{"vulnerability": "2025-27", "sightings": [{"uuid": "e33f935f-cf96-497f-ad70-08a4429def4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27427", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3llosdw2r662t", "content": "", "creation_timestamp": "2025-03-31T16:40:26.757492Z"}, {"uuid": "7bedcdb7-ae44-4c0e-a14c-165bdc74daae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-27840", "type": "seen", "source": "https://bsky.app/profile/redrightcrypto.bsky.social/post/3llmkpgpea62l", "content": "", "creation_timestamp": "2025-03-30T19:18:23.992045Z"}, {"uuid": "ec1c18dd-991d-4272-9639-376dbc72e654", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3llp562uepu2u", "content": "", "creation_timestamp": "2025-03-31T19:54:01.836297Z"}, {"uuid": "3a047c5d-7a0d-4d9f-a368-0b8fc09a0e05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2748", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3llqn6gkph42j", "content": "", "creation_timestamp": "2025-04-01T10:13:14.076330Z"}, {"uuid": "18732022-fd3c-4928-ba3d-b5ce344e3e23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://bsky.app/profile/sansisc.bsky.social/post/3lloe45ahpc2g", "content": "", "creation_timestamp": "2025-03-31T12:25:33.375711Z"}, {"uuid": "88dca039-b8c2-4b7f-a438-bd3a45882fbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3lloga37a332a", "content": "", "creation_timestamp": "2025-03-31T13:03:33.069018Z"}, {"uuid": "4767d7c6-f080-487f-add5-adc9a405cb3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-27423", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3ljm6hi5hfs24", "content": "", "creation_timestamp": "2025-03-05T04:48:49.165434Z"}, {"uuid": "a8408b7e-658f-49e6-9abf-38acd01f6bb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27364", "type": "seen", "source": "https://bsky.app/profile/hackmanac.com/post/3lj3e7grmtk2l", "content": "", "creation_timestamp": "2025-02-26T12:16:30.222649Z"}, {"uuid": "eb11de41-61c0-493f-a864-84c980efeaa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27364", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3lj3fwsgcnd23", "content": "", "creation_timestamp": "2025-02-26T12:47:23.491836Z"}, {"uuid": "ba14d662-0756-4253-9cff-e91b20b7d371", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3lk4s6wcjq22o", "content": "", "creation_timestamp": "2025-03-11T19:24:32.374796Z"}, {"uuid": "0c2c4d9a-3ca1-496b-8e04-8cc24b7c5f2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lk4sfqnk4d2q", "content": "", "creation_timestamp": "2025-03-11T19:28:21.246052Z"}, {"uuid": "75d57bc5-59ab-4b29-a2b9-b5ebc6539437", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27298", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lix3n5elgj2q", "content": "", "creation_timestamp": "2025-02-24T19:32:24.378594Z"}, {"uuid": "d0642be1-1ace-43ca-93dd-3541645a3f13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27364", "type": "seen", "source": "https://bsky.app/profile/leekthehack.bsky.social/post/3lj3nlyj7dk2v", "content": "", "creation_timestamp": "2025-02-26T15:04:33.214612Z"}, {"uuid": "b4af7cef-a940-476c-9eaf-8b80a3c9cd60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3llolapvrmfk2", "content": "", "creation_timestamp": "2025-03-31T14:34:29.174075Z"}, {"uuid": "ef60cdcb-cc55-47d9-bb5c-45355d9e91eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27276", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lix3n5mkuv2g", "content": "", "creation_timestamp": "2025-02-24T19:32:25.622943Z"}, {"uuid": "210aa638-2e2a-4ef1-b561-b1b86af3b057", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27423", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3ljmavbqxde2k", "content": "", "creation_timestamp": "2025-03-05T05:32:19.716908Z"}, {"uuid": "75ecaa16-4a0b-4781-a1fe-95a1491ba750", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27715", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkvcp5cles2s", "content": "", "creation_timestamp": "2025-03-21T13:23:53.105657Z"}, {"uuid": "ba000691-ac4c-4fe5-9674-23cecb1f885e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27439", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114145527753674355", "content": "", "creation_timestamp": "2025-03-11T19:48:51.391358Z"}, {"uuid": "fe88f152-3057-4571-aebf-32ece6c6c599", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27440", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114145527796469293", "content": "", "creation_timestamp": "2025-03-11T19:48:51.648822Z"}, {"uuid": "09a78975-f053-4dac-8104-f3da21d3bc41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27312", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lix3n6livw23", "content": "", "creation_timestamp": "2025-02-24T19:32:28.571268Z"}, {"uuid": "3dd05f75-b811-4070-b3d8-5286a27324aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27773", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114145527842239250", "content": "", "creation_timestamp": "2025-03-11T19:48:53.244669Z"}, {"uuid": "3f640e64-cc4a-4e3a-9ad8-75c8090d202e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27496", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkc5tg3f3z2l", "content": "", "creation_timestamp": "2025-03-13T22:36:11.003028Z"}, {"uuid": "a7d60a91-d54e-4cc8-abd9-5f788f0d8acd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27218", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lk2h6ezkim2x", "content": "", "creation_timestamp": "2025-03-10T21:02:04.018129Z"}, {"uuid": "ed785e12-e317-4f7a-8396-d37cfabafaa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3lk4tul556n27", "content": "", "creation_timestamp": "2025-03-11T19:54:32.506628Z"}, {"uuid": "acc2ef20-8794-4762-a9c7-8f4edc01eb9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27364", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114060558122077118", "content": "", "creation_timestamp": "2025-02-24T19:39:57.465019Z"}, {"uuid": "caaeb616-e5ee-4d2c-9f4e-c8441bd37060", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-27363", "type": "seen", "source": "https://infosec.exchange/users/wdormann/statuses/114162395099888674", "content": "", "creation_timestamp": "2025-03-14T19:18:26.641332Z"}, {"uuid": "91286606-0f79-45d0-9e0e-6a61231d591c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3lkedaueuuus2", "content": "", "creation_timestamp": "2025-03-14T19:18:35.940304Z"}, {"uuid": "6acfc8aa-33de-491e-bae2-c43f9d04330b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3llcqvfwgew2x", "content": "", "creation_timestamp": "2025-03-26T21:42:30.361208Z"}, {"uuid": "094adbb0-8bfb-47e9-b7c9-8c1adfd8adf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27439", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lkedbskiuq42", "content": "", "creation_timestamp": "2025-03-14T19:19:44.641344Z"}, {"uuid": "4b09ba7e-b1ad-469c-8dc8-f6cebe0a3477", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27102", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lklphthwha2x", "content": "", "creation_timestamp": "2025-03-17T17:45:46.904959Z"}, {"uuid": "be4a3747-49be-4d4f-9ef7-1bdbe8fe24f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27364", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljhu4tztvvy2", "content": "", "creation_timestamp": "2025-03-03T11:37:37.424246Z"}, {"uuid": "293e6c67-3285-4b66-be75-3a061f46c8ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2757", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll747pvfeo26", "content": "", "creation_timestamp": "2025-03-25T10:54:30.352581Z"}, {"uuid": "36b0a38d-66e1-49fb-9542-84c0bb0a34f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27590", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljhvmtwx2s2f", "content": "", "creation_timestamp": "2025-03-03T12:00:06.495359Z"}, {"uuid": "d9f1c4c5-e5f5-4feb-b3bc-635f2b4d061d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27407", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lkc76ah2kd2p", "content": "", "creation_timestamp": "2025-03-13T23:00:06.983817Z"}, {"uuid": "b57edb96-0ac4-4a33-8bbe-425fe11055a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27160", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-131/", "content": "", "creation_timestamp": "2025-03-13T04:00:00.000000Z"}, {"uuid": "b3fcfc27-64b7-4fd2-a4f1-a4d5f509ea91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-27364", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/114060653643343413", "content": "", "creation_timestamp": "2025-02-24T20:04:14.803907Z"}, {"uuid": "e9c90659-8679-4f80-8b87-2c79542c6859", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2754", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll747pyyo626", "content": "", "creation_timestamp": "2025-03-25T10:54:30.936524Z"}, {"uuid": "3c2cd9a0-e7fc-448d-8f58-3ede27f9e31d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/oct0xor.bsky.social/post/3llabgyspos2t", "content": "", "creation_timestamp": "2025-03-25T22:00:44.215187Z"}, {"uuid": "e7a5bb91-3b78-4060-883f-d17bce37dcf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27364", "type": "seen", "source": "https://bsky.app/profile/darkwebinformer.bsky.social/post/3lix5g6reu22r", "content": "", "creation_timestamp": "2025-02-24T20:04:20.524855Z"}, {"uuid": "8dd398f5-fbee-41bf-8397-799481809441", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114150283427551221", "content": "", "creation_timestamp": "2025-03-12T15:58:16.752412Z"}, {"uuid": "831c9739-60dc-42ff-8a35-15302664149c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114150287987853471", "content": "", "creation_timestamp": "2025-03-12T15:59:26.402498Z"}, {"uuid": "cd702a2a-e7a6-41ee-a28d-417ec45f05c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27512", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lklphu7xkg2j", "content": "", "creation_timestamp": "2025-03-17T17:45:51.159376Z"}, {"uuid": "046b7140-fc86-401b-b3c7-2162f9a4caae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2753", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll747q4mrp2x", "content": "", "creation_timestamp": "2025-03-25T10:54:31.559265Z"}, {"uuid": "1a12de64-185f-42fd-a419-882d0f636b9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27148", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3ljaf3eo5ps2p", "content": "", "creation_timestamp": "2025-02-28T12:15:23.514266Z"}, {"uuid": "96e2f192-cb88-4d24-84de-4e9fef17648d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2755", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll747qc5l626", "content": "", "creation_timestamp": "2025-03-25T10:54:32.142326Z"}, {"uuid": "3691ae52-d26a-4e9b-b5a2-5eeeb12984ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27925", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114140807757279366", "content": "", "creation_timestamp": "2025-03-10T23:48:29.658201Z"}, {"uuid": "227f44ac-3f11-4c78-951c-6bc4225a207d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3llafep5vld2a", "content": "", "creation_timestamp": "2025-03-25T23:10:59.545810Z"}, {"uuid": "4f383452-b383-4ebd-8d25-59e4ac135a46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27364", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljahgorde342", "content": "", "creation_timestamp": "2025-02-28T13:00:01.862813Z"}, {"uuid": "5a784bd7-5fc4-44cb-af2e-3e531b0a4f34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27364", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljmgy2all432", "content": "", "creation_timestamp": "2025-03-05T07:21:44.504548Z"}, {"uuid": "2f456972-70bc-42fe-b70e-54931e1dc7b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2746", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3ll5j5db7mv2p", "content": "", "creation_timestamp": "2025-03-24T19:40:26.483909Z"}, {"uuid": "34386151-e32e-4324-b57e-833453cda9e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3llahp6xeqqu2", "content": "", "creation_timestamp": "2025-03-25T23:53:40.154788Z"}, {"uuid": "40b89184-5dac-4683-b849-31cc39832998", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27364", "type": "seen", "source": "https://bsky.app/profile/royans.bsky.social/post/3lj4eik2uhf2c", "content": "", "creation_timestamp": "2025-02-26T21:54:11.537333Z"}, {"uuid": "56c84c39-b45a-4bee-96c6-ffb097c36e6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27423", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3ljmka6mqks2d", "content": "", "creation_timestamp": "2025-03-05T08:19:30.727166Z"}, {"uuid": "badb9b85-a2af-4dd4-b772-69d2b8ec8637", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27218", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3ljpfvjm3oc2h", "content": "", "creation_timestamp": "2025-03-06T11:39:56.910290Z"}, {"uuid": "9fbec983-b2b5-406e-8cf1-3d3197f80191", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27162", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-135/", "content": "", "creation_timestamp": "2025-03-13T04:00:00.000000Z"}, {"uuid": "cd968ccd-2406-44a6-a53b-397997f1e76a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27174", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-133/", "content": "", "creation_timestamp": "2025-03-13T04:00:00.000000Z"}, {"uuid": "be5c9436-7383-4a5c-9839-d66dda3533e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2747", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3ll5j5ea2q522", "content": "", "creation_timestamp": "2025-03-24T19:40:27.515648Z"}, {"uuid": "5c6e7a67-ebbe-49e0-9671-72fca88efce8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27656", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgzpdndx2p", "content": "", "creation_timestamp": "2025-03-06T12:00:15.956284Z"}, {"uuid": "2c2a7473-f123-450b-bad6-217511a366c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27638", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgzmmzo62e", "content": "", "creation_timestamp": "2025-03-06T12:00:06.847507Z"}, {"uuid": "7a4b2f2c-7861-42ce-b3a8-18a3b2440a41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27665", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgzqng7n2u", "content": "", "creation_timestamp": "2025-03-06T12:00:20.355962Z"}, {"uuid": "0b0341d6-f2f1-490f-803d-dfd1ba8a088d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27910", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lk2qmoome52l", "content": "", "creation_timestamp": "2025-03-10T23:51:09.316152Z"}, {"uuid": "de4fb0b8-2a57-4fd3-9114-43dcfb21d62e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3llbtmrf4es24", "content": "", "creation_timestamp": "2025-03-26T12:58:42.172051Z"}, {"uuid": "566cf12b-9140-4e6d-9878-fe80d893f02e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27364", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljmkj56oyy32", "content": "", "creation_timestamp": "2025-03-05T08:25:52.811073Z"}, {"uuid": "a80e04ef-bc95-447d-bf15-d7f9797792aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27640", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgzmsjh62e", "content": "", "creation_timestamp": "2025-03-06T12:00:07.543063Z"}, {"uuid": "ce58b6d6-cc2d-41a6-9a80-4072b53f28f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27641", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgzmxqi524", "content": "", "creation_timestamp": "2025-03-06T12:00:08.131844Z"}, {"uuid": "dca967e5-68aa-4fab-b99b-c2e0cf61731a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27642", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgzn65wl2t", "content": "", "creation_timestamp": "2025-03-06T12:00:08.855724Z"}, {"uuid": "ce1bb9e6-23ed-470d-80b0-e142f4ec58f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27643", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgznf4d52u", "content": "", "creation_timestamp": "2025-03-06T12:00:09.540542Z"}, {"uuid": "ea8b5d62-1226-4a18-8128-01844dcade07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27647", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgznwaff2c", "content": "", "creation_timestamp": "2025-03-06T12:00:11.392681Z"}, {"uuid": "750df686-f48a-4ffe-a06b-6a7c3e366ac7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27650", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgzojedg2e", "content": "", "creation_timestamp": "2025-03-06T12:00:13.423365Z"}, {"uuid": "f3ce0931-18cf-4217-94d9-65f6f0c7ea34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27159", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-132/", "content": "", "creation_timestamp": "2025-03-13T04:00:00.000000Z"}, {"uuid": "a48bf247-1881-448e-9bc1-1f6ebda75bb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3llbtolzo6k24", "content": "", "creation_timestamp": "2025-03-26T12:59:42.933823Z"}, {"uuid": "f2768b4a-ec45-4bfc-9096-5d180fde59e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27645", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgznkqa52c", "content": "", "creation_timestamp": "2025-03-06T12:00:10.156565Z"}, {"uuid": "74a87a4e-2779-411a-ab39-0b4ca62663f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27646", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgznr5572p", "content": "", "creation_timestamp": "2025-03-06T12:00:10.875451Z"}, {"uuid": "041b028a-c37f-4655-b2bb-a0e6fe3ea43b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27673", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljmnuu3uwm2u", "content": "", "creation_timestamp": "2025-03-05T09:24:43.748116Z"}, {"uuid": "373dfe0d-9e7d-4182-8d9f-6cc6b14757e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27648", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgzo4xxr26", "content": "", "creation_timestamp": "2025-03-06T12:00:12.143713Z"}, {"uuid": "9864a4fd-ace8-4094-a39a-a35511d84876", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3lk724gtgqc2j", "content": "", "creation_timestamp": "2025-03-12T16:51:41.642285Z"}, {"uuid": "35cc7b7a-b757-4776-9c43-924fc20d8c8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27680", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljmnuugtel2s", "content": "", "creation_timestamp": "2025-03-05T09:24:44.387217Z"}, {"uuid": "d2c7b537-9881-459a-8055-9aaee426ac8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27649", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgzoddyf24", "content": "", "creation_timestamp": "2025-03-06T12:00:12.740898Z"}, {"uuid": "e23697c5-d4ac-4240-b2cf-18ac1d812b1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27607", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3ljwvly6g3s2z", "content": "", "creation_timestamp": "2025-03-09T11:09:42.921193Z"}, {"uuid": "bbf9e8d6-9c6a-4e9d-9de2-718c0be9c538", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27553", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3ll2p6j3kbl2v", "content": "", "creation_timestamp": "2025-03-23T16:50:29.314927Z"}, {"uuid": "7cc03666-7e49-4b0a-8ab1-e5b7e22ba940", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27668", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljmnuukc422s", "content": "", "creation_timestamp": "2025-03-05T09:24:44.935650Z"}, {"uuid": "d04b072c-1568-440e-8482-029dc4d9ec7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27651", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgzoprmw23", "content": "", "creation_timestamp": "2025-03-06T12:00:14.003913Z"}, {"uuid": "ac9333f9-a76a-414f-9ef4-ebf1b2aac4e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27670", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgzrgzhr2g", "content": "", "creation_timestamp": "2025-03-06T12:00:22.953767Z"}, {"uuid": "bcc495a1-7021-4692-af52-b5e4dbf70677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "seen", "source": "https://bsky.app/profile/pedalingforgood.bsky.social/post/3lk2ucpwlx22s", "content": "", "creation_timestamp": "2025-03-11T00:57:08.775280Z"}, {"uuid": "73da7f22-06cf-4653-b197-cd7a27549aca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27670", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljmnuuojiq2j", "content": "", "creation_timestamp": "2025-03-05T09:24:45.536275Z"}, {"uuid": "dcf1c761-4fe1-4e16-9f76-b90b6b37b688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27678", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljmnuv4fsu2f", "content": "", "creation_timestamp": "2025-03-05T09:24:47.203873Z"}, {"uuid": "fd1dd06c-e342-42c6-9b12-4063f9190a8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27652", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgzowcku2b", "content": "", "creation_timestamp": "2025-03-06T12:00:14.743227Z"}, {"uuid": "42ccbdf8-6770-4c85-ac95-8298620975f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27676", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljmnuusldy2y", "content": "", "creation_timestamp": "2025-03-05T09:24:46.104637Z"}, {"uuid": "ca4a3f3d-07c3-442b-acae-f35d2e22a412", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27683", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljmnuvuxdk2s", "content": "", "creation_timestamp": "2025-03-05T09:24:49.539106Z"}, {"uuid": "101cdf50-7355-43e3-8a0e-b71b557b16a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27655", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgzp5ksw2e", "content": "", "creation_timestamp": "2025-03-06T12:00:15.306036Z"}, {"uuid": "492b53fa-3258-4a7a-9296-ac529b718684", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27603", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114122406631526554", "content": "", "creation_timestamp": "2025-03-07T17:48:55.730583Z"}, {"uuid": "f8bb8201-3678-43a5-b4f8-416ca3bca1d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27657", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgzpjujf2u", "content": "", "creation_timestamp": "2025-03-06T12:00:16.551268Z"}, {"uuid": "ac9142d4-df07-4a1e-b1b3-7efffc62acc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "seen", "source": "https://bsky.app/profile/perillamint.social.silicon.moe.ap.brid.gy/post/3ljx2obh3j4w2", "content": "", "creation_timestamp": "2025-03-09T12:40:23.609054Z"}, {"uuid": "ee224757-bf50-4c72-b0a4-7ba3d8b153dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-27509", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lk2x5bb2as27", "content": "", "creation_timestamp": "2025-03-11T01:47:46.018167Z"}, {"uuid": "e6f4d885-e068-47f0-b8af-099115d9c342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27364", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114061063322403921", "content": "", "creation_timestamp": "2025-02-24T21:48:28.522922Z"}, {"uuid": "45d33ee4-d5c4-4717-9cf6-d8bdfea80dc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27667", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljmnuvb56a2y", "content": "", "creation_timestamp": "2025-03-05T09:24:47.823025Z"}, {"uuid": "916642b0-b677-4053-8472-13e52d5d3852", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27658", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgzpp5jw23", "content": "", "creation_timestamp": "2025-03-06T12:00:17.165309Z"}, {"uuid": "d3bbaa18-e4d0-4ab0-b970-11fdaf3c861f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27668", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgzrathg2q", "content": "", "creation_timestamp": "2025-03-06T12:00:22.275788Z"}, {"uuid": "eeb64b44-9905-4a58-aff5-cffd2a9ce812", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3ljx2t57cak2n", "content": "", "creation_timestamp": "2025-03-09T12:43:03.358484Z"}, {"uuid": "b99374bd-1bb4-4d04-be91-d57b0ccf08c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27833", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llalpb2ott26", "content": "", "creation_timestamp": "2025-03-26T01:04:15.782109Z"}, {"uuid": "60ef251b-22f9-4a88-84db-2da288eadaa4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27832", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llalpbeyrk24", "content": "", "creation_timestamp": "2025-03-26T01:04:17.549940Z"}, {"uuid": "58c01562-0946-41b1-a346-624387aeaa88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3llbwjmngg22n", "content": "", "creation_timestamp": "2025-03-26T13:50:37.300462Z"}, {"uuid": "4653522a-93ef-4f9a-b01a-86d506d07280", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27133", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lixhf3q4ah2s", "content": "", "creation_timestamp": "2025-02-24T23:02:38.109398Z"}, {"uuid": "b166cd3a-9724-4e37-9b6f-cf0f5f4709b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27672", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljmnuveikl22", "content": "", "creation_timestamp": "2025-03-05T09:24:48.313844Z"}, {"uuid": "59788859-f4a0-46ca-9497-fac7eec00555", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27659", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgzpucel2e", "content": "", "creation_timestamp": "2025-03-06T12:00:17.867463Z"}, {"uuid": "ff391710-148f-44eb-bfd7-9f6ee7551b1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27671", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgzrng2b2f", "content": "", "creation_timestamp": "2025-03-06T12:00:23.512366Z"}, {"uuid": "3184c58b-53ce-4043-b4b3-e72b4a52026a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27434", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114141278894705682", "content": "", "creation_timestamp": "2025-03-11T01:48:20.585449Z"}, {"uuid": "a66ffc90-2a2c-42ea-9e28-aca0bad786a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27112", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lixhf3uo362k", "content": "", "creation_timestamp": "2025-02-24T23:02:38.780774Z"}, {"uuid": "ccd3fdfe-e17d-47cf-93e4-e1f1c809fde4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27684", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljmnuvqhel22", "content": "", "creation_timestamp": "2025-03-05T09:24:48.952572Z"}, {"uuid": "3cae15eb-43bf-47f2-a9fa-78590b59488e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27661", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgzpztfw2q", "content": "", "creation_timestamp": "2025-03-06T12:00:18.365291Z"}, {"uuid": "0d0baead-1db7-4eb7-8e43-ee18df307a2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2746", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll5mhfoa3a2w", "content": "", "creation_timestamp": "2025-03-24T20:39:45.704055Z"}, {"uuid": "6a102b39-0bef-42b0-bab9-4957580a8654", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