2l", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2025-25249: Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2025-25249", "creation_timestamp": "2026-09-09T22:36:33.786647Z"}, {"uuid": "a2ba173a-21ac-4556-be65-9bb0dd768f65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://t.me/ViralCyber/26157", "content": "\ud83d\udfe2\u0648\u0642\u062a\u06cc \u06a9\u0647 Fortigate \u0622\u0644\u0648\u062f\u0647 \u0628\u0647 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u0645\u06cc\u0634\u0648\u062f!\n\ud83d\udd34\u0647\u0634\u062f\u0627\u0631 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0628\u0631\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 FortiGate\n\ud83d\udd34\u06af\u0632\u0627\u0631\u0634 \u062c\u062f\u06cc\u062f SOCRadar \u0627\u0632 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0641\u0639\u0627\u0644 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2025-25249 \u062f\u0631 \u0645\u062d\u0635\u0648\u0644\u0627\u062a \u0645\u062d\u0628\u0648\u0628 Fortinet \u062e\u0628\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f\u061b \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0627\u06cc \u06a9\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u062f\u0648\u0646 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a\u060c \u0627\u0645\u06a9\u0627\u0646 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0631\u0648\u06cc \u062a\u062c\u0647\u06cc\u0632\u0627\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u06a9\u0646\u062f.\n\ud83d\udd34\u062f\u0631 \u0627\u06cc\u0646 \u062d\u0645\u0644\u0627\u062a\u060c \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u067e\u0633 \u0627\u0632 \u0646\u0641\u0648\u0630 \u0628\u0647 FortiGate \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u062c\u062f\u06cc\u062f\u06cc \u0628\u0647 \u0646\u0627\u0645 PivotC2 \u0631\u0627 \u0631\u0648\u06cc \u0622\u0646 \u0646\u0635\u0628 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f. \u0627\u06cc\u0646 \u0627\u0628\u0632\u0627\u0631 \u0645\u0633\u062a\u0642\u06cc\u0645\u0627\u064b \u0631\u0648\u06cc Firewall \u0641\u0639\u0627\u0644\u06cc\u062a \u06a9\u0631\u062f\u0647 \u0648 \u0642\u0627\u0628\u0644\u06cc\u062a\u200c\u0647\u0627\u06cc\u06cc \u0645\u0627\u0646\u0646\u062f \u0627\u06cc\u062c\u0627\u062f Reverse Shell\u060c \u062a\u0648\u0646\u0644\u200c\u0633\u0627\u0632\u06cc \u0628\u0647 \u0634\u0628\u06a9\u0647 \u062f\u0627\u062e\u0644\u06cc\u060c Port Scanning\u060c \u0633\u0631\u0642\u062a Configuration \u0648 Credentials \u0648 \u062d\u0631\u06a9\u062a \u062c\u0627\u0646\u0628\u06cc (Lateral Movement) \u0631\u0627 \u062f\u0631 \u0627\u062e\u062a\u06cc\u0627\u0631 \u0645\u0647\u0627\u062c\u0645 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f!\n\ud83d\udd34\u0628\u0631 \u0627\u0633\u0627\u0633 \u06af\u0632\u0627\u0631\u0634 SOCRadar\u060c \u0628\u06cc\u0634 \u0627\u0632 \u06f3\u06f0 \u0647\u0632\u0627\u0631 IP \u0647\u062f\u0641 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0648 \u062d\u062f\u0627\u0642\u0644 \u06f1\u06f7\u06f8 \u062f\u0633\u062a\u06af\u0627\u0647 FortiGate \u0622\u0644\u0648\u062f\u0647 \u0628\u0647 PivotC2 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647\u200c\u0627\u0646\u062f. \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0641\u0639\u0627\u0644 \u0646\u06cc\u0632 \u062d\u062f\u0627\u0642\u0644 \u0627\u0632 \u062c\u0648\u0644\u0627\u06cc \u06f2\u06f0\u06f2\u06f6 \u0645\u0634\u0627\u0647\u062f\u0647 \u0634\u062f\u0647 \u0648 \u0647\u0645\u0686\u0646\u0627\u0646 \u0627\u062f\u0627\u0645\u0647 \u062f\u0627\u0631\u062f.\n\ud83d\udd34 \u0646\u06a9\u062a\u0647 \u0639\u062c\u06cc\u0628 \u0627\u06cc\u0646 \u062d\u0645\u0644\u0647 \u0627\u06cc\u0646 \u0627\u0633\u062a \u06a9\u0647 \u062e\u0648\u062f Firewall \u06a9\u0647 \u0639\u0644\u06cc \u0627\u0644\u0627\u0635\u0648\u0644 \u0628\u0627\u06cc\u062f \u06cc\u06a9 \u0627\u0628\u0632\u0627\u0631 \u062f\u0641\u0627\u0639\u06cc \u0628\u0627\u0634\u062f \u0628\u0647 \u0646\u0642\u0637\u0647 \u0627\u0633\u062a\u0642\u0631\u0627\u0631 \u0648 Pivot \u0645\u0647\u0627\u062c\u0645 \u062a\u0628\u062f\u06cc\u0644 \u0645\u06cc\u200c\u0634\u0648\u062f!  \u0628\u0646\u0627\u0628\u0631\u0627\u06cc\u0646 \u0635\u0631\u0641\u0627\u064b Patch \u06a9\u0631\u062f\u0646 \u062a\u062c\u0647\u06cc\u0632 \u06a9\u0627\u0641\u06cc \u0646\u06cc\u0633\u062a \u0648 \u062f\u0631 \u0635\u0648\u0631\u062a \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0628\u0644\u06cc \u0627\u0632 \u0646\u0633\u062e\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u060c \u0628\u0631\u0631\u0633\u06cc \u0627\u062d\u062a\u0645\u0627\u0644 Compromise \u0646\u06cc\u0632 \u0636\u0631\u0648\u0631\u06cc \u0627\u0633\u062a.\n\u2705 \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u0645\u062f\u06cc\u0631\u0627\u0646 \u0634\u0628\u06a9\u0647:\n\u26ab\ufe0f\u0646\u0633\u062e\u0647 FortiOS \u0648 FortiSwitchManager \u0631\u0627 \u0641\u0648\u0631\u0627\u064b \u0628\u0647 \u0646\u0633\u062e\u0647 \u0627\u0635\u0644\u0627\u062d\u200c\u0634\u062f\u0647 \u0627\u0631\u062a\u0642\u0627 \u062f\u0647\u0646\u062f.\n\u26ab\ufe0f \u062f\u0633\u062a\u0631\u0633\u06cc CAPWAP / UDP 5246 \u0627\u0632 \u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc \u063a\u06cc\u0631\u0645\u0637\u0645\u0626\u0646 \u0631\u0627 \u0645\u062d\u062f\u0648\u062f \u06a9\u0646\u0646\u062f.\n\u26ab\ufe0f \u0644\u0627\u06af\u0647\u0627\u060c Configuration\u060c \u062d\u0633\u0627\u0628\u200c\u0647\u0627 \u0648 \u0627\u0631\u062a\u0628\u0627\u0637\u0627\u062a \u062e\u0631\u0648\u062c\u06cc \u063a\u06cc\u0631\u0639\u0627\u062f\u06cc Firewall \u0631\u0627 \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u0646\u062f.\n\u26ab\ufe0f \u062f\u0631 \u062a\u062c\u0647\u06cc\u0632\u0627\u062a \u0645\u0634\u06a9\u0648\u06a9\u060c \u0627\u062d\u062a\u0645\u0627\u0644 \u0633\u0631\u0642\u062a Credential \u0648 \u0646\u0641\u0648\u0630 \u0628\u0647 \u0634\u0628\u06a9\u0647 \u062f\u0627\u062e\u0644\u06cc \u0631\u0627 \u0646\u06cc\u0632 \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u0646\u062f.\n#FortiGate #Fortinet #CyberSecurity #CVE #Firewall #PivotC2\n\n\ud83d\udcf1 @PingChannel \n\u062e\u0628\u0631\u060c \u062a\u062d\u0644\u06cc\u0644\u060c \u0627\u0646\u062a\u0642\u0627\u062f - \u0641\u0646\u0627\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a\n\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f", "creation_timestamp": "2026-09-09T23:00:04.572058Z"}, {"uuid": "90c04f83-b9e6-40be-a136-9e83a918bc56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "exploited", "source": "https://t.me/ViralCyber/26157", "content": "\ud83d\udfe2\u0648\u0642\u062a\u06cc \u06a9\u0647 Fortigate \u0622\u0644\u0648\u062f\u0647 \u0628\u0647 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u0645\u06cc\u0634\u0648\u062f!\n\ud83d\udd34\u0647\u0634\u062f\u0627\u0631 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0628\u0631\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 FortiGate\n\ud83d\udd34\u06af\u0632\u0627\u0631\u0634 \u062c\u062f\u06cc\u062f SOCRadar \u0627\u0632 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0641\u0639\u0627\u0644 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2025-25249 \u062f\u0631 \u0645\u062d\u0635\u0648\u0644\u0627\u062a \u0645\u062d\u0628\u0648\u0628 Fortinet \u062e\u0628\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f\u061b \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0627\u06cc \u06a9\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u062f\u0648\u0646 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a\u060c \u0627\u0645\u06a9\u0627\u0646 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0631\u0648\u06cc \u062a\u062c\u0647\u06cc\u0632\u0627\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u06a9\u0646\u062f.