27830", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llalpbbiml26", "content": "", "creation_timestamp": "2025-03-26T01:04:16.974789Z"}, {"uuid": "234da138-9bc9-46fd-9772-723740cc2152", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27662", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgzq6x6t2e", "content": "", "creation_timestamp": "2025-03-06T12:00:18.959577Z"}, {"uuid": "3347d470-69ec-49ce-881f-317fb2901bb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27663", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgzqe7cu2b", "content": "", "creation_timestamp": "2025-03-06T12:00:19.668580Z"}, {"uuid": "504226aa-99ad-423c-86d3-cd7b730ee20a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27673", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgzrxsuv2c", "content": "", "creation_timestamp": "2025-03-06T12:00:24.755644Z"}, {"uuid": "8715a0d6-d1b4-45b2-8a5c-59b243210d0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27607", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljso53quqr2s", "content": "", "creation_timestamp": "2025-03-07T18:45:18.466940Z"}, {"uuid": "1d8aaf69-63f7-4afd-8a1d-9017027ea6df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lkco47a4po2u", "content": "", "creation_timestamp": "2025-03-14T03:27:24.403678Z"}, {"uuid": "42cd04d7-4351-4bee-953b-c4a8f489df05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27554", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljff5wr3al2a", "content": "", "creation_timestamp": "2025-03-02T12:00:07.537442Z"}, {"uuid": "11d056c9-a995-494d-819c-4bfa2bce661d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27666", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgzqujpz26", "content": "", "creation_timestamp": "2025-03-06T12:00:21.029851Z"}, {"uuid": "acd45df7-7cc2-4ff4-a748-5e7b647d499b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27603", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljso547mhy2s", "content": "", "creation_timestamp": "2025-03-07T18:45:19.281129Z"}, {"uuid": "8ed82eb2-d3cf-4067-8041-4f35d4223c1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27364", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lixhf5jzeo2r", "content": "", "creation_timestamp": "2025-02-24T23:02:43.185382Z"}, {"uuid": "893e58c6-90bc-4d24-8445-9b2a146b171e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27667", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgzr2o2u2b", "content": "", "creation_timestamp": "2025-03-06T12:00:21.723409Z"}, {"uuid": "6ba1f94a-36bd-415c-915b-d393bc0f5c05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27674", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgzs5zsb2g", "content": "", "creation_timestamp": "2025-03-06T12:00:25.394428Z"}, {"uuid": "7915e17a-ce66-4f0b-8909-32ec9b1f7eaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljxjhx6jqn26", "content": "", "creation_timestamp": "2025-03-09T17:05:12.967325Z"}, {"uuid": "816593f4-c729-405d-a419-07c363cfacb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27440", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lk4wr6jc562s", "content": "", "creation_timestamp": "2025-03-11T20:46:19.714162Z"}, {"uuid": "d4363a96-9d1c-4f15-abcc-bbae883d08f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lkcp7ye7ec2x", "content": "", "creation_timestamp": "2025-03-14T03:47:25.743300Z"}, {"uuid": "d5fb4050-1aa4-4d3a-af98-7bcd9baefddc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27440", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lkek3hf4ks2o", "content": "", "creation_timestamp": "2025-03-14T21:20:49.877440Z"}, {"uuid": "728c4d10-ce80-4816-9d58-56c0caac486e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27672", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgzrshuv27", "content": "", "creation_timestamp": "2025-03-06T12:00:24.136458Z"}, {"uuid": "b1d59cda-1f96-41a1-bd9d-101d531ce260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27675", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgzsdfml2e", "content": "", "creation_timestamp": "2025-03-06T12:00:26.103436Z"}, {"uuid": "8bc942e3-2a0f-4455-b496-4cd45b088f13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27773", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lk4wr74mhb2n", "content": "", "creation_timestamp": "2025-03-11T20:46:20.562521Z"}, {"uuid": "978033a0-501b-495c-ad59-aa9071943779", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27867", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lk735oc7vx26", "content": "", "creation_timestamp": "2025-03-12T17:10:14.211608Z"}, {"uuid": "d21cb592-d44c-448c-9b99-b0b5dd802a81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27439", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lkek3hf4ks2o", "content": "", "creation_timestamp": "2025-03-14T21:20:49.963023Z"}, {"uuid": "6cde65dc-7322-46fe-9389-5dfeb2fd5c02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3lkixo5oet22a", "content": "", "creation_timestamp": "2025-03-16T15:34:33.129015Z"}, {"uuid": "a57d22c9-0a9c-46c3-979e-e45fbe333cc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27888", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114194866048910223", "content": "", "creation_timestamp": "2025-03-20T12:56:13.576682Z"}, {"uuid": "0ac1de07-a88d-4ea3-b627-6204f6949956", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27415", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3ll4kxlj2cs2h", "content": "", "creation_timestamp": "2025-03-24T10:40:24.450032Z"}, {"uuid": "246d81bb-2231-4950-b617-87bb48cb5de2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2747", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll5mhfxkvq2w", "content": "", "creation_timestamp": "2025-03-24T20:39:46.326821Z"}, {"uuid": "ef2039e1-e9b1-4ee7-86bf-50c7865296e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27677", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgzsjqx623", "content": "", "creation_timestamp": "2025-03-06T12:00:26.691338Z"}, {"uuid": "1d384076-bc54-4497-88ed-35108afc55ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://mstdn.social/users/jschauma/statuses/114133791183428238", "content": "", "creation_timestamp": "2025-03-09T18:04:07.844532Z"}, {"uuid": "377f5716-375c-458e-b0fe-2826f5810811", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27423", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lkj2rs74y62b", "content": "", "creation_timestamp": "2025-03-16T16:30:12.792956Z"}, {"uuid": "f8123808-2b14-43ae-8558-470c0fbf8b5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27439", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lko33crjlor2", "content": "", "creation_timestamp": "2025-03-18T16:21:03.658133Z"}, {"uuid": "68fb8eee-fe69-4fa4-aa4f-737b500161b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3llbxd4uhcm2p", "content": "", "creation_timestamp": "2025-03-26T14:04:52.422584Z"}, {"uuid": "b5e04bf8-ff45-4446-be88-1907c81eef5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27678", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgzspwzz2g", "content": "", "creation_timestamp": "2025-03-06T12:00:27.366186Z"}, {"uuid": "400eb268-8399-42b5-b632-70c2d4be52a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27607", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114122877373392807", "content": "", "creation_timestamp": "2025-03-07T19:48:34.079932Z"}, {"uuid": "bcd48736-9203-43cc-9085-8accca7489f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://bsky.app/profile/jschauma.mstdn.social.ap.brid.gy/post/3ljxnasvmsxv2", "content": "", "creation_timestamp": "2025-03-09T18:13:44.446256Z"}, {"uuid": "6e235b66-d7da-444c-98ae-f98f18ea460c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27439", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lk4wra7obo2h", "content": "", "creation_timestamp": "2025-03-11T20:46:22.657516Z"}, {"uuid": "3b243f4f-1fbd-4494-8a67-d362496522c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27680", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgzsva4h2p", "content": "", "creation_timestamp": "2025-03-06T12:00:27.881318Z"}, {"uuid": "df87c483-7235-406b-93a6-0e682e407757", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27607", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3ljxnvrgwlf2n", "content": "", "creation_timestamp": "2025-03-09T18:24:31.534000Z"}, {"uuid": "86887fd0-5c37-4c7a-812b-983abc43ca74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lk73ndrfu22k", "content": "", "creation_timestamp": "2025-03-12T17:18:59.631339Z"}, {"uuid": "3ba00846-f1f8-4329-ba3b-c8f732ae9cfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ll4lcg3snno2", "content": "", "creation_timestamp": "2025-03-24T10:47:35.642646Z"}, {"uuid": "d0679379-89ce-4db0-ad19-d9e80cb6c56a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27835", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llalpbpw6c2j", "content": "", "creation_timestamp": "2025-03-26T01:04:19.390484Z"}, {"uuid": "a06d13db-2bbe-4ef9-a920-5fcd8de64bea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27681", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgzt3i6j2g", "content": "", "creation_timestamp": "2025-03-06T12:00:28.505340Z"}, {"uuid": "c48a8396-bd8b-463a-bf3d-e96745168f10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lk4xdybbxk2d", "content": "", "creation_timestamp": "2025-03-11T20:56:51.425430Z"}, {"uuid": "2b63d1d4-e7d2-4c33-846a-3fa7d53aed61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27509", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3lk74557svs2n", "content": "", "creation_timestamp": "2025-03-12T17:27:49.775157Z"}, {"uuid": "0d59e389-1643-4215-8856-7a81c1b7431e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27439", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lkltylcgjjf2", "content": "", "creation_timestamp": "2025-03-17T19:06:52.069017Z"}, {"uuid": "ed012efc-9f5e-422a-b774-117529c94f3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3llexhibvpc2n", "content": "", "creation_timestamp": "2025-03-27T18:45:17.821089Z"}, {"uuid": "d3d82dee-0233-4085-9aac-2ea2c70c2e64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27682", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgztbv7d2e", "content": "", "creation_timestamp": "2025-03-06T12:00:29.094734Z"}, {"uuid": "0acbe270-e68e-4810-a21e-cd13c363febd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27407", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lkemrmrnvk2o", "content": "", "creation_timestamp": "2025-03-14T22:08:57.256092Z"}, {"uuid": "2e1d38c5-11c4-4531-8fae-f07e9f738b04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27780", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkri2jaqmo26", "content": "", "creation_timestamp": "2025-03-20T00:49:02.298889Z"}, {"uuid": "37c94dcf-d287-47bf-8f5d-ad20a3c70f23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27831", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llalqx5agq2k", "content": "", "creation_timestamp": "2025-03-26T01:05:12.331238Z"}, {"uuid": "cad68c00-6a1f-4fe0-8940-3a134d60b55a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27143", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lixujria462f", "content": "", "creation_timestamp": "2025-02-25T02:57:54.895405Z"}, {"uuid": "d319d463-3b55-4a59-97ed-434bc0f707b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3ljxqn46f3r2x", "content": "", "creation_timestamp": "2025-03-09T19:13:21.914650Z"}, {"uuid": "3cefe28f-e827-4600-9a82-6a67a4b00dec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27142", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114082300050791145", "content": "", "creation_timestamp": "2025-02-28T15:49:14.723131Z"}, {"uuid": "74531d4d-bc22-4177-9509-7601abf4ecfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27521", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljkcp2zj372h", "content": "", "creation_timestamp": "2025-03-04T10:59:20.930048Z"}, {"uuid": "0bc84e3f-053b-4f0a-be93-0ecc5cc24b4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27786", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkri2jdzli2s", "content": "", "creation_timestamp": "2025-03-20T00:49:02.917239Z"}, {"uuid": "251adaef-d37e-4a77-9d75-c25cc3fce2b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2746", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114219373942955414", "content": "", "creation_timestamp": "2025-03-24T20:48:54.663885Z"}, {"uuid": "6387a419-1e48-4da6-9086-7bac08470b8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27816", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lk34dxeo3k2k", "content": "", "creation_timestamp": "2025-03-11T03:21:02.806674Z"}, {"uuid": "9be125e2-0e15-4f64-8e9f-02fd445a9876", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "seen", "source": "https://bsky.app/profile/katchwreck.mastodon.social.ap.brid.gy/post/3lk4zts7cwff2", "content": "", "creation_timestamp": "2025-03-11T21:41:45.133035Z"}, {"uuid": "36a798f0-106f-4075-8b36-76f11fb591f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27776", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkri2jhh4j2w", "content": "", "creation_timestamp": "2025-03-20T00:49:03.492004Z"}, {"uuid": "ed34e1b4-2982-40ca-8175-1da80b572f89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2747", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114219373984443049", "content": "", "creation_timestamp": "2025-03-24T20:48:56.013242Z"}, {"uuid": "735e4915-39aa-4c79-a746-b7a39cfaa217", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27218", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3ljpjrzm5e72t", "content": "", "creation_timestamp": "2025-03-06T12:49:33.463620Z"}, {"uuid": "8a3be263-59f2-4a4c-a19a-8bb2fc53ba87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://cyberplace.social/users/GossiTheDog/statuses/114134748263447483", "content": "", "creation_timestamp": "2025-03-09T22:07:44.580663Z"}, {"uuid": "23849978-3f31-483a-b39f-eb7c0eda1d21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://bsky.app/profile/GossiTheDog.cyberplace.social.ap.brid.gy/post/3ljy2etlej6u2", "content": "", "creation_timestamp": "2025-03-09T22:07:48.740938Z"}, {"uuid": "56a4ce88-8094-4cb8-a66d-b1816a09979c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27774", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkri2jkrbo2h", "content": "", "creation_timestamp": "2025-03-20T00:49:04.107238Z"}, {"uuid": "d28d9c8b-67da-42b3-a354-bec476cc73b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27834", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llalqxaksp2l", "content": "", "creation_timestamp": "2025-03-26T01:05:12.915949Z"}, {"uuid": "a871e3f0-43f0-4726-8ebc-11e26cde6581", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27152", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lk34kmsxgc2y", "content": "", "creation_timestamp": "2025-03-11T03:24:45.761548Z"}, {"uuid": "4ac05f15-75fc-4046-9b8c-a5538d8c292d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27509", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lk34ouc5yc2v", "content": "", "creation_timestamp": "2025-03-11T03:27:08.885129Z"}, {"uuid": "2877deeb-3e50-4169-8a87-4d1d39f1953c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27423", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lklwuqfadg2x", "content": "", "creation_timestamp": "2025-03-17T19:58:15.573405Z"}, {"uuid": "438b1add-5dd4-459f-af75-68526a377fb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27779", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkri2jo34k2j", "content": "", "creation_timestamp": "2025-03-20T00:49:04.668025Z"}, {"uuid": "b5f85219-bff3-4b62-8cc9-842ea4c02a21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27784", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkri2o7rtg2h", "content": "", "creation_timestamp": "2025-03-20T00:49:12.003051Z"}, {"uuid": "f3f763c9-8184-430a-af74-73e4a14b08ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27837", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llalqxebmx26", "content": "", "creation_timestamp": "2025-03-26T01:05:13.514700Z"}, {"uuid": "373e37c8-e53d-491c-b4af-639ca09b07b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27778", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkri2jrj4i2n", "content": "", "creation_timestamp": "2025-03-20T00:49:05.244768Z"}, {"uuid": "f61e26d5-a376-40fb-bfc5-9d4b12f82fb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27836", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llalqxhxkd26", "content": "", "creation_timestamp": "2025-03-26T01:05:14.067873Z"}, {"uuid": "da60feee-0f3a-4d82-a24b-512aca7e1460", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lklwuqfadg2x", "content": "", "creation_timestamp": "2025-03-17T19:58:15.496992Z"}, {"uuid": "bccc0d97-be7e-41c8-a5d0-a6047737fa0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27775", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkri2jvaw42m", "content": "", "creation_timestamp": "2025-03-20T00:49:05.848978Z"}, {"uuid": "aaac2f09-a1f4-4192-8d6f-e97a1a13c228", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27593", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lkepn6ejjr24", "content": "", "creation_timestamp": "2025-03-14T23:00:10.302671Z"}, {"uuid": "0614ebe0-c4e6-44bd-94f7-354016b0b26d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27595", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lkepn6l4f423", "content": "", "creation_timestamp": "2025-03-14T23:00:10.880862Z"}, {"uuid": "6d299974-8197-44b3-8d71-4d28e5487fd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27781", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkri2k4gpy2n", "content": "", "creation_timestamp": "2025-03-20T00:49:06.995819Z"}, {"uuid": "aeef060d-c342-468c-b157-24dfe018d2a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27809", "type": "seen", "source": "https://mastodon.social/users/bagder/statuses/114219552888158695", "content": "", "creation_timestamp": "2025-03-24T21:34:31.078026Z"}, {"uuid": "50f26bcf-fad0-4347-b6d9-2657476f252e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27432", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lk3625csfo2m", "content": "", "creation_timestamp": "2025-03-11T03:51:17.597068Z"}, {"uuid": "4ba9ca63-5e1e-4793-b1e5-b9d340edee44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27407", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-3e39154e-7e52655bd7735e43", "content": "", "creation_timestamp": "2025-03-16T23:34:06.950766Z"}, {"uuid": "dbcb8c7a-945c-4c67-a9ac-0cf224b52955", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27777", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkri2k7k4a26", "content": "", "creation_timestamp": "2025-03-20T00:49:07.526853Z"}, {"uuid": "e2ebd5bb-d6cf-4dcb-aedb-210cb3afb541", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "seen", "source": "https://bsky.app/profile/harmonic-osc.bsky.social/post/3ljyd4jgoxc2s", "content": "", "creation_timestamp": "2025-03-10T00:44:09.591233Z"}, {"uuid": "2d0ae147-c499-4626-8054-f4d164230665", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/114163361208545620", "content": "", "creation_timestamp": "2025-03-14T23:24:12.629160Z"}, {"uuid": "e184f250-99de-4a79-831e-ded4b225ee18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27785", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkri2kd5wc2j", "content": "", "creation_timestamp": "2025-03-20T00:49:10.220273Z"}, {"uuid": "72f7d199-b825-4352-9672-50badfccdc0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27787", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkri2nz43q2s", "content": "", "creation_timestamp": "2025-03-20T00:49:10.807792Z"}, {"uuid": "b3499a71-dc4b-45f0-9072-b0b5c37f545f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27867", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114150759111212347", "content": "", "creation_timestamp": "2025-03-12T17:59:15.220777Z"}, {"uuid": "3a8178e1-ead7-40aa-877e-c06a1898cf20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27867", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114150762205997815", "content": "", "creation_timestamp": "2025-03-12T18:00:03.122369Z"}, {"uuid": "58e90185-7507-437c-a85c-422ce5a673d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27782", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkri2o4ggi2n", "content": "", "creation_timestamp": "2025-03-20T00:49:11.354396Z"}, {"uuid": "59645062-fe0e-4747-95e1-a75ad8963a04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27268", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljkg3s4fwe2e", "content": "", "creation_timestamp": "2025-03-04T12:00:09.704024Z"}, {"uuid": "26fd1c1e-4b39-47c9-ad95-3720c6950ffd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27783", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkri2od4bo2h", "content": "", "creation_timestamp": "2025-03-20T00:49:12.614353Z"}, {"uuid": "4c17de60-c6b2-466e-99e4-7c79d1f9b786", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3llamoakxws2z", "content": "", "creation_timestamp": "2025-03-26T01:21:39.421924Z"}, {"uuid": "a8eaca12-dd09-4ad5-a10d-271c6de33ce8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27263", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114099285967211575", "content": "", "creation_timestamp": "2025-03-03T15:48:59.324774Z"}, {"uuid": "efc2b47d-28d8-4352-ab6e-0ae3fa329395", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27270", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljkg3scpzn2i", "content": "", "creation_timestamp": "2025-03-04T12:00:10.423088Z"}, {"uuid": "6449b9f5-7fe4-40f3-9158-68f400d47150", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27494", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lk56agqkll2h", "content": "", "creation_timestamp": "2025-03-11T23:00:10.106733Z"}, {"uuid": "45f15c51-7f6a-4efa-b9b6-5991c3dde987", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27915", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lkoabw6otc2i", "content": "", "creation_timestamp": "2025-03-18T17:52:06.748935Z"}, {"uuid": "53bfd1a2-ed5d-44a2-936c-e0be6e872a5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27218", "type": "seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3llf56ufpu72t", "content": "", "creation_timestamp": "2025-03-27T20:27:50.968636Z"}, {"uuid": "90c4b460-2dc8-4ca7-996b-c5659d67a1eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27270", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114099286065307421", "content": "", "creation_timestamp": "2025-03-03T15:49:00.305380Z"}, {"uuid": "89d5550f-d39a-4589-9219-3a9addfadcdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2746", "type": "seen", "source": "https://bsky.app/profile/opsmatters.bsky.social/post/3lldda6gnu62u", "content": "", "creation_timestamp": "2025-03-27T03:10:38.057600Z"}, {"uuid": "dc178524-839f-4d06-9d27-bd54d07f4593", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2747", "type": "seen", "source": "https://bsky.app/profile/opsmatters.bsky.social/post/3lldda6gnu62u", "content": "", "creation_timestamp": "2025-03-27T03:10:38.145294Z"}, {"uuid": "c3972396-7f08-45bb-8e27-3924078ee710", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27268", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114099286010046432", "content": "", "creation_timestamp": "2025-03-03T15:49:00.918672Z"}, {"uuid": "21396317-e988-44ed-b038-c95b118d65e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27434", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lkrkmbmk6s23", "content": "", "creation_timestamp": "2025-03-20T01:34:46.261061Z"}, {"uuid": "e95c382e-d765-4152-9484-8a32519b0384", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3llf3vyp6tf2r", "content": "", "creation_timestamp": "2025-03-27T20:04:59.790354Z"}, {"uuid": "e7cb05d8-3aa1-41da-a9b0-bdaa01b430d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://notnow.dev/objects/4022692d-f6a4-4422-9c9e-6db97a1ab97c", "content": "", "creation_timestamp": "2025-03-23T23:32:14.173949Z"}, {"uuid": "251193d0-eadc-4c43-8b62-3526d0cc4b1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2773", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-187/", "content": "", "creation_timestamp": "2025-03-25T04:00:00.000000Z"}, {"uuid": "c9e44783-a350-411b-8e97-dfe6e4615392", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2770", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-186/", "content": "", "creation_timestamp": "2025-03-25T04:00:00.000000Z"}, {"uuid": "a9bc1c04-5c1c-4abb-bda9-1eba34fedc88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2772", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-185/", "content": "", "creation_timestamp": "2025-03-25T04:00:00.000000Z"}, {"uuid": "d6bd31eb-9591-465c-95ce-d0df7b066009", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2771", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-184/", "content": "", "creation_timestamp": "2025-03-25T04:00:00.000000Z"}, {"uuid": "efbf0ac1-ec6a-473a-ad73-d47fce64f3a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2769", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-183/", "content": "", "creation_timestamp": "2025-03-25T04:00:00.000000Z"}, {"uuid": "eb35b2f8-8449-4927-b05d-e4db95754fc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2767", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-181/", "content": "", "creation_timestamp": "2025-03-25T04:00:00.000000Z"}, {"uuid": "bf8cb766-a2ce-464b-8724-336d9c8ca987", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27364", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3liy4or5tvs2c", "content": "", "creation_timestamp": "2025-02-25T05:23:57.042715Z"}, {"uuid": "f9228f35-26e4-4ad9-8e25-87fd555cea2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27091", "type": "seen", "source": "https://bsky.app/profile/celenity.dev/post/3ljb3ob5xkc2z", "content": "", "creation_timestamp": "2025-02-28T18:59:39.736947Z"}, {"uuid": "88a9205c-85fb-4a31-a205-02c60053313e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27218", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3ljpqrj7shb2e", "content": "", "creation_timestamp": "2025-03-06T14:54:32.007254Z"}, {"uuid": "6121bbcf-768e-46d1-a378-58f6d9609efa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