\n\ud83d\udd34\u062f\u0631 \u0627\u06cc\u0646 \u062d\u0645\u0644\u0627\u062a\u060c \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u067e\u0633 \u0627\u0632 \u0646\u0641\u0648\u0630 \u0628\u0647 FortiGate \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u062c\u062f\u06cc\u062f\u06cc \u0628\u0647 \u0646\u0627\u0645 PivotC2 \u0631\u0627 \u0631\u0648\u06cc \u0622\u0646 \u0646\u0635\u0628 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f. \u0627\u06cc\u0646 \u0627\u0628\u0632\u0627\u0631 \u0645\u0633\u062a\u0642\u06cc\u0645\u0627\u064b \u0631\u0648\u06cc Firewall \u0641\u0639\u0627\u0644\u06cc\u062a \u06a9\u0631\u062f\u0647 \u0648 \u0642\u0627\u0628\u0644\u06cc\u062a\u200c\u0647\u0627\u06cc\u06cc \u0645\u0627\u0646\u0646\u062f \u0627\u06cc\u062c\u0627\u062f Reverse Shell\u060c \u062a\u0648\u0646\u0644\u200c\u0633\u0627\u0632\u06cc \u0628\u0647 \u0634\u0628\u06a9\u0647 \u062f\u0627\u062e\u0644\u06cc\u060c Port Scanning\u060c \u0633\u0631\u0642\u062a Configuration \u0648 Credentials \u0648 \u062d\u0631\u06a9\u062a \u062c\u0627\u0646\u0628\u06cc (Lateral Movement) \u0631\u0627 \u062f\u0631 \u0627\u062e\u062a\u06cc\u0627\u0631 \u0645\u0647\u0627\u062c\u0645 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f!\n\ud83d\udd34\u0628\u0631 \u0627\u0633\u0627\u0633 \u06af\u0632\u0627\u0631\u0634 SOCRadar\u060c \u0628\u06cc\u0634 \u0627\u0632 \u06f3\u06f0 \u0647\u0632\u0627\u0631 IP \u0647\u062f\u0641 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0648 \u062d\u062f\u0627\u0642\u0644 \u06f1\u06f7\u06f8 \u062f\u0633\u062a\u06af\u0627\u0647 FortiGate \u0622\u0644\u0648\u062f\u0647 \u0628\u0647 PivotC2 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647\u200c\u0627\u0646\u062f. \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0641\u0639\u0627\u0644 \u0646\u06cc\u0632 \u062d\u062f\u0627\u0642\u0644 \u0627\u0632 \u062c\u0648\u0644\u0627\u06cc \u06f2\u06f0\u06f2\u06f6 \u0645\u0634\u0627\u0647\u062f\u0647 \u0634\u062f\u0647 \u0648 \u0647\u0645\u0686\u0646\u0627\u0646 \u0627\u062f\u0627\u0645\u0647 \u062f\u0627\u0631\u062f.\n\ud83d\udd34 \u0646\u06a9\u062a\u0647 \u0639\u062c\u06cc\u0628 \u0627\u06cc\u0646 \u062d\u0645\u0644\u0647 \u0627\u06cc\u0646 \u0627\u0633\u062a \u06a9\u0647 \u062e\u0648\u062f Firewall \u06a9\u0647 \u0639\u0644\u06cc \u0627\u0644\u0627\u0635\u0648\u0644 \u0628\u0627\u06cc\u062f \u06cc\u06a9 \u0627\u0628\u0632\u0627\u0631 \u062f\u0641\u0627\u0639\u06cc \u0628\u0627\u0634\u062f \u0628\u0647 \u0646\u0642\u0637\u0647 \u0627\u0633\u062a\u0642\u0631\u0627\u0631 \u0648 Pivot \u0645\u0647\u0627\u062c\u0645 \u062a\u0628\u062f\u06cc\u0644 \u0645\u06cc\u200c\u0634\u0648\u062f!  \u0628\u0646\u0627\u0628\u0631\u0627\u06cc\u0646 \u0635\u0631\u0641\u0627\u064b Patch \u06a9\u0631\u062f\u0646 \u062a\u062c\u0647\u06cc\u0632 \u06a9\u0627\u0641\u06cc \u0646\u06cc\u0633\u062a \u0648 \u062f\u0631 \u0635\u0648\u0631\u062a \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0628\u0644\u06cc \u0627\u0632 \u0646\u0633\u062e\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u060c \u0628\u0631\u0631\u0633\u06cc \u0627\u062d\u062a\u0645\u0627\u0644 Compromise \u0646\u06cc\u0632 \u0636\u0631\u0648\u0631\u06cc \u0627\u0633\u062a.\n\u2705 \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u0645\u062f\u06cc\u0631\u0627\u0646 \u0634\u0628\u06a9\u0647:\n\u26ab\ufe0f\u0646\u0633\u062e\u0647 FortiOS \u0648 FortiSwitchManager \u0631\u0627 \u0641\u0648\u0631\u0627\u064b \u0628\u0647 \u0646\u0633\u062e\u0647 \u0627\u0635\u0644\u0627\u062d\u200c\u0634\u062f\u0647 \u0627\u0631\u062a\u0642\u0627 \u062f\u0647\u0646\u062f.\n\u26ab\ufe0f \u062f\u0633\u062a\u0631\u0633\u06cc CAPWAP / UDP 5246 \u0627\u0632 \u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc \u063a\u06cc\u0631\u0645\u0637\u0645\u0626\u0646 \u0631\u0627 \u0645\u062d\u062f\u0648\u062f \u06a9\u0646\u0646\u062f.