2768", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-182/", "content": "", "creation_timestamp": "2025-03-25T04:00:00.000000Z"}, {"uuid": "73fccf9c-0ced-4a53-92e4-09ca1c5a4bc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27364", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljmvgn2p6if2", "content": "", "creation_timestamp": "2025-03-05T11:40:33.190888Z"}, {"uuid": "0452cb6c-7657-4677-8711-03a1db3b6080", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27517", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3lk3cvq25i22p", "content": "", "creation_timestamp": "2025-03-11T05:18:20.740523Z"}, {"uuid": "86963828-c900-4319-81c1-907fe1b45861", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-27364", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3liy6crzgbc2p", "content": "", "creation_timestamp": "2025-02-25T05:52:57.136565Z"}, {"uuid": "ffa30d77-9d1c-4bed-8c04-f8aa40b51ef4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2766", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-180/", "content": "", "creation_timestamp": "2025-03-25T04:00:00.000000Z"}, {"uuid": "c4a6ebc4-98c4-4328-b0dd-d620b69c470c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27364", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljkimw6h3gc2", "content": "", "creation_timestamp": "2025-03-04T12:48:44.387974Z"}, {"uuid": "e7c40ac4-7957-438c-9957-7991856f9855", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27622", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3ljyoznvdsk2p", "content": "", "creation_timestamp": "2025-03-10T04:17:17.858388Z"}, {"uuid": "3f4e30df-5744-44d8-9de6-3776a0c14ea9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27152", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3lk5cpdjizk2y", "content": "", "creation_timestamp": "2025-03-12T00:20:03.225802Z"}, {"uuid": "f129ed7b-eef4-459c-a2bf-e754a116fe56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "MISP/0c55e2e0-b297-4bc6-921b-5d4b37cda914", "content": "", "creation_timestamp": "2025-03-12T10:08:23.000000Z"}, {"uuid": "c56336ae-24f7-4e20-8d54-6e8f072032ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2747", "type": "seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3ll5rsxdjlz2q", "content": "", "creation_timestamp": "2025-03-24T22:15:42.429620Z"}, {"uuid": "f59773bd-acf9-4460-a1a1-dd28e053af69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2763", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-179/", "content": "", "creation_timestamp": "2025-03-25T04:00:00.000000Z"}, {"uuid": "d5789395-f249-46a3-9776-80fcda34c032", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/opera-security.bsky.social/post/3llfdfkwhss2f", "content": "", "creation_timestamp": "2025-03-27T22:19:03.066762Z"}, {"uuid": "08ea01fc-e589-442f-b62e-5e0c0d123d3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27623", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3ljyoznvdsk2p", "content": "", "creation_timestamp": "2025-03-10T04:17:17.937332Z"}, {"uuid": "a63147b4-62b7-474a-aee1-56401454379c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27809", "type": "seen", "source": "https://bsky.app/profile/bagder.mastodon.social.ap.brid.gy/post/3ll5pjgxeyoe2", "content": "", "creation_timestamp": "2025-03-24T22:24:35.402416Z"}, {"uuid": "d186b8f6-95c0-4562-a3a5-ecdcc3c1f43c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2764", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-178/", "content": "", "creation_timestamp": "2025-03-25T04:00:00.000000Z"}, {"uuid": "92cda3ed-35a5-4f4e-80f2-2bdb5a45c82f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/tperry603.bsky.social/post/3llc5kghpds2s", "content": "", "creation_timestamp": "2025-03-26T15:56:20.051898Z"}, {"uuid": "c60c2ab3-0af4-4b9d-b724-3a032b208731", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27816", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljt7pyqqkb26", "content": "", "creation_timestamp": "2025-03-08T00:00:09.058964Z"}, {"uuid": "9d413f7f-c9a1-49bf-96c8-0631b3d7baff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2765", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-177/", "content": "", "creation_timestamp": "2025-03-25T04:00:00.000000Z"}, {"uuid": "fe90fc53-cd44-4139-970c-4662cbc9b31e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27607", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3ljysfavsc22g", "content": "", "creation_timestamp": "2025-03-10T05:17:26.177016Z"}, {"uuid": "781e4221-4f2d-4a40-876e-8453f40869ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27423", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114099556793062950", "content": "", "creation_timestamp": "2025-03-03T16:57:49.831817Z"}, {"uuid": "5fa64afd-4ff8-43ca-ba99-4e42c5af28c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27603", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljt7pzl7ba2s", "content": "", "creation_timestamp": "2025-03-08T00:00:11.869031Z"}, {"uuid": "89eab84a-1a77-45d5-aaf8-98f75d4cea0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-27607", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3ljyt774nws2g", "content": "", "creation_timestamp": "2025-03-10T05:31:56.542815Z"}, {"uuid": "198f7ba7-380b-4ca5-9f3b-8a9afb8cd167", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2748", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll5t66rlpk2e", "content": "", "creation_timestamp": "2025-03-24T22:39:52.718304Z"}, {"uuid": "97383cbe-a56e-46d3-b8b4-b0b64a7378c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2762", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-176/", "content": "", "creation_timestamp": "2025-03-25T04:00:00.000000Z"}, {"uuid": "cd0f413e-3033-4782-b373-df54d8ad0c94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27422", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114099625284227660", "content": "", "creation_timestamp": "2025-03-03T17:15:15.151620Z"}, {"uuid": "21ba7d06-61b7-4c45-878e-108316d2a9a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2749", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll5t672tjd24", "content": "", "creation_timestamp": "2025-03-24T22:39:53.426136Z"}, {"uuid": "f5fe181a-f204-4bcc-b9c9-57b87560b8a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3llaov65bhze2", "content": "", "creation_timestamp": "2025-03-26T02:16:58.721938Z"}, {"uuid": "946fe5fb-288e-4da1-93b8-ef0658ea009c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-27517", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3ljytjrg4y22g", "content": "", "creation_timestamp": "2025-03-10T05:37:51.462127Z"}, {"uuid": "c6bffd4d-ca46-40e4-b9ca-3f889d3b988b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3llf57sriyw2s", "content": "", "creation_timestamp": "2025-03-27T20:28:23.077084Z"}, {"uuid": "40297fe2-0fb2-487d-ac2b-b4276e2c4df7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://notnow.dev/objects/ed2f6133-b635-4934-8c74-2310f338a8db", "content": "", "creation_timestamp": "2025-03-24T01:36:09.586060Z"}, {"uuid": "42bae0b9-e4af-437e-92ab-28d08e2dd4df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27507", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljmwkpptqd2c", "content": "", "creation_timestamp": "2025-03-05T12:00:10.712762Z"}, {"uuid": "c03a6768-6851-4f43-8fed-205e4cae876f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27218", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-27218.yaml", "content": "", "creation_timestamp": "2025-03-06T15:28:37.000000Z"}, {"uuid": "dc5a211f-74f4-4a35-8d2c-5747b16bfb6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27407", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114151081494165899", "content": "", "creation_timestamp": "2025-03-12T19:21:15.360207Z"}, {"uuid": "143e4af3-b033-472a-a3e5-df7b3c8db181", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27498", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114099772162398875", "content": "", "creation_timestamp": "2025-03-03T17:52:36.295949Z"}, {"uuid": "6d505601-b7f4-482d-b076-b949d467935b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27263", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljikjr4vn22o", "content": "", "creation_timestamp": "2025-03-03T18:14:11.465562Z"}, {"uuid": "3760f673-e154-4cbf-bbe8-b8aafa5a0e85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27275", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljikjrnkac2v", "content": "", "creation_timestamp": "2025-03-03T18:14:12.284108Z"}, {"uuid": "718ed8b4-6331-4930-9169-21da877d3144", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27824", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljthjqx4eo2f", "content": "", "creation_timestamp": "2025-03-08T02:19:47.769426Z"}, {"uuid": "d3900930-2da5-4038-9301-7cb634d1c968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27826", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljthjrao4226", "content": "", "creation_timestamp": "2025-03-08T02:19:49.028663Z"}, {"uuid": "e08e06cc-9e03-429a-bde0-354d44339136", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2708", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll5t67j2pl2n", "content": "", "creation_timestamp": "2025-03-24T22:39:55.750299Z"}, {"uuid": "9240838c-8cc9-4d27-997b-448a5f1fce21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/deskmodder.de/post/3lldmyxbb472r", "content": "", "creation_timestamp": "2025-03-27T06:05:33.034570Z"}, {"uuid": "0ed1f52c-633d-47f1-960b-aa5d31a4b33a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27274", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljikjrryrh26", "content": "", "creation_timestamp": "2025-03-03T18:14:12.837435Z"}, {"uuid": "ecbebafa-e66a-4ead-95d3-d1eadd31b9d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27822", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljthjr2wi42h", "content": "", "creation_timestamp": "2025-03-08T02:19:48.377090Z"}, {"uuid": "0f7ac260-7072-443c-85d8-7f062068cf3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-27152", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lk3kao2sm227", "content": "", "creation_timestamp": "2025-03-11T07:29:41.542457Z"}, {"uuid": "9573afe2-1228-49b4-82e9-0765fb970baa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27867", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lk7cpuu6ls2x", "content": "", "creation_timestamp": "2025-03-12T19:25:43.548204Z"}, {"uuid": "d102722e-8c7b-48ba-880a-cdad45a3155f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lkd64hmkoc2x", "content": "", "creation_timestamp": "2025-03-14T08:13:53.645771Z"}, {"uuid": "e1efb635-e5a8-4592-a559-bc9548f5160d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2709", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll5t67mmxa2w", "content": "", "creation_timestamp": "2025-03-24T22:39:56.397316Z"}, {"uuid": "5f536373-afd1-45cd-b268-b5bc99afa8d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27364", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3liyjyr3vox2u", "content": "", "creation_timestamp": "2025-02-25T09:22:06.215324Z"}, {"uuid": "eb1e0628-e650-4e19-85bc-b86750c46f09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27278", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljikjrveuh2i", "content": "", "creation_timestamp": "2025-03-03T18:14:13.334921Z"}, {"uuid": "b462f295-919b-4fb1-990d-d6a4eaafe4ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27825", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljthjrmts62e", "content": "", "creation_timestamp": "2025-03-08T02:19:49.848984Z"}, {"uuid": "53de6db5-b76e-4dce-9e4f-0351138a865c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27364", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3liykdme4722k", "content": "", "creation_timestamp": "2025-02-25T09:28:13.036676Z"}, {"uuid": "3743527b-70d4-4ae2-92c5-785f7fea0272", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27364", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljmyfkkfdbf2", "content": "", "creation_timestamp": "2025-03-05T12:33:58.821932Z"}, {"uuid": "eacf7cbe-0ee9-47bd-8334-44178418093b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-27816", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lk3kdkxvbk27", "content": "", "creation_timestamp": "2025-03-11T07:31:19.074920Z"}, {"uuid": "82e73e5a-6afe-4b02-a813-2801cb2b3a8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27718", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lks3grzvck23", "content": "", "creation_timestamp": "2025-03-20T06:35:55.729127Z"}, {"uuid": "0ecbd3bf-4bf7-4da5-bf18-d10a74af138f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2702", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll4rdgraty26", "content": "", "creation_timestamp": "2025-03-24T12:34:22.068416Z"}, {"uuid": "1d4eba0f-a24c-4abe-8541-97fba1b635e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3ljz2tujwas2h", "content": "", "creation_timestamp": "2025-03-10T07:48:52.218333Z"}, {"uuid": "41da8c18-77e9-407b-b257-a6352c5962ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2700", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll4rdguvsh2m", "content": "", "creation_timestamp": "2025-03-24T12:34:22.684852Z"}, {"uuid": "1f439fe9-5266-4125-9c13-3990708f6b36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/azaka.fun/post/3llat2ufrc22s", "content": "", "creation_timestamp": "2025-03-26T03:16:08.824274Z"}, {"uuid": "f73a047b-9849-44dc-b922-238930bca982", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27517", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3ljz32azeus2i", "content": "", "creation_timestamp": "2025-03-10T07:52:24.218238Z"}, {"uuid": "0b74679b-e70f-454f-bae3-fda7dee7f432", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2746", "type": "seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3ll5tz67vhj2c", "content": "", "creation_timestamp": "2025-03-24T22:54:58.024197Z"}, {"uuid": "e479129f-77b6-42f8-a153-c8375e60719a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/azaka.fun/post/3llat2ybhcc2s", "content": "", "creation_timestamp": "2025-03-26T03:16:09.294513Z"}, {"uuid": "06cba7eb-dbbd-4bbc-8ed4-c57a543a2dda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://bsky.app/profile/cyberkendra.bsky.social/post/3lk3lhmzo7c2o", "content": "", "creation_timestamp": "2025-03-11T07:51:32.006885Z"}, {"uuid": "51bec01c-9281-4174-9da1-60e88de4a42b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27407", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lk7dk2t5tv2u", "content": "", "creation_timestamp": "2025-03-12T19:40:19.322371Z"}, {"uuid": "39a4c153-b399-46e0-b8dc-6b7f4a745cc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2701", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll4rdh3pp42x", "content": "", "creation_timestamp": "2025-03-24T12:34:23.972756Z"}, {"uuid": "dc751caa-f5d3-4786-82f4-e245b3d4b1dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27094", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljim7h27tx2b", "content": "", "creation_timestamp": "2025-03-03T18:44:12.663179Z"}, {"uuid": "6d6f8d9c-1f2a-4094-9344-18cd93716693", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27407", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114151188619952651", "content": "", "creation_timestamp": "2025-03-12T19:48:29.031369Z"}, {"uuid": "eb7efe83-3aac-429d-9692-3df2819309a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://infosec.exchange/users/tomcat/statuses/114160196910378614", "content": "", "creation_timestamp": "2025-03-14T09:59:24.423473Z"}, {"uuid": "4b3f2357-e1f4-47c6-b874-3a27582357f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27407", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3lkko63mhzk2c", "content": "", "creation_timestamp": "2025-03-17T07:49:47.538351Z"}, {"uuid": "7d655d1e-1401-4deb-93cf-5b39c4da5897", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27147", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll7q2zohr426", "content": "", "creation_timestamp": "2025-03-25T16:49:45.293705Z"}, {"uuid": "e4673665-c4f8-4022-8f93-7fb2511866eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3llatv7qkgs25", "content": "", "creation_timestamp": "2025-03-26T03:30:46.679325Z"}, {"uuid": "c5095c03-7fac-4d62-9661-5b9b3ac42ec3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27419", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljim7hmlg52v", "content": "", "creation_timestamp": "2025-03-03T18:44:14.053307Z"}, {"uuid": "b4615c82-b43c-46c6-8e1a-1e3a45ef83b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27839", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljtosihekz2k", "content": "", "creation_timestamp": "2025-03-08T04:29:57.946313Z"}, {"uuid": "070c5b35-1152-49ee-b39e-3b7b22ef4753", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27517", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3ljz7chipv22w", "content": "", "creation_timestamp": "2025-03-10T09:08:31.949801Z"}, {"uuid": "59686656-68d8-45c9-ae8c-962df2860de7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27099", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljim7hu3qz2a", "content": "", "creation_timestamp": "2025-03-03T18:44:15.164580Z"}, {"uuid": "96db53cc-7e98-40a7-a2a1-0ed19b3cae4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3llaty5xc4k25", "content": "", "creation_timestamp": "2025-03-26T03:32:30.903328Z"}, {"uuid": "f3a41915-3855-4fc3-9981-95594fb1345e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27425", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114104546018145703", "content": "", "creation_timestamp": "2025-03-04T14:06:39.273061Z"}, {"uuid": "10c79f7c-b997-4445-acb5-79c37b4f234e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27439", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lkkqhqiuj7l2", "content": "", "creation_timestamp": "2025-03-17T08:31:08.173484Z"}, {"uuid": "c7b96544-f088-4562-8f69-8d2f8dc003c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27417", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljim7ibs752a", "content": "", "creation_timestamp": "2025-03-03T18:44:16.877681Z"}, {"uuid": "800c6e78-91d8-4852-b3de-b0767f1fabc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27256", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114137515253744660", "content": "", "creation_timestamp": "2025-03-10T09:51:12.129275Z"}, {"uuid": "078c39f1-0974-4f7b-be39-7688e00af09e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27255", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114137515128173485", "content": "", "creation_timestamp": "2025-03-10T09:51:12.669858Z"}, {"uuid": "88f02746-5c61-4ac6-aeee-79f0cec38d5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3lk3o65y7wa2s", "content": "", "creation_timestamp": "2025-03-11T08:39:52.034682Z"}, {"uuid": "3c91559a-3bc5-438c-a2a9-fb91ca3502ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27553", "type": "seen", "source": "https://bsky.app/profile/garydgregory.bsky.social/post/3ll4t2xhgqs2w", "content": "", "creation_timestamp": "2025-03-24T13:05:24.762221Z"}, {"uuid": "bd032d4c-a4e2-45e7-8e08-959472acf55e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27418", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljim7ik52h2b", "content": "", "creation_timestamp": "2025-03-03T18:44:18.057827Z"}, {"uuid": "e09f1ab8-e082-464b-843a-620a95ce5e7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27254", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114137515100033349", "content": "", "creation_timestamp": "2025-03-10T09:51:12.396207Z"}, {"uuid": "acf760f3-fccf-446e-a81b-e6f123fb55ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27760", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkml5pgvrs2j", "content": "", "creation_timestamp": "2025-03-18T02:01:11.046351Z"}, {"uuid": "a3f0c3b4-5b97-4c2b-ab28-5e59e8034483", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27420", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljim7ip7v52a", "content": "", "creation_timestamp": "2025-03-03T18:44:18.624254Z"}, {"uuid": "06213fd0-dd1a-4153-99dd-5e6958669ddb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27517", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ljts5jd2s22i", "content": "", "creation_timestamp": "2025-03-08T05:29:49.690689Z"}, {"uuid": "65f89153-116f-4497-86d5-c7fcf7f2a6e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27912", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114143167566690773", "content": "", "creation_timestamp": "2025-03-11T09:48:37.783213Z"}, {"uuid": "6e95e977-0174-4f20-ac5b-6f0a7876de3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27767", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkml5q765k2j", "content": "", "creation_timestamp": "2025-03-18T02:01:13.311927Z"}, {"uuid": "d4f14814-0ede-4092-ab86-54c6ef4e5dac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27765", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkml5qk2cd2h", "content": "", "creation_timestamp": "2025-03-18T02:01:14.935174Z"}, {"uuid": "57f5c3c9-903b-4585-a57e-e5dcb3843455", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27017", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lkfkqbwagk23", "content": "", "creation_timestamp": "2025-03-15T07:05:04.324143Z"}, {"uuid": "19bf5f7c-5b89-4683-8e77-9b5972a40adc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27766", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkml5qcsnb2m", "content": "", "creation_timestamp": "2025-03-18T02:01:13.868258Z"}, {"uuid": "a213e867-573c-4092-86e6-a7ad753cf2e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27370", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114100193525391284", "content": "", "creation_timestamp": "2025-03-03T19:39:46.022523Z"}, {"uuid": "73962ced-679b-480b-886b-1c253cce2494", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27764", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkml5qgapk2j", "content": "", "creation_timestamp": "2025-03-18T02:01:14.413505Z"}, {"uuid": "59b4be2e-0116-4400-9032-64750ec969af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27371", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114100193525391284", "content": "", "creation_timestamp": "2025-03-03T19:39:46.076763Z"}, {"uuid": "1522ea4e-bebd-42f2-b41a-cdfdf873a9c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27761", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkml5qr5ra2n", "content": "", "creation_timestamp": "2025-03-18T02:01:16.017885Z"}, {"uuid": "cd1f2573-5cd4-43b6-970b-b570095c3031", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27500", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114100218515671455", "content": "", "creation_timestamp": "2025-03-03T19:46:07.251619Z"}, {"uuid": "2dc5e39c-2a30-445e-8457-e4b25e446393", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27501", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114100218515671455", "content": "", "creation_timestamp": "2025-03-03T19:46:07.383645Z"}, {"uuid": "36d772cb-a28a-44c6-9eb3-fc708505f7c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27768", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkml5r72sj2s", "content": "", "creation_timestamp": "2025-03-18T02:01:18.178235Z"}, {"uuid": "c62951c7-84a9-467f-b596-0281e961a15c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114154169550939288", "content": "", "creation_timestamp": "2025-03-13T08:26:34.231896Z"}, {"uuid": "affceefc-86ab-4ee6-854c-dc89f9024786", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27763", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkml5rfura26", "content": "", "creation_timestamp": "2025-03-18T02:01:19.315446Z"}, {"uuid": "ae9e0421-9b7b-4e26-b774-cb49771e0eb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://infosec.exchange/users/decio/statuses/114154208325870797", "content": "", "creation_timestamp": "2025-03-13T08:36:26.072306Z"}, {"uuid": "b19196b3-e2b1-4763-a433-1aac8a2eb193", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lk5paglaq22j", "content": "", "creation_timestamp": "2025-03-12T04:04:24.688709Z"}, {"uuid": "1d104360-c79c-479f-9622-a0293a114b85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27762", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkml5rjsz32e", "content": "", "creation_timestamp": "2025-03-18T02:01:19.825101Z"}, {"uuid": "930fe149-a462-46ee-9772-bfdbae6bcfdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-27364", "type": "seen", "source": "https://bsky.app/profile/OpenSource.activitypub.awakari.com.ap.brid.gy/post/3liynxv3tbvl2", "content": "", "creation_timestamp": "2025-02-25T10:33:39.196755Z"}, {"uuid": "6e87d64f-3655-4e13-830f-0897630b055c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27412", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljnrdrl53e2b", "content": "", "creation_timestamp": "2025-03-05T19:59:25.506894Z"}, {"uuid": "c5d0ff85-7d3e-4509-a059-eb43e500b77b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27499", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljit7a2pcs2o", "content": "", "creation_timestamp": "2025-03-03T20:49:23.660541Z"}, {"uuid": "328027c2-2673-451d-beef-196740329035", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27423", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljit7ahf7b2d", "content": "", "creation_timestamp": "2025-03-03T20:49:25.416486Z"}, {"uuid": "5f63041a-49f4-465f-b8c6-f755755b3afa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27554", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114086071203267834", "content": "", "creation_timestamp": "2025-03-01T07:48:16.245848Z"}, {"uuid": "ae0d1328-8e4c-493d-842d-7134df670c55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27498", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljit7adiks2o", "content": "", "creation_timestamp": "2025-03-03T20:49:24.775902Z"}, {"uuid": "dba92587-1a3f-439d-9ebe-14a61abef498", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27688", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkoihyv6cs2e", "content": "", "creation_timestamp": "2025-03-18T20:18:36.511786Z"}, {"uuid": "a7290c39-479a-4f48-8199-eb94d240fcb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27018", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkpysbitl52j", "content": "", "creation_timestamp": "2025-03-19T10:43:20.919375Z"}, {"uuid": "ab70412a-40c0-4043-8ed9-f0831a4a5e27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27364", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3liystizb662c", "content": "", "creation_timestamp": "2025-02-25T12:00:14.636554Z"}, {"uuid": "25da3e61-abfa-4c48-b866-6ab980faf88f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lldrr5ecbk2x", "content": "", "creation_timestamp": "2025-03-27T07:30:39.872630Z"}, {"uuid": "12971214-4ee7-41a0-a30a-51f995691476", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27371", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljit7b4kzj2i", "content": "", "creation_timestamp": "2025-03-03T20:49:28.502320Z"}, {"uuid": "67575a71-6572-444e-a53b-2f4bdff52452", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/hackuritate.bsky.social/post/3lldswl36ac2w", "content": "", "creation_timestamp": "2025-03-27T07:51:37.876182Z"}, {"uuid": "deda2fa6-53ea-47f1-ba59-b6795058deaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27434", "type": "seen", "source": "https://threatintel.cc/2025/03/11/sap-patches-highseverity-vulnerabilities-in.html", "content": "", "creation_timestamp": "2025-03-11T22:41:02.000000Z"}, {"uuid": "851306ca-0cac-4095-b03d-e96a974b355c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/bettycjung.bsky.social/post/3llb5zmro4s2e", "content": "", "creation_timestamp": "2025-03-26T06:32:16.204080Z"}, {"uuid": "59b0aeba-4e8a-4e28-8e1b-5619b44acffa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27659", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljnszgsfkg2a", "content": "", "creation_timestamp": "2025-03-05T20:29:26.242656Z"}, {"uuid": "ceb02592-f7d0-4e55-bb57-1e194f23d656", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-27364", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/114064609060229366", "content": "", "creation_timestamp": "2025-02-25T12:50:09.562701Z"}, {"uuid": "23d64576-723f-4d0a-8213-a7e938966fe9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27663", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljnszhievp2s", "content": "", "creation_timestamp": "2025-03-05T20:29:27.117197Z"}, {"uuid": "6f8b6e7b-d795-4bb4-80da-b1c69b338eab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27664", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljnszhmdov2f", "content": "", "creation_timestamp": "2025-03-05T20:29:27.785048Z"}, {"uuid": "e1bda9fd-a81d-47f5-8ad6-9b527e1bdc82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27661", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljnszhqoyj2o", "content": "", "creation_timestamp": "2025-03-05T20:29:28.448013Z"}, {"uuid": "7d7eb692-4c6f-4262-a6b4-527d8668e175", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27662", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljnszhv7yi2q", "content": "", "creation_timestamp": "2025-03-05T20:29:29.058373Z"}, {"uuid": "c24bf465-d0b9-4add-8553-b67920227272", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27426", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljkxogshke2y", "content": "", "creation_timestamp": "2025-03-04T17:14:48.249492Z"}, {"uuid": "2ab0e04b-4d0f-4755-a3a2-b6f1b5431eb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27598", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljqvovokqr2q", "content": "", "creation_timestamp": "2025-03-07T01:55:12.889271Z"}, {"uuid": "f60e4383-d6fe-4185-ac07-ea5fc93fd8ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27364", "type": "seen", "source": "https://threatintel.cc/2025/02/25/security-alert-critical-flaws-in.html", "content": "", "creation_timestamp": "2025-02-25T11:50:15.000000Z"}, {"uuid": "d29fb510-674f-4fe1-a324-4fbe2c1e7e11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-27363", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lk5tmyrk2c2i", "content": "", "creation_timestamp": "2025-03-12T05:22:58.860977Z"}, {"uuid": "33a67940-b255-4273-b101-3b8239cc6a4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27112", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-27112.yaml", "content": "", "creation_timestamp": "2025-03-04T11:11:21.000000Z"}, {"uuid": "442f793a-1f4c-471a-b054-1290593e9fd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lkokpweols2m", "content": "", "creation_timestamp": "2025-03-18T20:58:48.267179Z"}, {"uuid": "d7ffed08-2c66-462b-9c90-9d9c1d9390c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lkokqdygp32r", "content": "", "creation_timestamp": "2025-03-18T20:59:06.380462Z"}, {"uuid": "063baaec-f5cd-4b3d-aeab-6c645c82bfbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27018", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114189028558161115", "content": "", "creation_timestamp": "2025-03-19T12:11:40.766967Z"}, {"uuid": "5e6e14db-3c23-4935-8c19-5cb4258f3331", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27494", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lk3uvjrpt22v", "content": "", "creation_timestamp": "2025-03-11T10:40:18.740821Z"}, {"uuid": "1f8ab4e2-2866-4ebe-8375-3a69ffb44990", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27112", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ljnutmpzla2v", "content": "", "creation_timestamp": "2025-03-05T21:02:02.274497Z"}, {"uuid": "f677f4e0-5384-4dfc-8283-498fe5ec10b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27000", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lizdqxsmnx2k", "content": "", "creation_timestamp": "2025-02-25T17:03:02.308249Z"}, {"uuid": "faffa0bd-cc75-4663-9ae0-8c9f5670c6a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2725", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114221259273759112", "content": "", "creation_timestamp": "2025-03-25T04:48:22.735429Z"}, {"uuid": "a1004f1d-defe-41a5-b155-6c2a94000de9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27218", "type": "seen", "source": "https://infosec.exchange/users/dragonjar/statuses/114137791829274582", "content": "", "creation_timestamp": "2025-03-10T11:01:29.946879Z"}, {"uuid": "50ed15f5-cb80-487c-91bf-558a9abf9c1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lkokr7tm7l2u", "content": "", "creation_timestamp": "2025-03-18T20:59:31.573296Z"}, {"uuid": "a2756f40-3746-4dfd-a0e3-96202a9e0381", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2726", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114221259319395925", "content": "", "creation_timestamp": "2025-03-25T04:48:23.055741Z"}, {"uuid": "819420b1-e87a-41d1-aa48-54d7818f1b75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2731", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114221259483812837", "content": "", "creation_timestamp": "2025-03-25T04:48:25.650084Z"}, {"uuid": "42734af5-ac6b-4290-8608-68a7d129d4ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2727", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114221259355489496", "content": "", "creation_timestamp": "2025-03-25T04:48:23.658860Z"}, {"uuid": "be329fe3-7412-4cfd-9f05-849923ae67f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2732", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114221259506635888", "content": "", "creation_timestamp": "2025-03-25T04:48:25.925992Z"}, {"uuid": "13dc0df9-9537-45fb-b0d6-b7b167288001", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3lldt5ugajk2x", "content": "", "creation_timestamp": "2025-03-27T07:55:43.852125Z"}, {"uuid": "940a39ea-ac04-4e52-84b9-f9e1e1b57796", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3llew35zjy22c", "content": "", "creation_timestamp": "2025-03-27T18:20:30.993862Z"}, {"uuid": "ffa354ad-82b3-4633-a82d-c96e68fe2fe8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27218", "type": "seen", "source": "https://bsky.app/profile/metasploit-r7.bsky.social/post/3ljo3pp4djc2e", "content": "", "creation_timestamp": "2025-03-05T23:05:05.905607Z"}, {"uuid": "5ed86c6b-97f3-4ab6-b1b6-5288af263afb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27256", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljzhrwyyib2h", "content": "", "creation_timestamp": "2025-03-10T11:40:20.139948Z"}, {"uuid": "29eb6b0e-750b-45f3-ae2d-cd3bcb3fe6a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lkokuzqx2e2r", "content": "", "creation_timestamp": "2025-03-18T21:01:39.679574Z"}, {"uuid": "d152fb94-bb8a-479c-a4ef-2d3f246e2e8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2728", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114221259383950249", "content": "", "creation_timestamp": "2025-03-25T04:48:23.957639Z"}, {"uuid": "639a6201-0751-406e-b864-8a285ab1afd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27254", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljzhrxv4qd2m", "content": "", "creation_timestamp": "2025-03-10T11:40:22.640570Z"}, {"uuid": "1273d489-97d9-4df6-a36e-47fac55db23f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2729", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114221259424648789", "content": "", "creation_timestamp": "2025-03-25T04:48:24.531588Z"}, {"uuid": "ba56dd47-2201-4194-a663-900e408eae1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27255", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljzhrxr3zt2f", "content": "", "creation_timestamp": "2025-03-10T11:40:22.089368Z"}, {"uuid": "23349c32-78bb-4b99-b69f-22c497a3268a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27494", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lk3xjodn7s2c", "content": "", "creation_timestamp": "2025-03-11T11:27:24.808223Z"}, {"uuid": "73a05512-bea3-483e-a0a7-0059aa3e1060", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3lk627t3buk2t", "content": "", "creation_timestamp": "2025-03-12T07:20:54.459092Z"}, {"uuid": "3e0a66b7-306b-48d3-b3c5-4e791a1f5d9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2730", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114221259450859869", "content": "", "creation_timestamp": "2025-03-25T04:48:25.110099Z"}, {"uuid": "6395aed1-4d1e-4719-a2e3-97e4c0ec4c69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27439", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lkn6qje7xfi2", "content": "", "creation_timestamp": "2025-03-18T08:00:11.319256Z"}, {"uuid": "ed000ec0-7abf-442e-9af7-d056bbdc30b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lkokvurocj2k", "content": "", "creation_timestamp": "2025-03-18T21:02:07.945940Z"}, {"uuid": "62041b8f-cfe8-4617-b0ea-906803e27f1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27257", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljzhryfo6b2h", "content": "", "creation_timestamp": "2025-03-10T11:40:23.956561Z"}, {"uuid": "5e8be484-23f2-43db-ad75-56d528457c47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27508", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljo5nlazil2q", "content": "", "creation_timestamp": "2025-03-05T23:39:40.108224Z"}, {"uuid": "36dafed2-6447-467e-8179-3799ff9904b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27253", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljzhryj5on2l", "content": "", "creation_timestamp": "2025-03-10T11:40:24.484182Z"}, {"uuid": "2b6beabf-e5cc-4c1d-a4c5-f140c9bdafe3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27439", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3lk3xm7z3fs2n", "content": "", "creation_timestamp": "2025-03-11T11:28:47.568228Z"}, {"uuid": "598d52d5-8f3b-4d45-823b-21ba3c726422", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/114154912251339479", "content": "", "creation_timestamp": "2025-03-13T11:35:26.871004Z"}, {"uuid": "e7ad10da-adeb-434e-954a-83d4ed9b01a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lkokxqvjot2k", "content": "", "creation_timestamp": "2025-03-18T21:03:11.093968Z"}, {"uuid": "b2c12e58-0ada-41a8-abe6-05aa1d48a258", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/defendopsdiaries.bsky.social/post/3llb75xyfq327", "content": "", "creation_timestamp": "2025-03-26T06:52:30.655750Z"}, {"uuid": "7a4a0c5f-c1e1-4822-8b1b-b2325a790e4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27440", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3lk3xmbkm452f", "content": "", "creation_timestamp": "2025-03-11T11:28:49.202027Z"}, {"uuid": "59098f1c-28c7-4a3f-8076-d45a3f5b1fc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lkokyjc4f22u", "content": "", "creation_timestamp": "2025-03-18T21:03:36.409234Z"}, {"uuid": "ff64200f-d5f5-4999-b3da-165c7fe6f6a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27157", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114077225711677534", "content": "", "creation_timestamp": "2025-02-27T18:18:44.617425Z"}, {"uuid": "5848c398-4877-4f47-bc9b-5ef578291e83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27399", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114077225711677534", "content": "", "creation_timestamp": "2025-02-27T18:18:44.751564Z"}, {"uuid": "29fe3019-538a-402b-8812-ae9ab68de813", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27516", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljo5nltrws22", "content": "", "creation_timestamp": "2025-03-05T23:39:41.947280Z"}, {"uuid": "49914f7a-3ef4-411f-8987-5ae29e24505a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27650", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljo6sankyn24", "content": "", "creation_timestamp": "2025-03-06T00:00:19.616907Z"}, {"uuid": "7c931bd7-aeae-4307-b8dc-900821196e60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27655", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljo6sbajj52b", "content": "", "creation_timestamp": "2025-03-06T00:00:21.878701Z"}, {"uuid": "27b564a4-8337-47e5-9939-c82a021a2626", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2746", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3llcnt6dcbc2m", "content": "", "creation_timestamp": "2025-03-26T20:47:34.574514Z"}, {"uuid": "698ecd5f-c840-4b35-ac9c-40cadefe66af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3llew35zjy32c", "content": "", "creation_timestamp": "2025-03-27T18:20:32.026554Z"}, {"uuid": "ccfe986b-32c8-4fab-a02c-cf9f9d8d203b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27651", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljo6satw5d23", "content": "", "creation_timestamp": "2025-03-06T00:00:20.332333Z"}, {"uuid": "e23d63e0-4467-4598-a879-9b39e625ff5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://thehackernews.com/2025/03/meta-warns-of-freetype-vulnerability.html", "content": "", "creation_timestamp": "2025-03-13T06:13:00.000000Z"}, {"uuid": "1bbbaeba-9cfc-42d6-8e79-b96c6d4a12c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27439", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lknfaiywy7i2", "content": "", "creation_timestamp": "2025-03-18T09:53:26.139972Z"}, {"uuid": "0228e47d-50e4-412b-b0ec-f7df09a2dceb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27590", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljj5uemne42w", "content": "", "creation_timestamp": "2025-03-04T00:00:08.950429Z"}, {"uuid": "60c6831d-4122-470f-9b2e-f6546c9a0442", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27396", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114143638979930528", "content": "", "creation_timestamp": "2025-03-11T11:48:30.659944Z"}, {"uuid": "62c269d5-20ff-4094-94cc-1c33721e066f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://infosec.exchange/users/dragonjar/statuses/114160440649196404", "content": "", "creation_timestamp": "2025-03-14T11:01:23.559622Z"}, {"uuid": "0f2d8204-2a0c-4b6a-bbb9-0a4510136647", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27659", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljo6sbz5jn24", "content": "", "creation_timestamp": "2025-03-06T00:00:24.669913Z"}, {"uuid": "3589331d-fc81-438f-97c1-8577f9e54a75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27493", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114143639015705325", "content": "", "creation_timestamp": "2025-03-11T11:48:31.223416Z"}, {"uuid": "399fe8e2-989f-4f4a-a756-b0e00c266ac9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27593", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lkfxumrbx424", "content": "", "creation_timestamp": "2025-03-15T11:00:08.537211Z"}, {"uuid": "51246cde-e86a-40e6-8208-039d398c6b7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27091", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ljgagfhhh22f", "content": "", "creation_timestamp": "2025-03-02T20:08:02.214130Z"}, {"uuid": "8674ff77-9c48-4411-98ec-2421b18d4bfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27638", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljo6s6oqou2d", "content": "", "creation_timestamp": "2025-03-06T00:00:12.004048Z"}, {"uuid": "6a3ead68-60a4-4cde-8bd3-f4ec90c8929d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27494", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114143639072319087", "content": "", "creation_timestamp": "2025-03-11T11:48:31.960198Z"}, {"uuid": "13a43d98-c4de-4d9a-9553-de75f25b1ade", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27507", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114105890556873873", "content": "", "creation_timestamp": "2025-03-04T19:48:36.054331Z"}, {"uuid": "e5cf4e65-4e43-4694-a435-c642f0bddaba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27640", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljo6s6unt32u", "content": "", "creation_timestamp": "2025-03-06T00:00:12.988665Z"}, {"uuid": "ec073987-4729-400e-bc24-b8aa810d8c1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27396", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lk43e2xghx2e", "content": "", "creation_timestamp": "2025-03-11T12:35:48.905117Z"}, {"uuid": "195ce426-8b88-44bb-abfe-1904843226f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27595", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lkfxumxi2l23", "content": "", "creation_timestamp": "2025-03-15T11:00:09.260272Z"}, {"uuid": "44ad30ef-b585-4980-823e-75a1f842e5af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2732", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114218312897136883", "content": "", "creation_timestamp": "2025-03-24T16:19:04.156051Z"}, {"uuid": "dc92abaa-b491-43bf-bb15-4f78b2f18f05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27013", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lii3cum7ty23", "content": "", "creation_timestamp": "2025-02-18T20:16:42.253908Z"}, {"uuid": "78cf9cb6-0514-46a7-bfee-10f03616d14f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27016", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lii3cwup6q23", "content": "", "creation_timestamp": "2025-02-18T20:16:44.665675Z"}, {"uuid": "19ac63cb-2d29-43e6-871a-614fa8b64144", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27113", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3liiffddphr2t", "content": "", "creation_timestamp": "2025-02-18T23:17:02.569403Z"}, {"uuid": "a0e670e0-e7ba-4011-81f5-4d2c8fee9182", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27641", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljo6s6zmdm2f", "content": "", "creation_timestamp": "2025-03-06T00:00:13.829341Z"}, {"uuid": "ad9ed0e2-1548-4570-82fc-d80912cb00d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27494", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lk43e3i6ig26", "content": "", "creation_timestamp": "2025-03-11T12:35:50.318153Z"}, {"uuid": "88fe6caf-fd8d-487f-8f38-b032d3f34382", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27268", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljj5uflo4b23", "content": "", "creation_timestamp": "2025-03-04T00:00:12.094611Z"}, {"uuid": "ac696aa0-b586-4efb-b774-f3e7880c2bdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27642", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljo6s77o7l2e", "content": "", "creation_timestamp": "2025-03-06T00:00:14.597863Z"}, {"uuid": "ead699ef-0ea2-4ec5-a264-b3ce2f5c5ca5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://threatintel.cc/2025/03/13/meta-warns-of-freetype-vulnerability.html", "content": "", "creation_timestamp": "2025-03-13T10:05:44.000000Z"}, {"uuid": "42be91f8-6299-412c-a485-c0d8d7d8f660", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27270", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljj5ufsdhw2b", "content": "", "creation_timestamp": "2025-03-04T00:00:12.780236Z"}, {"uuid": "7313e382-67de-47f5-871d-394dd6781bfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27643", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljo6s7i2t323", "content": "", "creation_timestamp": "2025-03-06T00:00:15.358396Z"}, {"uuid": "394e4f94-8c01-42d4-aabb-af011c8950cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27662", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljo6scejsp2g", "content": "", "creation_timestamp": "2025-03-06T00:00:25.977164Z"}, {"uuid": "91a072e3-c89e-461e-8208-fbac3073b271", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lkdlhryvbb26", "content": "", "creation_timestamp": "2025-03-14T12:12:51.696493Z"}, {"uuid": "1db150cc-6b7c-4978-a767-b7ea19cc5bb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27645", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljo6s7nlzp2v", "content": "", "creation_timestamp": "2025-03-06T00:00:15.951498Z"}, {"uuid": "7d7a79d1-fe39-49bf-93bd-73a09a6310c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27493", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lk43e3t6hq2h", "content": "", "creation_timestamp": "2025-03-11T12:35:52.147989Z"}, {"uuid": "152806a2-31a2-4836-b1bf-5e2e7bf564bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27646", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljo6s7u3mn26", "content": "", "creation_timestamp": "2025-03-06T00:00:16.783408Z"}, {"uuid": "c98dfca1-7e96-4c6f-a395-6db196f57e20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27152", "type": "seen", "source": "https://bsky.app/profile/sushicomabacate.com/post/3lk445uagcc25", "content": "", "creation_timestamp": "2025-03-11T12:50:19.431883Z"}, {"uuid": "4280d1d9-de62-40fa-a199-42be5da82011", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://bsky.app/profile/timb-machine.infosec.exchange.ap.brid.gy/post/3lkfy6qjt5kz2", "content": "", "creation_timestamp": "2025-03-15T11:07:49.922368Z"}, {"uuid": "64ca3b6f-da4c-476b-8918-bd64fda82c66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27647", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljo6s7zgvm2d", "content": "", "creation_timestamp": "2025-03-06T00:00:17.405139Z"}, {"uuid": "190df9b0-56fd-47d0-9abd-e366f48f25d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27648", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljo6sa7rnv2b", "content": "", "creation_timestamp": "2025-03-06T00:00:18.196556Z"}, {"uuid": "40f19463-e1ad-40cf-83a4-5ca59e3477d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3lk44xr2joi2w", "content": "", "creation_timestamp": "2025-03-11T13:04:43.268086Z"}, {"uuid": "bd720d4e-6e26-4c80-b122-c0374b291b66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27649", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljo6sagz5q2p", "content": "", "creation_timestamp": "2025-03-06T00:00:19.022400Z"}, {"uuid": "6c5dcfc9-048c-453f-8faf-77fd12bb25fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/royans.bsky.social/post/3lkdoennwrg26", "content": "", "creation_timestamp": "2025-03-14T13:04:48.748879Z"}, {"uuid": "280d5a76-13d4-4ad7-94cf-6d7665d1f1a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27439", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lkkwsf3rpgk2", "content": "", "creation_timestamp": "2025-03-17T10:25:37.338512Z"}, {"uuid": "37cb50ce-682c-4b73-bdde-b60d151b4d01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3llcnz6nxic2m", "content": "", "creation_timestamp": "2025-03-26T20:50:55.843964Z"}, {"uuid": "cb2c3ce6-6e82-4cef-bcbf-dc31d6e8584f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27089", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3likej7ksw226", "content": "", "creation_timestamp": "2025-02-19T18:06:41.749695Z"}, {"uuid": "89c65e24-42b8-4b70-bb39-f5ceb2712f70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27652", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljo6sb24mm2q", "content": "", "creation_timestamp": "2025-03-06T00:00:21.056440Z"}, {"uuid": "e1bef768-249f-4099-b11e-70f144e06b60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27893", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114143957417849617", "content": "", "creation_timestamp": "2025-03-11T13:09:29.511831Z"}, {"uuid": "a37d3c2d-7827-408a-a14e-0a86cc0663dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lkdpf2ajm42u", "content": "", "creation_timestamp": "2025-03-14T13:22:54.615398Z"}, {"uuid": "2fc146ed-aa4c-49c2-b646-7068d9b0c495", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3llba7szsqs2q", "content": "", "creation_timestamp": "2025-03-26T07:11:25.894858Z"}, {"uuid": "61a74aa6-8fcf-4ec3-a2af-34afeb8a0d86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27656", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljo6sbhg4d2e", "content": "", "creation_timestamp": "2025-03-06T00:00:22.492004Z"}, {"uuid": "0e055071-fb67-4260-b3d0-8f5075ad33d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2746", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3llep57giec2x", "content": "", "creation_timestamp": "2025-03-27T16:16:23.223061Z"}, {"uuid": "7137d1c1-28dd-4508-a16b-c0f42bdbfd7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2747", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3llep57giec2x", "content": "", "creation_timestamp": "2025-03-27T16:16:23.303355Z"}, {"uuid": "08f8d5b9-4738-4890-8fe8-f0fb84d368ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27657", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljo6sbo25g2e", "content": "", "creation_timestamp": "2025-03-06T00:00:23.236171Z"}, {"uuid": "5a7e5f97-808a-46ba-8230-7779f91710ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27593", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lkdqed7b472v", "content": "", "creation_timestamp": "2025-03-14T13:40:24.556816Z"}, {"uuid": "ee2eb6d4-59b1-47cf-8ae4-8a8f6f98a564", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3llduxxvs652n", "content": "", "creation_timestamp": "2025