\n\u26ab\ufe0f \u0644\u0627\u06af\u0647\u0627\u060c Configuration\u060c \u062d\u0633\u0627\u0628\u200c\u0647\u0627 \u0648 \u0627\u0631\u062a\u0628\u0627\u0637\u0627\u062a \u062e\u0631\u0648\u062c\u06cc \u063a\u06cc\u0631\u0639\u0627\u062f\u06cc Firewall \u0631\u0627 \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u0646\u062f.\n\u26ab\ufe0f \u062f\u0631 \u062a\u062c\u0647\u06cc\u0632\u0627\u062a \u0645\u0634\u06a9\u0648\u06a9\u060c \u0627\u062d\u062a\u0645\u0627\u0644 \u0633\u0631\u0642\u062a Credential \u0648 \u0646\u0641\u0648\u0630 \u0628\u0647 \u0634\u0628\u06a9\u0647 \u062f\u0627\u062e\u0644\u06cc \u0631\u0627 \u0646\u06cc\u0632 \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u0646\u062f.\n#FortiGate #Fortinet #CyberSecurity #CVE #Firewall #PivotC2\n\n\ud83d\udcf1 @PingChannel \n\u062e\u0628\u0631\u060c \u062a\u062d\u0644\u06cc\u0644\u060c \u0627\u0646\u062a\u0642\u0627\u062f - \u0641\u0646\u0627\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a\n\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f", "creation_timestamp": "2026-09-10T00:00:09.001792Z"}, {"uuid": "897b0a4c-0226-402b-9250-d704eed5ed4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2567", "type": "published-proof-of-concept", "source": "https://t.me/Intel_Encyclopedia/2670", "content": "\u2728 General Cyber News \u2728\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Lantronix XPort: \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\n\n\u2014\n\nSummary:\n\u0412 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 \u0430\u043f\u0440\u0435\u043b\u044f 2025 \u0433\u043e\u0434\u0430 \u0431\u044b\u043b\u0430 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Lantronix XPort, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b BDU:2025-14397 \u0438 CVE-2025-2567. \u0414\u0430\u043d\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u043e\u043b\u043d\u044b\u043c \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u043d\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 XPort \u0432 \u0448\u0438\u0440\u043e\u043a\u043e\u043c \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0435 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a - \u043e\u0442 6.5.0.7 [\u2026]\n\u0421\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435...\n\n\u2014\n\nSource: SEC-1275-1\nPublished: 2025-11-19 07:49 | Author: Vulner Queen\n\n#lantronix #general_cyber_news #xport\n\nhttps://1275.ru/vulnerability/obnaruzhena-kriticheskaya-uyazvimost-v-ustroystvah-lantronix-xport-otsutstvie-autentifikatsii-ugrozhaet-promyshlennym-sistemam_16418", "creation_timestamp": "2026-09-10T00:00:44.661054Z"}, {"uuid": "25d7e4a6-52f3-46d0-98e1-f9cef7c26811", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25734", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/2667", "content": "\u2728 General Cyber News \u2728\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0434\u043e\u0440\u043e\u0436\u043d\u044b\u0445 \u0431\u043b\u043e\u043a\u0430\u0445 \u0441\u0432\u044f\u0437\u0438 Kapsch \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b\n\n\u2014\n\nSummary:\n\u0412 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0434\u043e\u0440\u043e\u0436\u043d\u044b\u0445 \u0431\u043b\u043e\u043a\u043e\u0432 \u0441\u0432\u044f\u0437\u0438 RIS-9160 \u0438 RIS-9260 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Kapsch TrafficCom AG \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438. \u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (BDU) - 2025-14396, \u0442\u0430\u043a\u0436\u0435 \u0435\u0439 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2025-25734. \u0414\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0440\u043e\u0436\u043d\u044b\u0445 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043d\u044b\u0445 \u0441\u0442\u0430\u043d\u0446\u0438\u0439 (Roadside Unit, RSU), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u043c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u043c...\n\n\u2014\n\nSource: SEC-1275-1\nPublished: 2025-11-19 08:00 | Author: Vulner Queen\n\n#general_cyber_news #kapsch\n\nhttps://1275.ru/vulnerability/kriticheskaya-uyazvimost-v-dorozhnyh-blokah-svyazi-kapsch-ugrozhaet-bezopasnosti-transportnoy-infrastruktury_16421", "creation_timestamp": "2026-09-10T00:00:44.754436Z"}, {"uuid": "2b1ff1c0-f03a-41ea-90dc-d36d2c5f4dea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/fortinet-security-advisory-av26-023", "content": "", "creation_timestamp": "2026-09-10T00:15:03.634376Z"}, {"uuid": "869cd1ed-bc4a-4dca-a5d6-7b24aaddc566", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/vritrasecnews.bsky.social/post/3mv4w4ep6jy22", "content": "CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2025-25249 Fortinet Multiple Products Hea...\n\n\ud83d\udd17 https://www.cisa.gov/news-events/alerts/2026/09/09/cisa-adds-four-known-exploited-vulnerabilities-catalog", "creation_timestamp": "2026-09-10T01:38:43.980658Z"}, {"uuid": "9ea845bc-59d1-468e-91ed-92d30264b0ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mv5ghp55dx2e", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2025-25249: \u26a0\ufe0f CVE-2025-25249: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 0.8%\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2025-25249-a-heap-based-buffer-overflow-vulnerability-in", "creation_timestamp": "2026-09-10T06:30:41.897508Z"}, {"uuid": "e713ce9f-454c-4edd-ace8-c10c3dc6ed2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mv5h5wzbmi23", "content": "Threat actors exploit CVE-2025-25249 in Fortinet devices to deploy PivotC2 RAT, enabling post-exploitation capabilities and data theft, prompting urgent patching.\n", "creation_timestamp": "2026-09-10T06:43:08.756883Z"}, {"uuid": "a8e56699-3a1d-4c4a-9108-1155ced16156", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mv5h5zb7p22g", "content": "Threat actors exploit CVE-2025-25249 in Fortinet devices to deploy PivotC2 RAT, enabling post-exploitation capabilities and data theft, prompting urgent patching.\n", "creation_timestamp": "2026-09-10T06:43:14.333987Z"}, {"uuid": "f286a6da-b7a4-49e9-893f-7db1dbcc9bb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mv5h6lqcya25", "content": "Threat actors exploit CVE-2025-25249 in Fortinet devices to deploy PivotC2 RAT, enabling post-exploitation capabilities and data theft, prompting urgent patching.\n", "creation_timestamp": "2026-09-10T06:43:30.545317Z"}, {"uuid": "24f1a5a5-e669-42a7-b779-fb5e84527e05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://www.securityweek.com/fortinet-code-execution-flaw-exploited-in-pivotc2-rat-attacks/", "content": "The high-severity, unauthenticated vulnerability tracked as CVE-2025-25249 was patched in January 2026.\n\nThe post Fortinet Code Execution Flaw Exploited in PivotC2 RAT Attacks appeared first on SecurityWeek.", "creation_timestamp": "2026-09-10T07:00:38.564700Z"}, {"uuid": "47b24f9f-5ef7-4861-aa49-208e5ee0f365", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://t.me/information_security_channel/55882", "content": "Fortinet Code Execution Flaw Exploited in PivotC2 RAT Attacks\nhttps://www.securityweek.com/fortinet-code-execution-flaw-exploited-in-pivotc2-rat-attacks/\n\nThe high-severity, unauthenticated vulnerability tracked as CVE-2025-25249 was patched in January 2026.\nThe post Fortinet Code Execution Flaw Exploited in PivotC2 RAT Attacks (https://www.securityweek.com/fortinet-code-execution-flaw-exploited-in-pivotc2-rat-attacks/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-09-10T11:00:03.462609Z"}, {"uuid": "2fd51f9b-77ef-4121-9213-69b90648c324", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mv5wqwbd6i2k", "content": "Fortinet flaw CVE-2025-25249 is fueling PivotC2 RAT attacks despite being patched months ago. Clearly nobody felt like applying it.