-03-27T08:28:10.821669Z"}, {"uuid": "a7bfc813-3646-41ae-85dd-a33d71ec78ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27092", "type": "seen", "source": "https://bsky.app/profile/will.willofmiletus.com/post/3lil4zhtabk2d", "content": "", "creation_timestamp": "2025-02-20T01:25:14.276048Z"}, {"uuid": "0970dd2c-c18e-42bc-8f8b-d3324245a35b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27092", "type": "seen", "source": "https://bsky.app/profile/vulns.bsky.social/post/3lild2otmvu24", "content": "", "creation_timestamp": "2025-02-20T03:13:17.095895Z"}, {"uuid": "b66ce05a-1e6b-4210-b6cf-f9257ae8c093", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27092", "type": "seen", "source": "https://bsky.app/profile/vulns.bsky.social/post/3lild2ovqgo2u", "content": "", "creation_timestamp": "2025-02-20T03:13:17.614110Z"}, {"uuid": "7043ea09-9842-4a1e-9557-d75f2161c03c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27092", "type": "seen", "source": "https://bsky.app/profile/vulns.bsky.social/post/3lild2pw5go26", "content": "", "creation_timestamp": "2025-02-20T03:13:19.088562Z"}, {"uuid": "c8ea38c6-d6f5-47e8-bf10-b6ff66ccce60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27092", "type": "seen", "source": "https://bsky.app/profile/vulns.bsky.social/post/3lild2uy63n2q", "content": "", "creation_timestamp": "2025-02-20T03:13:23.242719Z"}, {"uuid": "9023eba4-8e6e-4807-adcf-2a86491913e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27092", "type": "seen", "source": "https://bsky.app/profile/vulns.bsky.social/post/3lildxans362u", "content": "", "creation_timestamp": "2025-02-20T03:29:15.373318Z"}, {"uuid": "30e54b65-a691-4248-95d5-273ea7bf32ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27092", "type": "seen", "source": "https://bsky.app/profile/vulns.bsky.social/post/3lildxappls26", "content": "", "creation_timestamp": "2025-02-20T03:29:15.940536Z"}, {"uuid": "71b870d1-2844-458b-9435-b4bfa0d6ea72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27092", "type": "seen", "source": "https://bsky.app/profile/vulns.bsky.social/post/3lildxbqjfy2q", "content": "", "creation_timestamp": "2025-02-20T03:29:17.374054Z"}, {"uuid": "c17ba7dc-1ae9-4131-93df-085ef252192b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27092", "type": "seen", "source": "https://bsky.app/profile/vulns.bsky.social/post/3lildxerujh24", "content": "", "creation_timestamp": "2025-02-20T03:29:19.608322Z"}, {"uuid": "627b3f5e-a05c-4549-8b49-ae75f3333aba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27092", "type": "seen", "source": "https://bsky.app/profile/vulns.bsky.social/post/3lilenvdr7b2q", "content": "", "creation_timestamp": "2025-02-20T03:41:55.316207Z"}, {"uuid": "813886e7-819a-4f52-b3b5-ddde60cbffd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27092", "type": "seen", "source": "https://bsky.app/profile/vulns.bsky.social/post/3lilepoqoda2k", "content": "", "creation_timestamp": "2025-02-20T03:42:55.192076Z"}, {"uuid": "b083b70f-7137-40bd-9f9e-35ca37fadd53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27092", "type": "seen", "source": "https://bsky.app/profile/vulns.bsky.social/post/3lileri4nni2n", "content": "", "creation_timestamp": "2025-02-20T03:43:55.412203Z"}, {"uuid": "5ad18603-3f5c-4260-ad93-6a5f2ae1c4f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27092", "type": "seen", "source": "https://bsky.app/profile/vulns.bsky.social/post/3lilewulsv22j", "content": "", "creation_timestamp": "2025-02-20T03:46:56.252150Z"}, {"uuid": "e56807ef-5473-4291-8553-d37b5ed44d0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27092", "type": "seen", "source": "https://bsky.app/profile/vulns.bsky.social/post/3lilf3a6b5o2e", "content": "", "creation_timestamp": "2025-02-20T03:49:22.631102Z"}, {"uuid": "3cf3502f-059a-4360-809f-1b226f6ae2d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27092", "type": "seen", "source": "https://bsky.app/profile/vulns.bsky.social/post/3lilf3a7x2h2t", "content": "", "creation_timestamp": "2025-02-20T03:49:23.180844Z"}, {"uuid": "3ddb7c44-ba14-48c3-bc6f-46ca504e3ab7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27092", "type": "seen", "source": "https://bsky.app/profile/vulns.bsky.social/post/3lilf3ba7bp2t", "content": "", "creation_timestamp": "2025-02-20T03:49:24.326586Z"}, {"uuid": "2691d753-f8b1-4666-8188-58eb6918c7b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27092", "type": "seen", "source": "https://bsky.app/profile/vulns.bsky.social/post/3lilf3eb5z32k", "content": "", "creation_timestamp": "2025-02-20T03:49:26.948485Z"}, {"uuid": "c5bf7647-0f96-4210-9251-37515f84feee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27218", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lilooxkrnx2a", "content": "", "creation_timestamp": "2025-02-20T06:41:29.820148Z"}, {"uuid": "ceb706a8-0417-4777-8715-23351bc7afa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27090", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lim5oe2oss2u", "content": "", "creation_timestamp": "2025-02-20T11:09:34.929358Z"}, {"uuid": "9ea10199-1fa9-4b24-85fe-9e88566843ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27090", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3limcrpgqfs27", "content": "", "creation_timestamp": "2025-02-20T12:40:54.954051Z"}, {"uuid": "b55c084f-6d9c-4d17-b0ba-74ad13646613", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27091", "type": "seen", "source": "https://bsky.app/profile/darkwebinformer.bsky.social/post/3limzocusgs2j", "content": "", "creation_timestamp": "2025-02-20T19:30:40.526902Z"}, {"uuid": "24a1c38b-fec6-4731-8f16-9c7eafefd608", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27658", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljo6sbtbi42f", "content": "", "creation_timestamp": "2025-03-06T00:00:24.033425Z"}, {"uuid": "61436616-f02b-478c-8387-ebc0135b74b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27595", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lkdqedxhph2g", "content": "", "creation_timestamp": "2025-03-14T13:40:25.474512Z"}, {"uuid": "392d6dc7-8918-4171-b614-4ade2209b2c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3llcon576cf2x", "content": "", "creation_timestamp": "2025-03-26T21:02:04.795192Z"}, {"uuid": "51e476c7-1c41-4216-b52c-39efdf2f480b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lldulcrwtpj2", "content": "", "creation_timestamp": "2025-03-27T08:29:12.568642Z"}, {"uuid": "0ea1d8e2-12d8-441d-832e-7f363f06b778", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3llewlolpv32c", "content": "", "creation_timestamp": "2025-03-27T18:29:45.497873Z"}, {"uuid": "7babc3a9-412e-4bc5-a60c-2476de7fbefa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27661", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljo6sc73ae2q", "content": "", "creation_timestamp": "2025-03-06T00:00:25.406364Z"}, {"uuid": "4c534db1-bb16-46dd-8dac-bbac0f549bb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27663", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljo6sckfpm2f", "content": "", "creation_timestamp": "2025-03-06T00:00:26.740181Z"}, {"uuid": "2ef279ac-9492-48ab-a8ee-4baa38a2ebce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27221", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljjhmnqz2e2s", "content": "", "creation_timestamp": "2025-03-04T02:54:46.817194Z"}, {"uuid": "39dc261a-1e4a-4d50-ba2b-3e61285e0ca1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27665", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljo6scrwmi2p", "content": "", "creation_timestamp": "2025-03-06T00:00:27.458074Z"}, {"uuid": "5dd29482-a923-4288-ae17-efdd440add30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27423", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3ljoamu53ak2s", "content": "", "creation_timestamp": "2025-03-06T00:33:00.672107Z"}, {"uuid": "9d0826ea-868a-4731-a28c-b0de2b355869", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27816", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljuhxhahmv2m", "content": "", "creation_timestamp": "2025-03-08T12:00:06.871900Z"}, {"uuid": "16d3e9eb-5adb-4c89-8ddb-abaec34cb90b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27579", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljgvystvfy22", "content": "", "creation_timestamp": "2025-03-03T02:34:10.073209Z"}, {"uuid": "df8e5e03-52e1-4166-b2a3-cba754d38b6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27219", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljjhmo7c3l2n", "content": "", "creation_timestamp": "2025-03-04T02:54:48.163333Z"}, {"uuid": "a57e77b7-cf8a-4968-b9fe-c28a69601440", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27494", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lk4bqj3n3c2f", "content": "", "creation_timestamp": "2025-03-11T14:30:08.884208Z"}, {"uuid": "7bbd18c1-bd61-4e93-bed2-8a0f1faa13ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27593", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114161097329932334", "content": "", "creation_timestamp": "2025-03-14T13:48:24.040305Z"}, {"uuid": "b41174e6-88ee-4d04-a751-09378b9caf9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27594", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114161097329932334", "content": "", "creation_timestamp": "2025-03-14T13:48:24.123120Z"}, {"uuid": "fb03ad9f-8046-4ae4-abb8-5bac6c7b0d57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27595", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114161097329932334", "content": "", "creation_timestamp": "2025-03-14T13:48:24.187902Z"}, {"uuid": "c76e412b-bbba-4afc-a15c-a894336ad2b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27220", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljjhmoeg7624", "content": "", "creation_timestamp": "2025-03-04T02:54:48.654021Z"}, {"uuid": "ab8a1faa-71e4-4a68-bebe-210bc88eef74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27254", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3ljzlxn7zzl2k", "content": "", "creation_timestamp": "2025-03-10T12:55:06.630443Z"}, {"uuid": "4dbc6d16-fe85-45be-8851-471629b2c927", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27593", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114161097376491720", "content": "", "creation_timestamp": "2025-03-14T13:48:24.970203Z"}, {"uuid": "13e95491-b63a-47b4-8f90-1356fbc5272d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://thehackernews.com/2025/03/zero-day-alert-google-releases-chrome.html", "content": "", "creation_timestamp": "2025-03-26T03:56:00.000000Z"}, {"uuid": "b35c556c-4e41-40f3-813d-c4f48e0ab8b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27603", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljuhxhuidl2x", "content": "", "creation_timestamp": "2025-03-08T12:00:08.631435Z"}, {"uuid": "39ba921f-511c-4a36-9134-2323fde444ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27255", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3ljzlxrffnc2w", "content": "", "creation_timestamp": "2025-03-10T12:55:10.516896Z"}, {"uuid": "29675109-a469-49ae-9b53-5bbe6b3381e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27595", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114161097415646897", "content": "", "creation_timestamp": "2025-03-14T13:48:25.229237Z"}, {"uuid": "c1645d31-09b2-417e-bc4f-b7b35565ae89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27256", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3ljzlxuof7f2v", "content": "", "creation_timestamp": "2025-03-10T12:55:13.969929Z"}, {"uuid": "f8120a77-eeab-4b82-ab2b-2943546f51dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114144309421820947", "content": "", "creation_timestamp": "2025-03-11T14:39:00.709390Z"}, {"uuid": "d9fd1c7f-fa34-4bfe-a990-82e0e077e458", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27091", "type": "seen", "source": "https://bsky.app/profile/it4sec.bsky.social/post/3liozn5i4qs2a", "content": "", "creation_timestamp": "2025-02-21T14:35:18.058929Z"}, {"uuid": "cdd5cdff-869d-400a-aa8a-31ba84fba131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27092", "type": "seen", "source": "https://bsky.app/profile/leekthehack.bsky.social/post/3lip2zw7xmc26", "content": "", "creation_timestamp": "2025-02-21T15:00:23.980575Z"}, {"uuid": "6a79cd51-3035-4a7d-8bd0-b5015de8a966", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27106", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114044196487307845", "content": "", "creation_timestamp": "2025-02-21T22:18:58.763390Z"}, {"uuid": "8b56d499-8ebc-4fd1-a325-86c711ca2012", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27105", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114048796240672246", "content": "", "creation_timestamp": "2025-02-22T17:48:45.343704Z"}, {"uuid": "0f9d97bc-f2dc-4ee4-93b3-30437e53955c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27106", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114048796287261525", "content": "", "creation_timestamp": "2025-02-22T17:48:46.918604Z"}, {"uuid": "9983fad6-b420-4e1b-8fd1-fe684cad99ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27012", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114048796418707363", "content": "", "creation_timestamp": "2025-02-22T17:48:48.197490Z"}, {"uuid": "2b3131dd-6b32-4d5c-8821-d8a9c7b45a56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27090", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3lirw3gqeok2i", "content": "", "creation_timestamp": "2025-02-22T18:09:41.542656Z"}, {"uuid": "a3078f60-7c51-46d6-ac87-ef68a7d6234e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27012", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lis24pf52u2q", "content": "", "creation_timestamp": "2025-02-22T19:21:59.456483Z"}, {"uuid": "f5c3a71f-d860-4aa1-8824-41df7ce965f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27105", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lisjnzo3uj2z", "content": "", "creation_timestamp": "2025-02-23T00:00:07.376842Z"}, {"uuid": "4cf0b7e3-fdef-4190-a145-acddab88a29f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27110", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ljgydesc7s2j", "content": "", "creation_timestamp": "2025-03-03T03:15:50.572116Z"}, {"uuid": "8dc1fa7d-236b-413d-af71-0321ceafb45e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27218", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3ljrdzgz3ev2b", "content": "", "creation_timestamp": "2025-03-07T06:11:39.080461Z"}, {"uuid": "0ab45d48-611f-47aa-b82d-7e077c7d4923", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27395", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-06", "content": "", "creation_timestamp": "2025-03-13T11:00:00.000000Z"}, {"uuid": "4ab98871-bae2-4dc0-ae9a-bb8100d0e9d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27494", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-04", "content": "", "creation_timestamp": "2025-03-13T11:00:00.000000Z"}, {"uuid": "4c0d8c1d-a565-421a-ab44-9576b1320ee6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27623", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljoks6u6qa2q", "content": "", "creation_timestamp": "2025-03-06T03:34:52.483795Z"}, {"uuid": "3113dc81-3710-4139-be56-9020673fac83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27593", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkdra5ee2q2m", "content": "", "creation_timestamp": "2025-03-14T13:55:57.815378Z"}, {"uuid": "75085cb7-27a2-4818-b2a5-42e6520d64b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27624", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljoks7ayuy2f", "content": "", "creation_timestamp": "2025-03-06T03:34:53.144550Z"}, {"uuid": "40e8735e-d7b4-4a87-8f3e-a77bdafed795", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/calebpr.bsky.social/post/3lkghmxj23n2w", "content": "", "creation_timestamp": "2025-03-15T15:42:10.530117Z"}, {"uuid": "3eba228d-55e6-4841-92b0-4e4460786461", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27888", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3lkzypwoevs2o", "content": "", "creation_timestamp": "2025-03-23T10:08:40.645632Z"}, {"uuid": "f8bd823d-47e3-45e0-b727-8beace78938d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27625", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljoks7eorm2b", "content": "", "creation_timestamp": "2025-03-06T03:34:53.623221Z"}, {"uuid": "401bcff5-b431-4e14-93a2-0a064f2a21f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27595", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkdra63u2r2h", "content": "", "creation_timestamp": "2025-03-14T13:55:59.986148Z"}, {"uuid": "7d3c6774-f638-4f81-9eba-6398faa4443a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27622", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljoks7k2u72a", "content": "", "creation_timestamp": "2025-03-06T03:34:54.175893Z"}, {"uuid": "b8f14b14-0a7c-430e-8bc6-509b7065132a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27583", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljh4yldhpm23", "content": "", "creation_timestamp": "2025-03-03T04:39:17.147607Z"}, {"uuid": "02487f97-f2cc-46c5-b077-28f044fe7c11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27500", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114102115018411208", "content": "", "creation_timestamp": "2025-03-04T03:48:25.255205Z"}, {"uuid": "73d7fc5d-b2b7-4597-90f2-5606d49890d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27253", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114138354341326441", "content": "", "creation_timestamp": "2025-03-10T13:24:33.487757Z"}, {"uuid": "9767d730-4b1c-4e1d-adae-5670aeec919d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27254", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114138354341326441", "content": "", "creation_timestamp": "2025-03-10T13:24:33.563890Z"}, {"uuid": "96cdbc4a-0319-4503-bc95-607a7fe30702", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27255", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114138354341326441", "content": "", "creation_timestamp": "2025-03-10T13:24:33.629160Z"}, {"uuid": "c4f99136-93f7-4b68-a78d-1843de6d8d7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27256", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114138354341326441", "content": "", "creation_timestamp": "2025-03-10T13:24:33.694476Z"}, {"uuid": "821a8adf-d856-4802-ae97-01d2233944d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27501", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114102115066898987", "content": "", "creation_timestamp": "2025-03-04T03:48:25.927554Z"}, {"uuid": "ad2f430e-31f3-4bd1-963d-c65dfffefbc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27584", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljh4ylmh3n2o", "content": "", "creation_timestamp": "2025-03-03T04:39:18.450337Z"}, {"uuid": "8496ae34-02d9-4491-83ce-cacf3bdabb06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27017", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lk4fi23itd2k", "content": "", "creation_timestamp": "2025-03-11T15:36:59.845273Z"}, {"uuid": "a36dc869-d288-4f3c-beae-75e0fe4954a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-271561", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-149/", "content": "", "creation_timestamp": "2025-03-18T04:00:00.000000Z"}, {"uuid": "48ccd8f6-cd1d-4116-93b0-ac3659398dbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27018", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lkqoxblgwc2k", "content": "", "creation_timestamp": "2025-03-19T17:19:49.577149Z"}, {"uuid": "5073d85d-5240-4a05-8d59-0b4e79a4bc1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27401", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljlf3yqipk2f", "content": "", "creation_timestamp": "2025-03-04T21:15:01.416464Z"}, {"uuid": "bc5e5e1f-3f75-47ad-8381-263e5598a43e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-27363", "type": "seen", "source": "https://infosec.exchange/users/patrickcmiller/statuses/114167678263831015", "content": "", "creation_timestamp": "2025-03-15T17:42:01.302130Z"}, {"uuid": "7508941d-93a8-4b34-b84d-1e059c2381ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27148", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lizusxyrb72l", "content": "", "creation_timestamp": "2025-02-25T22:08:21.812806Z"}, {"uuid": "018dfcfe-74f3-4bd5-bdcf-c9610535b747", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-27154", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3ljha22fzp22y", "content": "", "creation_timestamp": "2025-03-03T05:33:47.188266Z"}, {"uuid": "658b1a60-cfb7-43ac-9f9e-610d0689f2ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27155", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljlf3zcvlo2f", "content": "", "creation_timestamp": "2025-03-04T21:15:03.586489Z"}, {"uuid": "c34d124f-c609-42cb-98fc-b22bfa32f544", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114144581984633584", "content": "", "creation_timestamp": "2025-03-11T15:48:20.508261Z"}, {"uuid": "10cadd90-04c8-44be-a68d-8dff582d4f5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27590", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114096924924188445", "content": "", "creation_timestamp": "2025-03-03T05:48:30.706930Z"}, {"uuid": "6fdb4b9a-127c-49f4-ab81-37a2a34b2595", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljvez3nep22j", "content": "", "creation_timestamp": "2025-03-08T20:39:59.935712Z"}, {"uuid": "88df84a1-0184-42b9-a22b-debb152daaf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27888", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lkqpzhrmus2b", "content": "", "creation_timestamp": "2025-03-19T17:38:56.406526Z"}, {"uuid": "b1134c27-322b-4bac-bf7f-b8dd0657479e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lkdup3hlk326", "content": "", "creation_timestamp": "2025-03-14T14:58:00.122788Z"}, {"uuid": "df69a074-09e4-4d7f-a4ed-33f9ebb431d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27148", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114067199010407804", "content": "", "creation_timestamp": "2025-02-25T23:48:50.575766Z"}, {"uuid": "a6f070c9-2eac-45b8-bcc1-3f72fec82ae8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27494", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lk6ghtifil2j", "content": "", "creation_timestamp": "2025-03-12T11:00:06.406206Z"}, {"uuid": "b939ce8e-beb7-4806-a6d1-3fde1b7f98d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27364", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lj234ahbia2f", "content": "", "creation_timestamp": "2025-02-26T00:00:55.711115Z"}, {"uuid": "9581638c-ca47-4770-84ee-2d9c330cd153", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27392", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-06", "content": "", "creation_timestamp": "2025-03-13T11:00:00.000000Z"}, {"uuid": "1336c4c3-37b7-4591-83ed-5edf7780cd12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27493", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-04", "content": "", "creation_timestamp": "2025-03-13T11:00:00.000000Z"}, {"uuid": "c8c69ca7-af1c-4995-a8de-87ed7be28600", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114138732094751912", "content": "", "creation_timestamp": "2025-03-10T15:00:40.356558Z"}, {"uuid": "a75cf859-e77e-4401-aab6-a52852c6d963", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lk4irnrkcf26", "content": "", "creation_timestamp": "2025-03-11T16:36:06.225032Z"}, {"uuid": "a2c90ead-cb16-43ae-95c4-b71d05a56273", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27393", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-06", "content": "", "creation_timestamp": "2025-03-13T11:00:00.000000Z"}, {"uuid": "542e43bf-6964-49b6-a6b5-93eaa655656a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27816", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljrlz526dj2f", "content": "", "creation_timestamp": "2025-03-07T08:34:38.966193Z"}, {"uuid": "0587f26e-383a-44a0-a916-ff622fce0ef5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27394", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-06", "content": "", "creation_timestamp": "2025-03-13T11:00:00.000000Z"}, {"uuid": "93684cf7-e723-4cbf-ae23-4cf60690e002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27281", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114169121134907693", "content": "", "creation_timestamp": "2025-03-15T23:48:57.539226Z"}, {"uuid": "61b13937-ea5a-440f-be19-f0c647b15d4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27396", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-06", "content": "", "creation_timestamp": "2025-03-13T11:00:00.000000Z"}, {"uuid": "08d2c96d-5bfe-4a3e-bd15-fcde9a6ac4f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27397", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-06", "content": "", "creation_timestamp": "2025-03-13T11:00:00.000000Z"}, {"uuid": "8625eb6a-f762-485a-b833-4d6831351294", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27398", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-06", "content": "", "creation_timestamp": "2025-03-13T11:00:00.000000Z"}, {"uuid": "b24ff435-550d-4ab0-9dbc-b6b017640feb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27218", "type": "seen", "source": "https://bsky.app/profile/sansisc.bsky.social/post/3llerwtf7oq2w", "content": "", "creation_timestamp": "2025-03-27T17:06:30.266772Z"}, {"uuid": "0f4bca5e-652c-4309-942b-ed362c4b08a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3llexh7bwmi24", "content": "", "creation_timestamp": "2025-03-27T18:45:08.384072Z"}, {"uuid": "949b6c47-4fd5-493a-8992-b9f34489be90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27244", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lla5bjp6is2x", "content": "", "creation_timestamp": "2025-03-25T20:46:02.443613Z"}, {"uuid": "d2432e96-9605-40b4-bef9-92de10ebd5ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27816", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114120519521591097", "content": "", "creation_timestamp": "2025-03-07T09:48:56.012294Z"}, {"uuid": "006a426f-d29c-4efc-a5ec-4782b6b9c3ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27154", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3ljhl73lbuc23", "content": "", "creation_timestamp": "2025-03-03T08:53:29.876543Z"}, {"