\n\n#PatchYourFlaws #JustAnotherDay", "creation_timestamp": "2026-09-10T11:22:11.025828Z"}, {"uuid": "ac02b782-02fa-4ecc-b7db-c1937c2f0863", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mv5wqylcql2w", "content": "Just another Tuesday in IT, as unpatched Fortinet appliances deliver PivotC2 remote access trojans right into victim networks. This high-severity, unauthenticated CVE-2025-25249 flaw was patched way back in January 2026, yet here we are watching attacks happen anyway. Protecting ...\n\nRead full story", "creation_timestamp": "2026-09-10T11:22:13.268386Z"}, {"uuid": "355f7a36-5555-40b1-ba99-7ecaaf03dbc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://t.me/pphm_HackerNews/3088", "content": "\ud83d\udd34 Fortinet Code Execution Flaw Exploited in PivotC2 RAT Attacks\n\nThreat actors have been exploiting an unauthenticated remote code execution (RCE) vulnerability in Fortinet products to deploy a Node.js RAT, SOCRadar reports.\n\nTracked as CVE-2025-25249 (CVSS score of 7.4) and described as a heap-based buffer overflow issue, the high-severity bug was patched in January in FortiOS and FortiSwitchManager.\n\nThe flaw \u201cmay allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests,\u201d Fortinet noted in its advisory.", "creation_timestamp": "2026-09-10T14:00:04.528284Z"}, {"uuid": "5d9e58b2-75cc-43df-97dd-c87586fc6b45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/newsarea.bsky.social/post/3mv77e7pfru2s", "content": "CISA Warns of Fortinet Heap-based Buffer Overflow Flaw Exploited in\u00a0Attacks\n\nThe U.S. Cybersecurity and Infrastructure Security Agency has added a critical Fortinet vulnerability, tracked as CVE-2025-25249, to its Known Exploited Vulnerabilities catalog after confirming evidence of active\u2026", "creation_timestamp": "2026-09-10T23:28:48.811423Z"}, {"uuid": "0e314286-4907-4872-af5b-07ff75eb685a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "exploited", "source": "https://t.me/pphm_HackerNews/3088", "content": "\ud83d\udd34 Fortinet Code Execution Flaw Exploited in PivotC2 RAT Attacks\n\nThreat actors have been exploiting an unauthenticated remote code execution (RCE) vulnerability in Fortinet products to deploy a Node.js RAT, SOCRadar reports.\n\nTracked as CVE-2025-25249 (CVSS score of 7.4) and described as a heap-based buffer overflow issue, the high-severity bug was patched in January in FortiOS and FortiSwitchManager.\n\nThe flaw \u201cmay allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests,\u201d Fortinet noted in its advisory.", "creation_timestamp": "2026-09-11T00:00:36.194204Z"}, {"uuid": "dacdc565-b56c-483c-8693-883c878ba800", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://t.me/information_security_channel/55882", "content": "Fortinet Code Execution Flaw Exploited in PivotC2 RAT Attacks\nhttps://www.securityweek.com/fortinet-code-execution-flaw-exploited-in-pivotc2-rat-attacks/\n\nThe high-severity, unauthenticated vulnerability tracked as CVE-2025-25249 was patched in January 2026.\nThe post Fortinet Code Execution Flaw Exploited in PivotC2 RAT Attacks (https://www.securityweek.com/fortinet-code-execution-flaw-exploited-in-pivotc2-rat-attacks/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-09-11T00:00:41.214408Z"}, {"uuid": "225d3f7c-d516-4f0b-a681-0aff95a08fac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://www.securityweek.com/fortinet-code-execution-flaw-exploited-in-pivotc2-rat-attacks/", "content": "The high-severity, unauthenticated vulnerability tracked as CVE-2025-25249 was patched in January 2026.\n\nThe post Fortinet Code Execution Flaw Exploited in PivotC2 RAT Attacks appeared first on SecurityWeek.", "creation_timestamp": "2026-09-11T01:00:34.803717Z"}, {"uuid": "73518126-d2e3-4dee-91d6-201d0590d36c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mvaorgcxme2v", "content": "\ud83d\udea8 CRITICAL THREAT BRIEF: CVE-2025-25249 (Fortinet FortiOS & Gateway Infrastructure)\n\nActive exploitation verified by the CISA KEV matrix has placed enterprise network perimeters at risk due to a critical heap-based buffer overflow vulnerability.