uuid": "168556dd-3fec-4aea-a397-d9f090872aa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lk6ju6fw642e", "content": "", "creation_timestamp": "2025-03-12T12:00:41.259547Z"}, {"uuid": "29f5a972-b45a-45aa-a5c4-713b8fb9c920", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27494", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3lk4kdxy3bk2f", "content": "", "creation_timestamp": "2025-03-11T17:04:14.638395Z"}, {"uuid": "28a92957-d85d-43ca-82f1-656f6bf604ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-27636", "type": "seen", "source": "https://cyberplace.social/users/GossiTheDog/statuses/114149364716998991", "content": "", "creation_timestamp": "2025-03-12T12:04:54.122976Z"}, {"uuid": "d38679c8-d720-492e-a8db-d7ebcc77fa78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://bsky.app/profile/GossiTheDog.cyberplace.social.ap.brid.gy/post/3lk6k3o326qu2", "content": "", "creation_timestamp": "2025-03-12T12:07:54.959679Z"}, {"uuid": "2babc8c4-2b31-456b-9a05-03d9a946452d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lk6kdxpl5i2b", "content": "", "creation_timestamp": "2025-03-12T12:09:31.009447Z"}, {"uuid": "492d491e-2468-471b-8dad-02fff6230445", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3llbmayemoc2w", "content": "", "creation_timestamp": "2025-03-26T10:46:49.956955Z"}, {"uuid": "88915acc-5d75-4d0b-bdec-e6517d275782", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lldz324fxsh2", "content": "", "creation_timestamp": "2025-03-27T09:51:13.484772Z"}, {"uuid": "9ae7825c-8294-45b0-a9b9-3c221c542a1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27091", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lj2ij5bhv42p", "content": "", "creation_timestamp": "2025-02-26T04:00:46.523854Z"}, {"uuid": "c2d661c0-ecbc-40ed-991b-54ba3f8f7b6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27438", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-01", "content": "", "creation_timestamp": "2025-03-13T11:00:00.000000Z"}, {"uuid": "23fb6745-5c41-46f0-9d95-c14889412283", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://cyberplace.social/users/GossiTheDog/statuses/114149396635489302", "content": "", "creation_timestamp": "2025-03-12T12:12:59.184767Z"}, {"uuid": "dcd031df-b0e6-4488-a280-fc19609b975c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://bsky.app/profile/GossiTheDog.cyberplace.social.ap.brid.gy/post/3lk6kk2ddtfu2", "content": "", "creation_timestamp": "2025-03-12T12:15:03.577878Z"}, {"uuid": "8d7f195c-cce3-48aa-b6b7-22b69fe03b75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27496", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114156928115504442", "content": "", "creation_timestamp": "2025-03-13T20:08:06.680481Z"}, {"uuid": "db3990bd-8d02-40a2-a65f-dedfdb2f7be7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3llbnk5gwcs2q", "content": "", "creation_timestamp": "2025-03-26T11:09:52.905011Z"}, {"uuid": "288852e0-3961-48b0-9222-c7cc5750814e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27163", "type": "seen", "source": "https://infosec.place/objects/2d56ee5a-af03-4963-b06d-3fb3ec510da9", "content": "", "creation_timestamp": "2025-03-12T12:30:05.849460Z"}, {"uuid": "b8377b36-8895-436f-a43d-cb295a6fda80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27091", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3lj2tr62pbs2m", "content": "", "creation_timestamp": "2025-02-26T07:22:10.086076Z"}, {"uuid": "69a113c2-df48-4853-823d-78b488bd75ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27158", "type": "seen", "source": "https://infosec.place/objects/e904452e-f676-4343-8b59-5e4dcb8c51b9", "content": "", "creation_timestamp": "2025-03-12T12:30:11.477363Z"}, {"uuid": "ec39b131-6f55-40e0-ab42-e4a570aae32e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27164", "type": "seen", "source": "https://infosec.place/objects/85ea83b6-add3-4c0a-a7f9-7f03ea2f1413", "content": "", "creation_timestamp": "2025-03-12T12:30:17.272055Z"}, {"uuid": "49ef56b0-7dfe-4285-b098-600c7336cd22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27507", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljlodbotcn2v", "content": "", "creation_timestamp": "2025-03-05T00:00:13.830380Z"}, {"uuid": "35d1421b-cb05-4e6e-a9d5-93800e8c0bac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27810", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll6va26o322s", "content": "", "creation_timestamp": "2025-03-25T08:49:25.195720Z"}, {"uuid": "c9b08205-9702-4eda-b7d8-25fa744b0fca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-27091", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lj2xkkj6xs2b", "content": "", "creation_timestamp": "2025-02-26T08:30:00.662041Z"}, {"uuid": "fb5b81fd-1939-4b8a-9e6f-43df1fe6bf5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27531", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lj7kruepf32q", "content": "", "creation_timestamp": "2025-02-28T04:24:45.471521Z"}, {"uuid": "4dce6873-9dd4-4bff-9b16-cbc2fe3fbddf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/calebpr.bsky.social/post/3lkbxhkitrq26", "content": "", "creation_timestamp": "2025-03-13T20:42:09.426057Z"}, {"uuid": "4a34479a-fffd-4b60-a8bb-fc1c41b7641f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://bsky.app/profile/timb-machine.infosec.exchange.ap.brid.gy/post/3lk246udxlht2", "content": "", "creation_timestamp": "2025-03-10T17:45:39.784865Z"}, {"uuid": "413a4a7b-02fe-44d0-90cb-6bb8030d2ae1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27163", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lk6mfoxzq52g", "content": "", "creation_timestamp": "2025-03-12T12:46:16.660409Z"}, {"uuid": "fe33b59f-e239-4794-a88c-d14f2bfa0932", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27158", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lk6mfp5lp227", "content": "", "creation_timestamp": "2025-03-12T12:46:17.321887Z"}, {"uuid": "be5577b5-441b-434c-98e9-f6a9ef872fe8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-27364", "type": "seen", "source": "https://bsky.app/profile/OpenSource.activitypub.awakari.com.ap.brid.gy/post/3ljf4zauex7z2", "content": "", "creation_timestamp": "2025-03-02T09:35:41.680925Z"}, {"uuid": "8a64126e-c675-46d0-af6a-53289a61df62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://infosec.exchange/users/timb_machine/statuses/114139379936582959", "content": "", "creation_timestamp": "2025-03-10T17:53:59.240935Z"}, {"uuid": "d46057ea-ba00-4d0a-91db-95ff349ea924", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27164", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lk6mfp5lp227", "content": "", "creation_timestamp": "2025-03-12T12:46:17.402669Z"}, {"uuid": "bc1df22b-a244-4c4d-b8b7-c691afc29704", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://cyberplace.social/users/GossiTheDog/statuses/114139417886547290", "content": "", "creation_timestamp": "2025-03-10T17:55:25.288443Z"}, {"uuid": "a12f1a1e-a633-4325-9b68-138fffb8232d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://bsky.app/profile/GossiTheDog.cyberplace.social.ap.brid.gy/post/3lk24qb7r5ht2", "content": "", "creation_timestamp": "2025-03-10T17:55:27.904496Z"}, {"uuid": "2b224352-961d-4457-a627-74b98b04ab8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/mbissey.bsky.social/post/3llbgl5yeap2b", "content": "", "creation_timestamp": "2025-03-26T09:05:08.871519Z"}, {"uuid": "c3ae63e6-029f-4e83-b3bb-a76a39591d11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-27363", "type": "seen", "source": "https://bsky.app/profile/clustz.com/post/3lkp7fjl53a2h", "content": "", "creation_timestamp": "2025-03-19T03:08:48.078241Z"}, {"uuid": "30b4b55a-2e4c-4cd6-a71b-0c234aad294d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27809", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll6va2fupl26", "content": "", "creation_timestamp": "2025-03-25T08:49:26.336713Z"}, {"uuid": "f39a1529-ec8c-48bc-922e-d7d2d31c7455", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3llbh3q2q5s2o", "content": "", "creation_timestamp": "2025-03-26T09:14:27.134601Z"}, {"uuid": "63a22de0-364f-4136-a006-440840ca85cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "seen", "source": "https://bsky.app/profile/newslit.co/post/3lk2a2vc27k2b", "content": "", "creation_timestamp": "2025-03-10T18:54:57.322142Z"}, {"uuid": "35c4828f-10b0-4f01-b0f2-031a806d12d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27423", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3ljlzzs576s2o", "content": "", "creation_timestamp": "2025-03-05T03:29:39.012283Z"}, {"uuid": "9fa085c3-14d9-4346-91df-cd9c945d37b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27154", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3ljhpje5kwt2u", "content": "", "creation_timestamp": "2025-03-03T10:10:46.706302Z"}, {"uuid": "5b623499-1070-4cfa-b2b4-cd586e067aa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27276", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114060119802420695", "content": "", "creation_timestamp": "2025-02-24T17:48:29.610262Z"}, {"uuid": "ea8076aa-b7f6-4fb8-be7b-a546664b462d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/lordman1982.bsky.social/post/3lknmntyukv2m", "content": "", "creation_timestamp": "2025-03-18T12:00:47.692390Z"}, {"uuid": "440283e4-0181-4c94-861c-99b379bcdabb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27298", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114060119832845206", "content": "", "creation_timestamp": "2025-02-24T17:48:30.054876Z"}, {"uuid": "abb7a155-0484-46fc-9ae8-d508546c46f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27364", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljk63zyx5hs2", "content": "", "creation_timestamp": "2025-03-04T09:44:36.127338Z"}, {"uuid": "0168f238-9d26-4e04-b091-4509bcede264", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27312", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114060119878785116", "content": "", "creation_timestamp": "2025-02-24T17:48:30.596254Z"}, {"uuid": "ac359f53-c0b5-4936-b253-04872048b35d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27364", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lja2crjlstq2", "content": "", "creation_timestamp": "2025-02-28T09:02:51.599710Z"}, {"uuid": "7b64bc25-61ac-4c9e-84ed-8d98453f3f13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lkbyl7pvbs2e", "content": "", "creation_timestamp": "2025-03-13T21:02:13.812018Z"}, {"uuid": "57f3cd56-7614-4b6b-be0f-3c7a552fa31f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27154", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lkllaqz3bu2t", "content": "", "creation_timestamp": "2025-03-17T16:30:15.206095Z"}, {"uuid": "4aa870c6-c842-4ff2-82a8-8e3bed36cdcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27336", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liwz4m45pr2s", "content": "", "creation_timestamp": "2025-02-24T18:47:20.780942Z"}, {"uuid": "fa74b080-f5c8-4f1e-a46b-fcb6789fc9cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27158", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lk6pmd3g2s2y", "content": "", "creation_timestamp": "2025-03-12T13:43:42.409423Z"}, {"uuid": "5b546ddc-2b4e-4037-9204-c97013e3df78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27705", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114191036908054778", "content": "", "creation_timestamp": "2025-03-19T20:42:26.385562Z"}, {"uuid": "21ff7b4a-4d9e-4b18-95b5-9b8360458150", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27704", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114191036908054778", "content": "", "creation_timestamp": "2025-03-19T20:42:26.457704Z"}, {"uuid": "d4b7fe6e-9d36-44bd-8752-719a5303a746", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27335", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liwz4mi4ze2s", "content": "", "creation_timestamp": "2025-02-24T18:47:21.468449Z"}, {"uuid": "0596728c-1498-4548-8e81-62cd71e813b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lk6pl7szo22g", "content": "", "creation_timestamp": "2025-03-12T13:43:05.868253Z"}, {"uuid": "b882965d-5a7a-4f7b-8cb8-745e6b74e7d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lkc2ivilbu2t", "content": "", "creation_timestamp": "2025-03-13T21:36:35.731169Z"}, {"uuid": "40688263-26ac-4687-b46f-8119c5fd54d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27439", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lknnjkip4di2", "content": "", "creation_timestamp": "2025-03-18T12:16:28.914854Z"}, {"uuid": "70ee3a7d-65f6-4758-8611-23816d20acee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27342", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liwz4mliot2t", "content": "", "creation_timestamp": "2025-02-24T18:47:21.982759Z"}, {"uuid": "d3ddd80f-9192-444b-8bd5-911e190c7398", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27174", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lk6pmd3g2s2y", "content": "", "creation_timestamp": "2025-03-12T13:43:42.336812Z"}, {"uuid": "4c2307ee-ba1e-4927-8ef9-8bc4521449f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lkc2iw5w4c2u", "content": "", "creation_timestamp": "2025-03-13T21:36:37.292673Z"}, {"uuid": "f6646bde-b04d-4035-82e6-f75e786f09c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27339", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liwz4mp2cm2g", "content": "", "creation_timestamp": "2025-02-24T18:47:22.522517Z"}, {"uuid": "6141b86a-1b5f-4023-b0d0-d7af4fc75681", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27341", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liwz4mwsle2r", "content": "", "creation_timestamp": "2025-02-24T18:47:23.731333Z"}, {"uuid": "394f5713-46bc-4166-b1cd-7130e38e31ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27347", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liwz4n6wyr2s", "content": "", "creation_timestamp": "2025-02-24T18:47:24.937337Z"}, {"uuid": "2d495a0e-225b-433b-ac71-8bde394cd756", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2715", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lk6pmd3g2s2y", "content": "", "creation_timestamp": "2025-03-12T13:43:42.476791Z"}, {"uuid": "0a5860c7-4f0d-418f-8ab0-d77d470e12bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27415", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkr2mxpqkl2m", "content": "", "creation_timestamp": "2025-03-19T20:48:48.239747Z"}, {"uuid": "fb0aa7b1-fed7-4805-bc0a-3db4db2bd298", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27332", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liwz4mshgt23", "content": "", "creation_timestamp": "2025-02-24T18:47:23.138351Z"}, {"uuid": "a798cf86-1c43-4b10-9ba4-03c7d78790ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27352", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liwz4n2zvm2l", "content": "", "creation_timestamp": "2025-02-24T18:47:24.387728Z"}, {"uuid": "35a21d86-5c3e-49db-83c0-3bd8cc613893", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27704", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkr2mxz56q2x", "content": "", "creation_timestamp": "2025-03-19T20:48:49.071946Z"}, {"uuid": "08aa6408-0a17-4f00-a5a8-269b11df464a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2738", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll6va366vp2n", "content": "", "creation_timestamp": "2025-03-25T08:49:30.232497Z"}, {"uuid": "b6f408f9-a642-4d30-81f8-271bbb3bfb00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3llbhx7acl22m", "content": "", "creation_timestamp": "2025-03-26T09:29:48.951516Z"}, {"uuid": "ab07d785-2526-4697-bb31-b63efcba2037", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27351", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liwz4ncep42r", "content": "", "creation_timestamp": "2025-02-24T18:47:25.607608Z"}, {"uuid": "48859ca6-b4ad-4c79-a409-678349372822", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27705", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkr2my4j5k2k", "content": "", "creation_timestamp": "2025-03-19T20:48:49.665522Z"}, {"uuid": "360b61c4-9afb-4b2e-a7ca-ed4a16f765ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3llbhxarjrc2m", "content": "", "creation_timestamp": "2025-03-26T09:29:49.421042Z"}, {"uuid": "872e35e2-accf-444e-96ed-2630d261a735", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27340", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liwz4nh43t23", "content": "", "creation_timestamp": "2025-02-24T18:47:26.217757Z"}, {"uuid": "406b477f-0741-4ecd-bb87-ff2f302e5cb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27615", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114139864929960883", "content": "", "creation_timestamp": "2025-03-10T19:48:43.344439Z"}, {"uuid": "c99a675b-fc62-4eb6-b4ef-28be6c23a05a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27616", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114139864972627449", "content": "", "creation_timestamp": "2025-03-10T19:48:45.688470Z"}, {"uuid": "283596a5-510a-4a57-b795-9c44fb0566d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27344", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liwz4nkmpx2t", "content": "", "creation_timestamp": "2025-02-24T18:47:26.933656Z"}, {"uuid": "fb81f298-c02b-4823-86ff-982c102d8c2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27607", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3ljwrvvf7lc2l", "content": "", "creation_timestamp": "2025-03-09T10:03:34.520769Z"}, {"uuid": "a7804142-6aa7-419b-99b7-7569b2da34cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3lkc2shceuy2z", "content": "", "creation_timestamp": "2025-03-13T21:41:56.806694Z"}, {"uuid": "c2884bae-1ff1-4c59-8588-797bd8fe1808", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27933", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkvcp4y5gj2n", "content": "", "creation_timestamp": "2025-03-21T13:23:51.236739Z"}, {"uuid": "b468c2e6-e208-43b5-9bf6-2a041c2c99b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2739", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll6va3f4n726", "content": "", "creation_timestamp": "2025-03-25T08:49:31.336259Z"}, {"uuid": "9e2425d7-f096-4159-8740-d38c0acbc07e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27607", "type": "seen", "source": "https://bsky.app/profile/kaldata.bsky.social/post/3lk2eov7p3c2i", "content": "", "creation_timestamp": "2025-03-10T20:17:36.993450Z"}, {"uuid": "e4294c08-ddc9-4e3f-94b1-7e403919f5fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2737", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll6va3j5jo2w", "content": "", "creation_timestamp": "2025-03-25T08:49:31.884343Z"}, {"uuid": "9e48ed34-e505-4ed9-8f7a-d21ba95ad19d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2756", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll747pe3bj2s", "content": "", "creation_timestamp": "2025-03-25T10:54:27.471352Z"}, {"uuid": "7615fd84-67e9-466c-91bf-c06bd73ba489", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3llbhxarkqk2m", "content": "", "creation_timestamp": "2025-03-26T09:29:49.892693Z"}, {"uuid": "c7086c97-d20f-4fb1-9df0-530f253496f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/it-connect.bsky.social/post/3llgak6i6od2s", "content": "", "creation_timestamp": "2025-03-28T07:00:32.506789Z"}, {"uuid": "65f2ccd2-d3f1-41b3-a2a4-0574dba23678", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-27407", "type": "seen", "source": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3llgcckwqzwc2", "content": "", "creation_timestamp": "2025-03-28T07:33:48.717959Z"}, {"uuid": "7389b502-e284-436b-b756-b4fe4814220e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3llgdg4uf5ac2", "content": "", "creation_timestamp": "2025-03-28T07:53:52.419460Z"}, {"uuid": "9e9f3fc9-8813-4526-b87f-494e6fcf9d29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3llgf5ugpnof2", "content": "", "creation_timestamp": "2025-03-28T08:24:47.664482Z"}, {"uuid": "9b7a37a0-77d4-4306-b587-b49524cacd95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3llggw2m2tk2e", "content": "", "creation_timestamp": "2025-03-28T08:54:38.527864Z"}, {"uuid": "5145c762-1962-4e30-a4a0-617a9684a13a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3llgiexjtc552", "content": "", "creation_timestamp": "2025-03-28T09:21:23.590292Z"}, {"uuid": "f7663f7d-05a6-4682-99b2-4192a5f014e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3llqtbwg7us2x", "content": "", "creation_timestamp": "2025-04-01T12:02:33.253952Z"}, {"uuid": "0183c4ef-76ce-49b7-ada4-c6a5d828da25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27244", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llssnkjy7t27", "content": "", "creation_timestamp": "2025-04-02T06:56:29.180032Z"}, {"uuid": "ff70ff69-4308-4344-a6db-dec19355f743", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/oct0xor.bsky.social/post/3llgkvajsb22y", "content": "", "creation_timestamp": "2025-03-28T10:05:44.185452Z"}, {"uuid": "45020f5d-b3c0-49af-a902-d5b64f5b01ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-2748", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114263035807744605", "content": "", "creation_timestamp": "2025-04-01T13:52:41.797494Z"}, {"uuid": "e38d1ed8-5946-4e52-9637-551ee9cf7bf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-2748", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114263035807744605", "content": "", "creation_timestamp": "2025-04-01T13:52:41.798402Z"}, {"uuid": "c5b6d5aa-0eab-4ad5-92bc-d23ac605e09a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2748", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3llqonigods2h", "content": "", "creation_timestamp": "2025-04-01T10:39:32.813239Z"}, {"uuid": "2d6ddd24-49fd-43ee-87ae-6b5445e75c66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27694", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llsfizfdtk2i", "content": "", "creation_timestamp": "2025-04-02T03:01:21.400249Z"}, {"uuid": "36d0a93f-753e-4304-9055-d5f5eeccffa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3llscvli5nx2l", "content": "", "creation_timestamp": "2025-04-02T02:14:38.895001Z"}, {"uuid": "a81573ff-3ee5-4b1b-95a2-db4154ea9efa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2748", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-2748.yaml", "content": "", "creation_timestamp": "2025-04-01T11:43:43.000000Z"}, {"uuid": "cfac16f1-0e1e-46ff-b2fb-2b4673767f70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2746", "type": "seen", "source": "https://bsky.app/profile/opsmatters.bsky.social/post/3lls27vr5q22i", "content": "", "creation_timestamp": "2025-04-01T23:39:21.270302Z"}, {"uuid": "d87d9263-6588-42a4-920b-e081d707f740", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2779", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llsfizqkzo2n", "content": "", "creation_timestamp": "2025-04-02T03:01:23.346310Z"}, {"uuid": "6c5ceb86-0796-4f55-ba82-16d3bb99fe5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3llgmaogv4z23", "content": "", "creation_timestamp": "2025-03-28T10:29:57.882191Z"}, {"uuid": "9716d514-dd0d-4b73-a35c-b3ee420025e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3llgmrugzeu52", "content": "", "creation_timestamp": "2025-03-28T10:39:39.403982Z"}, {"uuid": "f35b79ec-9f76-4d9e-964d-9d6b5d43146c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27218", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3llhcu3cifs2x", "content": "", "creation_timestamp": "2025-03-28T17:14:31.413300Z"}, {"uuid": "ad4d3434-cc6e-42e1-bf9c-c694f9544764", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/ehcgroup.bsky.social/post/3llhkgod2ic26", "content": "", "creation_timestamp": "2025-03-28T19:30:13.549757Z"}, {"uuid": "2da4051f-1865-4e6a-aed3-71f83f0552a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/114242016209065106", "content": "", "creation_timestamp": "2025-03-28T20:47:12.704790Z"}, {"uuid": "cc820e89-0a13-473f-8d56-3f8dfc322c78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/114242016209065106", "content": "", "creation_timestamp": "2025-03-28T20:47:12.706335Z"}, {"uuid": "7a5a9c12-41dd-4dc7-91c0-0920d942e723", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27218", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3llhpl4ydqb2e", "content": "", "creation_timestamp": "2025-03-28T21:02:11.384380Z"}, {"uuid": "4a874f04-578f-4af6-84b9-f2c1e5329441", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3llhpl52uvi2a", "content": "", "creation_timestamp": "2025-03-28T21:02:11.897982Z"}, {"uuid": "4e263459-fdc7-49fe-985a-bd0f84ad3e1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2781", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114243008731382161", "content": "", "creation_timestamp": "2025-03-29T00:59:33.075843Z"}, {"uuid": "15ddd10b-ecb0-4deb-a9c5-d144e588f58f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2781", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114243008731382161", "content": "", "creation_timestamp": "2025-03-29T00:59:33.078629Z"}, {"uuid": "d091bde5-c877-431f-b312-dee21bd16007", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3lli4vhgtm72c", "content": "", "creation_timestamp": "2025-03-29T01:00:34.703788Z"}, {"uuid": "cd087d40-13db-42dd-ab66-83a0f72b0c9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gadgetsmagazine.bsky.social/post/3lliefi4bm52v", "content": "", "creation_timestamp": "2025-03-29T03:14:49.218840Z"}, {"uuid": "42ff2ea3-9d65-4bcf-b1ff-0637ae191573", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/phukiendinh.bsky.social/post/3lliqsm7ugq2f", "content": "", "creation_timestamp": "2025-03-29T06:56:54.589195Z"}, {"uuid": "1408dde4-b45b-4b11-82a4-8fcae658eabf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/pepikhipik.bsky.social/post/3llis62ex2c2j", "content": "", "creation_timestamp": "2025-03-29T07:21:13.357134Z"}, {"uuid": "039ee005-86ad-47cd-9d99-81e3826f66ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/PepikHipik.infosec.exchange.ap.brid.gy/post/3llis5rtokyz2", "content": "", "creation_timestamp": "2025-03-29T07:47:43.548734Z"}, {"uuid": "d7b3d943-6234-4a3c-8eb7-6cf86b0d05cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lliu6etv622x", "content": "", "creation_timestamp": "2025-03-29T07:57:10.436582Z"}, {"uuid": "223d9416-8937-491f-aa97-d722fd90eeb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