\n\n\ud83d\udd17 Read the full intelligence brief:\u2026", "creation_timestamp": "2026-09-11T13:37:17.674823Z"}, {"uuid": "e9d59534-c094-48d4-a156-b51a7f7e6c36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25257", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-11)", "content": "", "creation_timestamp": "2026-09-12T10:15:19.905453Z"}, {"uuid": "44c784c2-0bec-4736-b31d-61a91df64773", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mvdd4saj4f25", "content": "\ud83d\udd34 EXPLOITED\n\nCVE-2025-25249: Fortinet FortiOS and FortiSwitchManager contain a heap-based buffer overflow that allows an attacker to execute unauthorized code via specially crafted packets. The flaw is listed in CISA KEV. Fortinet has released fixed versions; update affected installations.", "creation_timestamp": "2026-09-12T14:46:53.323605Z"}, {"uuid": "45eb12f1-c96f-4017-9eb9-caf5aba38a89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mvhabw3evq2i", "content": "\ud83d\udea8 BREAKING: Dropbox breached via Lenovo SSO \u2014 5,000 accounts accessed w/o passwords. Microsoft 1M-email AI CEO fraud + passkey phishing. UNC3569 exploiting Tencent Sogou Input (CVE-2026-51990) \u2192 GrayRabbit. FortiGate CVE-2025-25249 (PivotC2 RAT). PAN-OS CVE-2026-0310 (CVSS 9.2). #CyberSecurity", "creation_timestamp": "2026-09-14T04:06:42.434602Z"}, {"uuid": "516be116-b8e3-41e1-88fa-afb5bfba2fa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mvhabwj2xn2k", "content": "\ud83d\udea8 BREAKING: Dropbox breached via Lenovo SSO \u2014 5,000 accounts accessed w/o passwords. Microsoft 1M-email BO CEO fraud + passkey phishing. UNC3569 exploiting Tencent Sogou Input (CVE-2026-51990) \u2192 GrayRabbit. FortiGate CVE-2025-25249 (PivotC2 RAT). PAN-OS CVE-2026-0310 (CVSS 9.2). #PotatoSecurity", "creation_timestamp": "2026-09-14T04:06:43.063498Z"}, {"uuid": "0a544dfc-8dc5-48bd-9082-9d79750f7df8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mvhacnfvtx2e", "content": "\ud83d\udea8 BREAKING: Dropbox breached via Lenovo SSO \u2014 5,000 accounts accessed w/o passwords. Microsoft 1M-email AI CEO fraud + passkey phishing. UNC3569 exploiting Tencent Sogou Input (CVE-2026-51990) \u2192 GrayRabbit. FortiGate CVE-2025-25249 (PivotC2 RAT). PAN-OS CVE-2026-0310 (CVSS 9.2). #CyberSecurity", "creation_timestamp": "2026-09-14T04:07:06.934517Z"}, {"uuid": "042ccdd1-2aae-46cb-89c3-2e00881caeef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mvhaflnz2v2l", "content": "\ud83d\udea8 BREAKING: Dropbox breached via Lenovo SSO \u2014 5,000 accounts accessed w/o passwords. Microsoft 1M-email AI CEO fraud + passkey phishing. UNC3569 exploiting Tencent Sogou Input (CVE-2026-51990) \u2192 GrayRabbit. FortiGate CVE-2025-25249 (PivotC2 RAT). PAN-OS CVE-2026-0310 (CVSS 9.2). #CyberSecurity", "creation_timestamp": "2026-09-14T04:08:46.183375Z"}, {"uuid": "184ba2eb-ece2-4c4b-8acc-99861962be89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mvhahybpxq2j", "content": "3/ FIREWALLS + PATCH: FortiGate CVE-2025-25249 exploited (PivotC2 RAT, 178 devices). PAN-OS CVE-2026-0310 (CVSS 9.2) root RCE. Sept Patch Tuesday: 973 vulns, 2 zero-days. Audit SSO, rotate creds, patch edge. #ThreatIntel", "creation_timestamp": "2026-09-14T04:10:06.219908Z"}, {"uuid": "bdbfed18-a36d-4166-aec8-f0720f21c4ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvhdqymn7s2i", "content": "\ud83d\udd34 Fortinet CVE-2025-25249 under active attack\n\nAttackers are exploiting the Fortinet flaw to deploy PivotC2. Researchers found 30,000+ targeted IPs and 178 confirmed infected devices.\n\nstemshop.top/blog/fortine...\n\n#CVE #CVE202525249 #Fortinet #FortiGate #PivotC2 #CyberSecurity", "creation_timestamp": "2026-09-14T05:08:54.184367Z"}, {"uuid": "2ba6c50a-b7c7-404a-9ab8-5851ad9a1cd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25186", "type": "seen", "source": "https://t.me/hackeronereports/213", "content": "\ud83c\udfaf New Report #2987782: Possible DoS by memory exhaustion in net/imap \n\ud83d\udd3aSeverity: Medium\n\ud83d\udc7d Reporter: manun\n\ud83d\udcbc Team: Internet Bug Bounty\n\ud83d\udcb5 Bounty: null\n\ud83d\udd50 Submitted: 2025-02-11\n\u23f0 Disclosed: 2025-04-27 13:45:48\n\ud83d\udcdd Summary: The net-imap gem implemented an IMAP client in Ruby. Versions prior to 0.3.8, 0.4.19, and 0.5.6 contained a vulnerability that could lead to denial of service by memory exhaustion. The vulnerability was caused by the response parser using Range#to a to convert uid-set data without limiting the expanded size of the ranges. This vulnerability has been assigned the CVE identifier CVE-2025-25186.\n  @hackeronereports", "creation_timestamp": "2026-09-14T06:00:04.710931Z"}, {"uuid": "ffba34ec-9aa4-4665-9787-31a86bd1d012", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mvhku7vx4q2n", "content": "Discover how the PivotC2 FortiGate RAT uses CVE-2025-25249 exploitation to harvest credentials and tunnel traffic across corporate network environments.\n\n#PivotC2 #FortiGate #Malware #Cybercrime #CVE202525249", "creation_timestamp": "2026-09-14T07:15:54.903611Z"}, {"uuid": "e667954a-7f10-44a3-acf5-e88f507624a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mvhobw6fpswn", "content": "Fortinet\u88fd\u54c1\u306b\u304a\u3051\u308b\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3057\u3001RAT\u300cPivotC2\u300d\u304c\u5c55\u958b\u3055\u308c\u308b\uff08CVE-2025-25249\uff09 | Codebook\uff5cSecurity News https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/47685/", "creation_timestamp": "2026-09-14T08:17:14.755726Z"}, {"uuid": "2e871098-239a-4361-b422-f7a1e40870ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25231", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-13)", "content": "", "creation_timestamp": "2026-09-14T10:00:08.086252Z"}, {"uuid": "ac5eec48-29ed-4275-8074-1d12c106ac13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25186", "type": "seen", "source": "https://t.me/hackeronereports/213", "content": "\ud83c\udfaf New Report #2987782: Possible DoS by memory exhaustion in net/imap \n\ud83d\udd3aSeverity: Medium\n\ud83d\udc7d Reporter: manun\n\ud83d\udcbc Team: Internet Bug Bounty\n\ud83d\udcb5 Bounty: null\n\ud83d\udd50 Submitted: 2025-02-11\n\u23f0 Disclosed: 2025-04-27 13:45:48\n\ud83d\udcdd Summary: The net-imap gem implemented an IMAP client in Ruby. Versions prior to 0.3.8, 0.4.19, and 0.5.6 contained a vulnerability that could lead to denial of service by memory exhaustion. The vulnerability was caused by the response parser using Range#to a to convert uid-set data without limiting the expanded size of the ranges. This vulnerability has been assigned the CVE identifier CVE-2025-25186.\n  @hackeronereports", "creation_timestamp": "2026-09-15T00:00:28.068272Z"}, {"uuid": "2e1d20f8-60ed-475b-a454-9a7f17a0b512", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/bigg-thecreator.bsky.social/post/3mvl7cwswto27", "content": "CVE-2025-25249 is scored 7.4 by Fortinet's advisory and 9.8 by NVD. Same bug, two records, opposite sides of a severity boundary.\n\nIt is also the one SOCRadar tied to a campaign that infected 178 devices.\n\nIf two authorities disagree on the number, the number is not your sort key.", "creation_timestamp": "2026-09-15T18:00:04.150248Z"}, {"uuid": "d0fad6f8-c8b0-439b-81f8-65aee934c8eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-rce-vulnerability-fortinet-fortios-and-fortiswitchmanager-patch-immediately", "content": "", "creation_timestamp": "2026-09-16T12:45:02.126140Z"}]}