-710f0b64-f57987e600385f31", "content": "", "creation_timestamp": "2025-03-29T08:32:42.180852Z"}, {"uuid": "4b9b95f9-e69c-44ed-b9d8-adaadf5e213e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-710f0b64-f57987e600385f31", "content": "", "creation_timestamp": "2025-03-29T08:32:42.192214Z"}, {"uuid": "50cf28da-b29c-4dfd-8fea-28dd3ea12e22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2747", "type": "seen", "source": "https://bsky.app/profile/opsmatters.bsky.social/post/3lls27vr5q22i", "content": "", "creation_timestamp": "2025-04-01T23:39:21.352978Z"}, {"uuid": "e1d698c5-90c8-4502-b68d-13065b07a8f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27095", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3llqpdfmwkx2n", "content": "", "creation_timestamp": "2025-04-01T10:51:48.150321Z"}, {"uuid": "08394e74-0232-42d4-9ec4-7b72948e74ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2748", "type": "seen", "source": "https://bsky.app/profile/mariusavram.bsky.social/post/3llraotyeds2c", "content": "", "creation_timestamp": "2025-04-01T16:02:26.118131Z"}, {"uuid": "a0c22c00-addd-4829-9c85-7da320da9769", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3lljftb74ws2q", "content": "", "creation_timestamp": "2025-03-29T13:13:04.936514Z"}, {"uuid": "fc9f5d3b-c4be-4467-b7c0-c7bbe1ab0a2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://notnow.dev/objects/8dac33fb-af70-415c-8aa5-96a6c972fb9d", "content": "", "creation_timestamp": "2025-03-29T17:34:15.379084Z"}, {"uuid": "a8fcbcf2-ddcc-4a4c-8b3b-28add7d48d3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://notnow.dev/objects/8dac33fb-af70-415c-8aa5-96a6c972fb9d", "content": "", "creation_timestamp": "2025-03-29T17:34:15.377260Z"}, {"uuid": "31e0b394-0460-4447-98ab-0d0c56070cd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27218", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3llk7zvnojx2s", "content": "", "creation_timestamp": "2025-03-29T21:02:07.631743Z"}, {"uuid": "b271351e-7483-41eb-a36c-059a1871b087", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3llkjjppfts2b", "content": "", "creation_timestamp": "2025-03-29T23:52:01.100202Z"}, {"uuid": "44af0c54-2678-4b85-a40b-6246aa09594d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3llkkgc236s2b", "content": "", "creation_timestamp": "2025-03-30T00:07:57.704696Z"}, {"uuid": "140c91c0-9bbd-461f-981a-7c6caadc5079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3llkl5ito5c2b", "content": "", "creation_timestamp": "2025-03-30T00:20:56.309608Z"}, {"uuid": "42123302-6339-40d3-ba8e-db4ac932f58a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3llklfk3usk2b", "content": "", "creation_timestamp": "2025-03-30T00:25:26.360459Z"}, {"uuid": "d303568c-9c76-4d0b-a577-0df92e43daac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3llklklomoc2b", "content": "", "creation_timestamp": "2025-03-30T00:28:15.619683Z"}, {"uuid": "3cc479bb-1427-4bd8-ba4d-1d53eed87973", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3llkn7pthqs2b", "content": "", "creation_timestamp": "2025-03-30T00:58:00.104442Z"}, {"uuid": "d29a80d0-5de6-425d-a86e-1a96aa7f1f1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3llkndnm3tk2b", "content": "", "creation_timestamp": "2025-03-30T01:00:11.932453Z"}, {"uuid": "214e24b4-e5f6-4cc1-9e5a-9090805d4f3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2748", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3llrnab35ic2g", "content": "", "creation_timestamp": "2025-04-01T19:46:54.880271Z"}, {"uuid": "9c328502-10fc-4e0a-8d1e-500248c708aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27693", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llsfiyksa42m", "content": "", "creation_timestamp": "2025-04-02T03:01:17.279531Z"}, {"uuid": "2554d122-eaaa-4874-a578-280548ed23a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27692", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llsfiyuik526", "content": "", "creation_timestamp": "2025-04-02T03:01:18.121238Z"}, {"uuid": "0482fbc0-56e1-44b7-99e1-b9fca469872e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-2748", "type": "exploited", "source": "https://labs.watchtowr.com/xss-to-rce-by-abusing-custom-file-handlers-kentico-xperience-cms-cve-2025-2748/", "content": "", "creation_timestamp": "2025-04-01T11:21:05.092566Z"}, {"uuid": "3478877f-a0eb-4118-beb4-08f8f6c7d3c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27997", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lpp4anvbrq2h", "content": "", "creation_timestamp": "2025-05-21T17:18:26.334573Z"}, {"uuid": "701c31d2-c7cb-453a-953a-db72d2818986", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lruak2ufiv2q", "content": "", "creation_timestamp": "2025-06-18T05:08:54.321731Z"}, {"uuid": "65e8d2fa-1426-4e03-aca0-a406d99c7243", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-2783", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lruamurnzc2x", "content": "", "creation_timestamp": "2025-06-18T05:10:28.953215Z"}, {"uuid": "f5c0edbc-777e-46c1-9c3e-e58073353b3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-15007633-4e08bdcaa9d35f42", "content": "", "creation_timestamp": "2025-05-16T05:34:59.003939Z"}, {"uuid": "5a74c974-fcae-4499-9f85-22cb5450beb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2748", "type": "seen", "source": "https://bsky.app/profile/samilaiho.com/post/3lltd6r6nws26", "content": "", "creation_timestamp": "2025-04-02T11:52:28.049592Z"}, {"uuid": "699cb6bd-66f1-48dc-ba86-fd0219935c53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2786", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lltgrtolbw2x", "content": "", "creation_timestamp": "2025-04-02T12:56:48.428220Z"}, {"uuid": "f3495510-cd03-418c-9937-805f2ed0ab73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-2748", "type": "seen", "source": "https://threatintel.cc/2025/04/02/xss-to-rce-by-abusing.html", "content": "", "creation_timestamp": "2025-04-02T11:23:59.000000Z"}, {"uuid": "93dff706-313f-43ef-8722-fd262966b162", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27556", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lltry3r6n72a", "content": "", "creation_timestamp": "2025-04-02T16:17:08.647280Z"}, {"uuid": "c41fa7d5-5840-4e32-96c3-a73a0bf91d65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-14)", "content": "", "creation_timestamp": "2025-07-14T00:00:00.000000Z"}, {"uuid": "451c8e91-ce2f-4ae6-a2d3-977326d82877", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27556", "type": "seen", "source": "https://s.ovalerio.net/users/dethos/statuses/114270198691517569", "content": "", "creation_timestamp": "2025-04-02T20:14:43.565831Z"}, {"uuid": "8d672edb-87a2-43c5-adf1-011b5dbcce7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27556", "type": "seen", "source": "https://s.ovalerio.net/users/dethos/statuses/114270198691517569", "content": "", "creation_timestamp": "2025-04-02T20:14:43.573631Z"}, {"uuid": "4cb1664d-2423-44d6-a738-d39ee145a40e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2748", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3llubw2ytye2v", "content": "", "creation_timestamp": "2025-04-02T21:02:22.667912Z"}, {"uuid": "458f7383-6063-4361-b83e-1639097a7630", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2704", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114270646699167048", "content": "", "creation_timestamp": "2025-04-02T22:08:14.853456Z"}, {"uuid": "1755c26c-c970-43d1-8274-8144a8b1ef97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2704", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114270646699167048", "content": "", "creation_timestamp": "2025-04-02T22:08:14.866680Z"}, {"uuid": "f017a37f-0b41-4856-8592-d72116eded97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2704", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lluikv5su52x", "content": "", "creation_timestamp": "2025-04-02T23:01:26.682776Z"}, {"uuid": "f81a2dcc-f70e-432a-aa33-954783e8702d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27608", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lluikvlyz22r", "content": "", "creation_timestamp": "2025-04-02T23:01:29.185489Z"}, {"uuid": "57a84d62-1c41-4613-917d-ae6c17ea2378", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2704", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3llujgm4nxl2z", "content": "", "creation_timestamp": "2025-04-02T23:16:51.908294Z"}, {"uuid": "cde4ae76-8818-40a6-b8b7-cc577ac82841", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2784", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llvdossxud24", "content": "", "creation_timestamp": "2025-04-03T07:06:44.385267Z"}, {"uuid": "8004a2e5-10c0-4d4b-ad79-378e420a6ad3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3llvqmxtsqk2e", "content": "", "creation_timestamp": "2025-04-03T10:58:27.081151Z"}, {"uuid": "98ce92f6-921d-4b43-b3a2-10004c823bc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2784", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114274198489762332", "content": "", "creation_timestamp": "2025-04-03T13:11:32.943775Z"}, {"uuid": "e5f9a53d-a990-4e7f-afbb-9261f19fc595", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2784", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114274198489762332", "content": "", "creation_timestamp": "2025-04-03T13:11:32.958957Z"}, {"uuid": "3ebb8ac7-b1ef-4c95-ba30-9e4bb416e7e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27152", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3llwgjl564x2y", "content": "", "creation_timestamp": "2025-04-03T17:30:11.044965Z"}, {"uuid": "06fe0bed-9971-4d91-b6c1-8ae298d486ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27566", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpj7bwaamv62", "content": "", "creation_timestamp": "2025-05-19T08:56:56.637266Z"}, {"uuid": "fed05188-7c34-472f-9895-2c5bb15da5ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27631", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-093-02", "content": "", "creation_timestamp": "2025-04-03T10:00:00.000000Z"}, {"uuid": "610cca6e-69bf-4566-a17b-7cb7c2c17e08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27632", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-093-02", "content": "", "creation_timestamp": "2025-04-03T10:00:00.000000Z"}, {"uuid": "b717fe8a-7862-489f-b374-2b8ba1c02b3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27633", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-093-02", "content": "", "creation_timestamp": "2025-04-03T10:00:00.000000Z"}, {"uuid": "8400863c-7522-44fb-afda-60aabc915f7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27152", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3llxdpwjlkr2n", "content": "", "creation_timestamp": "2025-04-04T02:12:41.518634Z"}, {"uuid": "d607abcc-2260-4fb3-b71e-4771754bf9e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2704", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3llxk62iuwa2l", "content": "", "creation_timestamp": "2025-04-04T04:07:58.252033Z"}, {"uuid": "c33bd84d-6a1a-4acb-98e5-964d8aae58a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2780", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llxxalf7r72r", "content": "", "creation_timestamp": "2025-04-04T08:02:01.977638Z"}, {"uuid": "cbbf75a3-9bf7-4454-b822-f179cdd7633d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2704", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3llxypadfxk2s", "content": "", "creation_timestamp": "2025-04-04T08:28:10.890986Z"}, {"uuid": "1bbcdd2f-7678-47b9-84e6-02c2c93e78f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/maketecheasier.com/post/3llxz7azk5p22", "content": "", "creation_timestamp": "2025-04-04T08:37:04.829345Z"}, {"uuid": "33e0a6c4-8a20-4dce-8711-d8aed9949f82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2780", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3llxzf3vrr42r", "content": "", "creation_timestamp": "2025-04-04T08:40:20.267176Z"}, {"uuid": "70074a2a-61f6-4fef-a532-3753cc81c707", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2780", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114279062248412727", "content": "", "creation_timestamp": "2025-04-04T09:48:28.165153Z"}, {"uuid": "2568de79-21be-498d-9697-bcdafc6806b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2780", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114279062248412727", "content": "", "creation_timestamp": "2025-04-04T09:48:28.167882Z"}, {"uuid": "8e83cda7-ae05-45ba-8a1c-d667a998d982", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27127", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-191-05", "content": "", "creation_timestamp": "2025-07-10T10:00:00.000000Z"}, {"uuid": "337621a2-53be-4d96-9646-883563deffce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-27423", "type": "seen", "source": "https://bsky.app/profile/fernand0.bsky.social/post/3llyaftt4xt2o", "content": "", "creation_timestamp": "2025-04-04T10:46:01.639023Z"}, {"uuid": "55ed2de5-5f05-41ba-826e-1da5a6e9b9dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2704", "type": "seen", "source": "https://bsky.app/profile/it-connect.bsky.social/post/3llykhifbl62e", "content": "", "creation_timestamp": "2025-04-04T13:45:55.221701Z"}, {"uuid": "ea50dc24-4bd1-4107-8382-a1e39eac6c37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2798", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3llynilidiy2p", "content": "", "creation_timestamp": "2025-04-04T14:40:12.531334Z"}, {"uuid": "c735f712-c51e-4018-a115-eb7485054a6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27520", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114280346981280788", "content": "", "creation_timestamp": "2025-04-04T15:15:09.351658Z"}, {"uuid": "494a4294-5b90-4b25-99b8-087badde735b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27520", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114280346981280788", "content": "", "creation_timestamp": "2025-04-04T15:15:09.366670Z"}, {"uuid": "935b9066-63f4-4287-adc9-24d81a6b10cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27520", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3llyqu3qz7y2s", "content": "", "creation_timestamp": "2025-04-04T15:40:19.638327Z"}, {"uuid": "24967c38-d328-41ba-87e4-07a6a0a8a53e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2798", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114280477257589770", "content": "", "creation_timestamp": "2025-04-04T15:48:17.080780Z"}, {"uuid": "314094e1-5fe5-44e9-8ef9-41f84abc714a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2798", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114280477257589770", "content": "", "creation_timestamp": "2025-04-04T15:48:17.082929Z"}, {"uuid": "8269d896-4fe1-4070-ae57-9bbc0e0cf688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2798", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llys3nxxxw2b", "content": "", "creation_timestamp": "2025-04-04T16:02:28.640784Z"}, {"uuid": "044ac9b8-21cc-428e-b782-30a81113b577", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27520", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llys3o3a7t2o", "content": "", "creation_timestamp": "2025-04-04T16:02:29.100121Z"}, {"uuid": "2745b1de-fe35-4bf5-9de7-e9a3a6a49edb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27520", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114280948811681067", "content": "", "creation_timestamp": "2025-04-04T17:48:13.162499Z"}, {"uuid": "3eb3abe2-ad3e-4717-a412-b0c4af63cea9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27520", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114280948811681067", "content": "", "creation_timestamp": "2025-04-04T17:48:13.164913Z"}, {"uuid": "423bfdbd-788b-48a8-8e24-f0b3d8557a29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27095", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3llzpt5vcvc2g", "content": "", "creation_timestamp": "2025-04-05T00:54:36.882964Z"}, {"uuid": "69d915c6-bb03-45a0-bc46-cba2694c933c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27038", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lr2sr7li6p2f", "content": "", "creation_timestamp": "2025-06-08T02:25:48.503211Z"}, {"uuid": "5b7e51b3-3df3-414b-84de-0d2afe1d57b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-2704", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lm2gr6fggk2v", "content": "", "creation_timestamp": "2025-04-05T07:45:03.891842Z"}, {"uuid": "7b7e1d61-ee7a-4fb1-b065-cefcdba7f1a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27445", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lquhlgrb3xi2", "content": "", "creation_timestamp": "2025-06-05T13:49:51.585353Z"}, {"uuid": "95202e3c-fc81-48e8-9394-fe71b8856f15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27038", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3lqqkhmfk2j24", "content": "", "creation_timestamp": "2025-06-04T00:30:38.853457Z"}, {"uuid": "f434c328-b465-44ac-bac5-cf451477eb86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lm3aqumwje2z", "content": "", "creation_timestamp": "2025-04-05T15:30:12.347050Z"}, {"uuid": "85c8af35-17a5-4cd5-b7b9-07d3490865c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2748", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3lm3c4gfjk62c", "content": "", "creation_timestamp": "2025-04-05T15:54:32.341930Z"}, {"uuid": "94777582-0d10-45ea-837c-67f96b861ff3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2704", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3lm47yrfih22i", "content": "", "creation_timestamp": "2025-04-06T00:49:22.865530Z"}, {"uuid": "ab001b13-49ce-4a42-b48d-40cde94a8333", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27130", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lm4e5dljgc2x", "content": "", "creation_timestamp": "2025-04-06T02:03:30.346012Z"}, {"uuid": "cf5c3759-b23e-441d-9734-245fcfb20ee5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27754", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lquhlay4lxd2", "content": "", "creation_timestamp": "2025-06-05T13:49:50.242364Z"}, {"uuid": "3d4d8b87-3258-4dd4-946b-21ca0f9b5cff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27753", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lquhlelgt3v2", "content": "", "creation_timestamp": "2025-06-05T13:49:50.915546Z"}, {"uuid": "8cb6b263-7fe3-439d-829d-de2d8d2f8c95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27819", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114659168375994722", "content": "", "creation_timestamp": "2025-06-10T12:54:25.223269Z"}, {"uuid": "45e67ab0-55a7-4011-9068-a08eec7a2622", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27818", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114659168375994722", "content": "", "creation_timestamp": "2025-06-10T12:54:25.405023Z"}, {"uuid": "127a2324-cdca-49bd-b2b1-daf290be437f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27817", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114659168375994722", "content": "", "creation_timestamp": "2025-06-10T12:54:25.490862Z"}, {"uuid": "4ee0606d-ef7f-4496-9ba2-b374b1a42b97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3ltfep2o2py2b", "content": "", "creation_timestamp": "2025-07-07T18:03:43.975105Z"}, {"uuid": "90b985b1-79b1-4964-a6cd-c7dac10e66b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27754", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114631238055243276", "content": "", "creation_timestamp": "2025-06-05T14:31:21.988521Z"}, {"uuid": "e68dd845-172a-404e-9aa7-bb77c77745ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27445", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114631238055243276", "content": "", "creation_timestamp": "2025-06-05T14:31:22.196304Z"}, {"uuid": "f0d601a2-8f06-4178-81f8-c6d8817259eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27753", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114631238055243276", "content": "", "creation_timestamp": "2025-06-05T14:31:22.100951Z"}, {"uuid": "df7647aa-f6e5-4f06-a478-7161a9f8227b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-24)", "content": "", "creation_timestamp": "2025-06-24T00:00:00.000000Z"}, {"uuid": "b78642e6-c8b2-4f8e-8f30-122c6748fb7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://notnow.dev/objects/385ad680-4f16-4bc2-96a3-2bd0b0788376", "content": "", "creation_timestamp": "2025-04-06T23:20:05.391436Z"}, {"uuid": "a839cc42-3a79-4843-977a-cca0ff7fe618", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lppir3tejy26", "content": "", "creation_timestamp": "2025-05-21T21:02:20.833064Z"}, {"uuid": "20f302ea-6f9a-4cb8-9a1e-b068c51b2842", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-23)", "content": "", "creation_timestamp": "2025-05-23T00:00:00.000000Z"}, {"uuid": "0026b272-b694-44ac-a6eb-0224c19460a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27558", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lppkpi73jk2k", "content": "", "creation_timestamp": "2025-05-21T21:37:11.168981Z"}, {"uuid": "0499ebd7-3695-4aaf-b5f4-765b61c563c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27112", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lsjzkdeg4m2i", "content": "", "creation_timestamp": "2025-06-26T21:02:27.711650Z"}, {"uuid": "a94252f1-bc69-4cb4-9ca0-befb41d778f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27753", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lquluuqpe32k", "content": "", "creation_timestamp": "2025-06-05T15:06:36.417574Z"}, {"uuid": "146faacc-baff-407e-8aa0-f6f35e8f997b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2704", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3lmb6lqvkc22u", "content": "", "creation_timestamp": "2025-04-08T00:07:33.423969Z"}, {"uuid": "a6b4116d-f3a2-42f6-8a6f-3f15a54acdc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2761", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-204/", "content": "", "creation_timestamp": "2025-04-07T03:00:00.000000Z"}, {"uuid": "57a5fab6-e483-43de-92fe-525529b5d195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2760", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-203/", "content": "", "creation_timestamp": "2025-04-07T03:00:00.000000Z"}, {"uuid": "acd8d756-7581-4b52-95e1-9077bf1136b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27529", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-201/", "content": "", "creation_timestamp": "2025-04-07T03:00:00.000000Z"}, {"uuid": "f173bd70-a13b-4b58-9859-519a57f421cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27520", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lmbgibuaei2j", "content": "", "creation_timestamp": "2025-04-08T02:28:43.625179Z"}, {"uuid": "ce9bc15b-bded-47f3-aab0-3f7dba32ae47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27520", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3lmbylkeghs2j", "content": "", "creation_timestamp": "2025-04-08T07:52:42.899311Z"}, {"uuid": "30519c77-2aa7-4661-97b6-8fd9cf4af3b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27429", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lmc3aojtmn2t", "content": "", "creation_timestamp": "2025-04-08T08:40:17.146664Z"}, {"uuid": "4a62ef18-54cd-415f-8391-8a1c3d346a29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27435", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmc5ecpojo2z", "content": "", "creation_timestamp": "2025-04-08T09:18:08.259414Z"}, {"uuid": "1772d278-5acc-4153-a5f9-a82205063cba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27429", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmc5ed5kug2z", "content": "", "creation_timestamp": "2025-04-08T09:18:10.624614Z"}, {"uuid": "d6442843-e8b3-45ec-9120-cb7a00bfea3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27428", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmc5edeayk2b", "content": "", "creation_timestamp": "2025-04-08T09:18:11.843582Z"}, {"uuid": "59ce518f-bcde-4041-a8bd-b5105384e8e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27437", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmc5edx3km2i", "content": "", "creation_timestamp": "2025-04-08T09:18:14.647796Z"}, {"uuid": "f8862ee8-50b2-4531-8784-35d42b9f3c8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27429", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114301713078763649", "content": "", "creation_timestamp": "2025-04-08T09:48:49.932838Z"}, {"uuid": "06a7542c-ab32-4fc5-8de2-2a5c72ef1f6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-24)", "content": "", "creation_timestamp": "2025-06-24T00:00:00.000000Z"}, {"uuid": "86d2b748-7d02-4b4d-b38c-a394fc00890e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-07)", "content": "", "creation_timestamp": "2025-06-07T00:00:00.000000Z"}, {"uuid": "f06a439a-4665-4fad-b1a7-5920f3cc019e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2718", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ltb5rmkg752a", "content": "", "creation_timestamp": "2025-07-06T01:49:14.430406Z"}, {"uuid": "5f00e99c-629e-4cce-96fe-420185c9aec6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/reconbee.bsky.social/post/3lrupve6buk2p", "content": "", "creation_timestamp": "2025-06-18T09:43:46.467633Z"}, {"uuid": "7985b9f3-3afa-4710-a5a5-a90064ef9074", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27429", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3lmcejquoj22v", "content": "", "creation_timestamp": "2025-04-08T11:26:25.691664Z"}, {"uuid": "3e3488e7-26c6-40f7-8639-de70c3045e02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27441", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3lmcenrnrjk2f", "content": "", "creation_timestamp": "2025-04-08T11:28:40.037870Z"}, {"uuid": "1e4988d8-7cd4-44eb-bbe3-92d6d29bd8a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27442", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3lmcenrnrjk2f", "content": "", "creation_timestamp": "2025-04-08T11:28:40.128464Z"}, {"uuid": "0739ed46-9543-428d-8b8a-cf9af1470950", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27443", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3lmcentwnag2w", "content": "", "creation_timestamp": "2025-04-08T11:28:42.269668Z"}, {"uuid": "46788740-e77d-4049-ac3a-d1b09f16d0e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27429", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lmcvlgaa4222", "content": "", "creation_timestamp": "2025-04-08T16:31:34.938302Z"}, {"uuid": "7b3bb540-2863-4988-bd80-9fe7e12eac8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2704", "type": "seen", "source": "https://bsky.app/profile/modat-io.bsky.social/post/3lmcvu5a5hk2i", "content": "", "creation_timestamp": "2025-04-08T16:36:27.284298Z"}, {"uuid": "5371fdc8-a89b-40fe-95eb-58f35ae5a1b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27481", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114303700058967662", "content": "", "creation_timestamp": "2025-04-08T18:14:08.654351Z"}, {"uuid": "ddad9a9f-21ad-45f3-97e3-74e7efa43b40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27078", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmd755jc5t24", "content": "", "creation_timestamp": "2025-04-08T19:22:35.161395Z"}, {"uuid": "7fd93fc5-64c3-4384-bd23-c9f75dccf36b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27079", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmd755mjjx2c", "content": "", "creation_timestamp": "2025-04-08T19:22:35.720951Z"}, {"uuid": "22bae310-d43e-4ee0-9c3e-dee87f6692d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27477", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114304071552496052", "content": "", "creation_timestamp": "2025-04-08T19:48:37.529049Z"}, {"uuid": "4d8cd332-4db1-4e7e-b01a-1196dcf4676a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27480", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114304071588461960", "content": "", "creation_timestamp": "2025-04-08T19:48:37.923629Z"}, {"uuid": "1cae24d7-4993-49bc-8666-321e906e0581", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27481", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114304071623027386", "content": "", "creation_timestamp": "2025-04-08T19:48:38.974299Z"}, {"uuid": "aa15fbb6-8919-4698-8c19-4848ebdd2c45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27482", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114304071662070939", "content": "", "creation_timestamp": "2025-04-08T19:48:39.434950Z"}, {"uuid": "c13ccf87-d087-4756-af40-6ba33efcac5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27487", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114304071724014436", "content": "", "creation_timestamp": "2025-04-08T19:48:41.834629Z"}, {"uuid": "b65e8d4d-1c20-4a77-a52a-c5b6bef216d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27737", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114304071758792655", "content": "", "creation_timestamp": "2025-04-08T19:48:42.127711Z"}, {"uuid": "41fe1e99-63a1-43bd-924b-c7692276c0e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27740", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114304071794425404", "content": "", "creation_timestamp": "2025-04-08T19:48:42.221860Z"}, {"uuid": "e10a0c08-c82f-41cc-8ed5-36972e007160", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27740", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmdbnoisyv2f", "content": "", "creation_timestamp": "2025-04-08T20:07:39.216323Z"}, {"uuid": "ea3761f3-ec94-4ebc-87fa-0760921c8b9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27481", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmdbnombmj24", "content": "", "creation_timestamp": "2025-04-08T20:07:39.790934Z"}, {"uuid": "33d9140f-4c60-479d-b56c-41e8d17809d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27480", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmdbnopjwz2c", "content": "", "creation_timestamp": "2025-04-08T20:07:40.398455Z"}, {"uuid": "9a6d7716-4f8d-4d3d-80b4-fc9919609697", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27487", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmdbnoswu42z", "content": "", "creation_timestamp": "2025-04-08T20:07:41.086521Z"}, {"uuid": "69df1335-70f0-4d6e-809d-449953acfc65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27482", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmdbnovzvg2v", "content": "", "creation_timestamp": "2025-04-08T20:07:41.693245Z"}, {"uuid": "cca7028d-1081-49d3-818f-3f2541d58c9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27477", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmdbnp55m425", "content": "", "creation_timestamp": "2025-04-08T20:07:44.567690Z"}, {"uuid": "3e89b960-97d1-4872-a1dc-19e91973dba5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27737", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmdbnqkjnb2c", "content": "", "creation_timestamp": "2025-04-08T20:07:45.193870Z"}, {"uuid": "a693f466-3ee2-4fdb-97da-d5b2d466a78f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lmdep7pjum2t", "content": "", "creation_timestamp": "2025-04-08T21:02:11.822486Z"}, {"uuid": "aa85f9f9-189e-4247-a0fd-012d95a4c269", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27489", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0109", "content": "", "creation_timestamp": "2025-04-08T16:53:20.000000Z"}, {"uuid": "f4c47228-8964-4fd8-aa08-035c6796908a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-274897", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0109", "content": "", "creation_timestamp": "2025-04-08T16:53:20.000000Z"}, {"uuid": "7a0b666b-5ba0-41d9-9978-66abf9eb2c95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-277437", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0108", "content": "", "creation_timestamp": "2025-04-08T16:52:22.000000Z"}, {"uuid": "483dcf1b-7797-4ec9-9ebb-d6434b15222f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-277447", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0107", "content": "", "creation_timestamp": "2025-04-08T16:50:53.000000Z"}, {"uuid": "20fcd887-8d2e-4017-8690-82b7643d623a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-277457", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0107", "content": "", "creation_timestamp": "2025-04-08T16:50:53.000000Z"}, {"uuid": "6a30f39e-279c-4703-a792-5ab8ba00e429", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-277467", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0107", "content": "", "creation_timestamp": "2025-04-08T16:50:53.000000Z"}, {"uuid": "2e35c6dc-6161-4ba9-889b-01688f93592d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-277487", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0107", "content": "", "creation_timestamp": "2025-04-08T16:50:53.000000Z"}, {"uuid": "064d1c27-250d-4087-9232-7efd350a24fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-277497", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0107", "content": "", "creation_timestamp": "2025-04-08T16:50:53.000000Z"}, {"uuid": "2718e464-cc10-4083-ae5c-74919005aa45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-277527", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0107", "content": "", "creation_timestamp": "2025-04-08T16:50:53.000000Z"}, {"uuid": "493f822e-f959-4739-98e1-7d6fc030bd1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27745", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "0c02957f-62f2-4f02-975c-86c238567c25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27473", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "bb6dc835-7653-4860-9ac2-1599a9c01a5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27487", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "9a4646d5-c8cc-44aa-9d39-5f43b4d275d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27476", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "3ab10cde-6c0c-4b44-b34c-0c5aa6876a28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27477", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "1b999660-812a-40ec-b36a-35060c110278", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27481", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "fe11b804-49e8-4886-b747-80c24c5a238f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-24)", "content": "", "creation_timestamp": "2025-06-24T00:00:00.000000Z"}, {"uuid": "403de3e7-55ec-44b9-a056-6150367c8385", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-277477", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0107", "content": "", "creation_timestamp": "2025-04-08T16:50:53.000000Z"}, {"uuid": "965236a7-bf44-4af6-9617-143872087183", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27482", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "0ae7c226-fcd4-4e2e-9533-04693ca15986", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27752", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "44279cd5-79af-4dfa-aca7-faa9420d992f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27483", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "7be77573-4928-4e1d-b471-4074d117b8c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27735", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "642b3e8c-2932-41b6-a25a-ab79400f0c67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-277507", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0107", "content": "", "creation_timestamp": "2025-04-08T16:50:53.000000Z"}, {"uuid": "fcdfc121-7315-403d-b4ec-87a93f4a4a84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-277517", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0107", "content": "", "creation_timestamp": "2025-04-08T16:50:53.000000Z"}, {"uuid": "d45aa865-6cf8-4853-86de-7e9ef8020578", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27749", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "b4ff70b5-038e-4cd6-8f14-26f3a0535834", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27489", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "42e73bc5-35c5-4d85-9915-701b4029f632", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27743", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "6f6a9729-1a02-4dfa-9b03-17901462d358", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27478", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "26aa5ac9-91e3-4c57-bd5e-08908f3d151a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-f024cbfd-f1a2c7c8ee9ad671", "content": "", "creation_timestamp": "2025-06-26T21:48:47.864991Z"}, {"uuid": "b6035a01-e06d-4a18-88c2-1aafd50fbfe0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27480", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "f57a4cc3-b24d-45dd-94b9-cf122acdead8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27748", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "fa2d5bcf-bc5c-47ba-83b8-d88462b01288", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27491", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "e668fedc-de7d-4215-9e7b-164d4517cf96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27747", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "7f354052-007d-4e47-b598-b17aa2632ac1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27507", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lqb2a3pcyc2l", "content": "", "creation_timestamp": "2025-05-28T20:30:10.732847Z"}, {"uuid": "ac76e5f3-11aa-449f-99e8-db386d9d1bb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27740", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "07964b55-d8b2-470d-b6a9-99a414b10db6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27479", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "97f4ad6e-b252-4b33-88f6-10a0702be992", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27751", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "31d9789e-8977-4a4c-9d4e-c104871ce7c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27490", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "3ec3d6e8-6637-463a-a05b-9c8171938025", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27739", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "f49205ef-bb10-4865-8aeb-d753ddbf77fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27728", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "d378d52d-a423-47ac-9f8c-277caef0f185", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27492", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "861913a1-5e02-4e00-906e-7856bac520e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27475", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "76097d60-5ec3-4b9e-9180-7989910722d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27750", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "164852bf-a645-4f49-a8e7-7a8a6b4f61c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27744", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "9c7a6c54-1977-4427-a1bc-472b7cc3278b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27746", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "c3ba20a6-e0dc-4ac2-ba1e-929cd7c3c89d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27471", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "ec0c8b0d-6bae-4fa8-a16f-a3fafbefae46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27727", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "2c405814-26b3-4abd-91ea-f2ca1d0911cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27731", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "65393003-78c7-4d15-8533-5379c6a67680", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27733", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "65dd90ff-486e-4d9d-b454-41313d5396d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27741", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "27a24f55-2315-4280-811c-315df0923236", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27742", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "ef2585d4-487f-4adf-b4f7-2b9aded04e8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27467", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "87f1b64b-a87d-4205-b902-7ce693d078a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27730", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "1426b9d5-6bea-4aa4-9afb-2f9aecf16a7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27732", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "f41ba028-fd1a-4693-917c-54ed6f7ce0d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27469", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "1289bc15-82e9-4384-86b4-bdecbbf9ec12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27738", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "b8343647-7385-433e-9902-3849501e4349", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27737", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "7f648dbe-9616-441e-845d-4ad264f07315", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27729", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "976a5450-1646-47f4-a6d6-800e5047e5fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27486", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "98bf9404-7521-4a99-ba5e-157854f862f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27472", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "db9a9b6a-b412-41af-a4ec-e7fcdbb50447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27736", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "c19aab3b-1c86-4e73-9ddd-cdb3b21fa293", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27474", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "2e61e410-e9e2-457f-9bc4-a1b245ac892d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27470", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "119f81d9-c82d-4f43-93a6-8ea947f5dfbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27485", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "5f179599-ffa6-4a65-bbf4-d2bf536e3209", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27484", "type": "seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "content": "", "creation_timestamp": "2025-04-08T16:14:25.000000Z"}, {"uuid": "6b863024-8953-43d9-b921-3c4f34d35718", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27192", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmdtbglvum2u", "content": "", "creation_timestamp": "2025-04-09T01:22:51.623035Z"}, {"uuid": "725fca6f-618f-4b41-af9c-2c388851d35f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27189", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmdtbh526s2i", "content": "", "creation_timestamp": "2025-04-09T01:22:53.634526Z"}, {"uuid": "eec1d7fa-19c1-446b-b4a2-30dbb1ae7569", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27191", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmdtbhaiez24", "content": "", "creation_timestamp": "2025-04-09T01:22:54.196820Z"}, {"uuid": "26c623d9-5c51-4e53-914f-9343a88ad586", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27188", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmdtbhdycg26", "content": "", "creation_timestamp": "2025-04-09T01:22:54.861656Z"}, {"uuid": "874f2a94-a60d-4b7a-87f4-28a7d75dfd7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27190", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmdtbhhd2j2f", "content": "", "creation_timestamp": "2025-04-09T01:22:55.495970Z"}, {"uuid": "60e750f1-fc6a-420e-a096-c048f9310fc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2704", "type": "seen", "source": "https://bsky.app/profile/aimainainnu.bsky.social/post/3lmduefq3xs2q", "content": "", "creation_timestamp": "2025-04-09T01:42:32.447349Z"}, {"uuid": "450c7483-5a68-4864-b7c4-7067dceb8f99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27480", "type": "seen", "source": "https://krebsonsecurity.com/2025/04/patch-tuesday-april-2025-edition/", "content": "", "creation_timestamp": "2025-04-09T01:09:36.000000Z"}, {"uuid": "3611d36c-2312-4611-990a-5806eab39f3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27482", "type": "seen", "source": "https://krebsonsecurity.com/2025/04/patch-tuesday-april-2025-edition/", "content": "", "creation_timestamp": "2025-04-09T01:09:36.000000Z"}, {"uuid": "d282cfaf-5822-480b-99ca-a5c0bb952342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27480", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-45bed739-4cf70d274d3babdb", "content": "", "creation_timestamp": "2025-04-09T07:18:23.055145Z"}, {"uuid": "8d72b1e7-a350-47ed-ae64-b86cf299dc7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27482", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-45bed739-4cf70d274d3babdb", "content": "", "creation_timestamp": "2025-04-09T07:18:23.137236Z"}, {"uuid": "96402b4f-a412-4a78-995b-73aa88149fc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27745", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-45bed739-4cf70d274d3babdb", "content": "", "creation_timestamp": "2025-04-09T07:18:23.222652Z"}, {"uuid": "4f0c89fc-2c4d-4454-8c35-9ad10b53fafe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27748", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-45bed739-4cf70d274d3babdb", "content": "", "creation_timestamp": "2025-04-09T07:18:23.304704Z"}, {"uuid": "116f7bf5-6de2-4f3a-bf20-22ed14ef46f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27749", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-45bed739-4cf70d274d3babdb", "content": "", "creation_timestamp": "2025-04-09T07:18:23.390542Z"}, {"uuid": "0be1c07e-25bd-4e99-96fc-7c0720e11fef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27752", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-45bed739-4cf70d274d3babdb", "content": "", "creation_timestamp": "2025-04-09T07:18:23.563139Z"}, {"uuid": "f23c45bc-0a6a-461a-af3d-64a60b232eed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27751", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-45bed739-4cf70d274d3babdb", "content": "", "creation_timestamp": "2025-04-09T07:18:23.643169Z"}, {"uuid": "8afeebfd-9246-4092-90cc-d5f6992e4d80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27491", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-45bed739-4cf70d274d3babdb", "content": "", "creation_timestamp": "2025-04-09T07:18:23.727255Z"}, {"uuid": "4a1446a3-f400-48d8-a129-f92370967cd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27797", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114307846667500911", "content": "", "creation_timestamp": "2025-04-09T11:48:41.110553Z"}, {"uuid": "127244ba-13eb-450c-af1f-571beebfffac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27429", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0119", "content": "", "creation_timestamp": "2025-04-09T07:12:05.000000Z"}, {"uuid": "197a0929-9440-411d-830a-72d41bd6c976", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27429", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114308286346337457", "content": "", "creation_timestamp": "2025-04-09T13:40:30.280024Z"}, {"uuid": "b7b7a1f8-4242-47dc-a7c6-aa2268e84b38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27480", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-60e21c13-a8f32a075bc91ac5", "content": "", "creation_timestamp": "2025-04-09T15:30:10.194311Z"}, {"uuid": "9ec92afc-114b-4f9f-80fd-e0919f41ac32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27487", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-60e21c13-a8f32a075bc91ac5", "content": "", "creation_timestamp": "2025-04-09T15:30:10.266222Z"}, {"uuid": "cbb134e4-0d01-4377-8af2-d1a1fb85ba94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-17)", "content": "", "creation_timestamp": "2025-06-17T00:00:00.000000Z"}, {"uuid": "bf699492-133e-4d61-a1eb-7f8bd15c4fc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2777", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-24)", "content": "", "creation_timestamp": "2025-06-24T00:00:00.000000Z"}, {"uuid": "983e94bc-ae99-4395-8fc6-f39fdbe3704d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27112", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-24)", "content": "", "creation_timestamp": "2025-06-24T00:00:00.000000Z"}, {"uuid": "c7bef363-da69-4679-8c38-e1558bca3db2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27038", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-80cca610-9993d4957996c583", "content": "", "creation_timestamp": "2025-06-02T14:45:09.522165Z"}, {"uuid": "371d4030-4da8-45b9-9774-a069fcf2d5e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27690", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lmglg5pcsk2w", "content": "", "creation_timestamp": "2025-04-10T03:40:19.834137Z"}, {"uuid": "e953e8f0-6758-4765-a705-c6844490ad5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27690", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmgn774vhn2h", "content": "", "creation_timestamp": "2025-04-10T04:12:14.363688Z"}, {"uuid": "9fa2f149-f361-4732-9cbf-370e18d99269", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27590", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lmgq72wkjz2q", "content": "", "creation_timestamp": "2025-04-10T05:05:50.664082Z"}, {"uuid": "a7ce6754-d1da-418d-a26b-bcd48eeb67e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27690", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114312092801164112", "content": "", "creation_timestamp": "2025-04-10T05:48:32.077424Z"}, {"uuid": "4f46edea-3711-487e-b62d-f8552f6d8bcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27465", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ltfoe2ubuk2e", "content": "", "creation_timestamp": "2025-07-07T20:56:32.577051Z"}, {"uuid": "15699bce-8dc8-4b1b-bb6b-a14d54167415", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27350", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmhfsmxcom26", "content": "", "creation_timestamp": "2025-04-10T11:32:40.628633Z"}, {"uuid": "eaf91d7e-1d5a-4a53-89f3-2417ce4f57d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27081", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmhfsnsacr2v", "content": "", "creation_timestamp": "2025-04-10T11:32:45.541809Z"}, {"uuid": "6c9175f6-9703-4243-966b-29b7da60b984", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27690", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114314020757340212", "content": "", "creation_timestamp": "2025-04-10T13:58:50.537070Z"}, {"uuid": "86a8aa8d-4533-4f1e-b2b9-3140411f1076", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27590", "type": "seen", "source": "https://bsky.app/profile/netspi.bsky.social/post/3lmhpd22tpk2j", "content": "", "creation_timestamp": "2025-04-10T14:22:52.380496Z"}, {"uuid": "ac5445af-d900-4a3e-84e0-66593e774ddf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27892", "type": "seen", "source": "https://bsky.app/profile/campuscodi.risky.biz/post/3lmhq7wh5zk2w", "content": "", "creation_timestamp": "2025-04-10T14:38:56.790828Z"}, {"uuid": "7c7804ab-ae70-4209-8146-2613b4930abe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27812", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmhta3m4ik2u", "content": "", "creation_timestamp": "2025-04-10T15:32:46.005463Z"}, {"uuid": "b73172ff-55be-4496-b34f-287643d67791", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27813", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmhta54gfc2u", "content": "", "creation_timestamp": "2025-04-10T15:32:54.129400Z"}, {"uuid": "e7e1689d-e66f-471f-95f8-c73e0f577fed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27812", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114314451898073947", "content": "", "creation_timestamp": "2025-04-10T15:48:30.105747Z"}, {"uuid": "a162cbf4-5faa-44c2-9395-300ea9690ba4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27813", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114314451929740796", "content": "", "creation_timestamp": "2025-04-10T15:48:30.198023Z"}, {"uuid": "f52f464b-486b-4b7f-bb4b-472ec7142a63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27446", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ltbujuthim2q", "content": "", "creation_timestamp": "2025-07-06T08:36:30.613309Z"}, {"uuid": "0d7c3a1e-12d9-40aa-8b7b-26b567fd7d3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27690", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114315653926253783", "content": "", "creation_timestamp": "2025-04-10T20:54:10.334119Z"}, {"uuid": "ee9ed639-99fe-4fbe-ae6a-e8aa496c1d50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27751", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lrquv7isku2i", "content": "", "creation_timestamp": "2025-06-16T21:02:26.840638Z"}, {"uuid": "b420c24d-3298-4995-8319-8834357ba35c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lsoxytljm223", "content": "", "creation_timestamp": "2025-06-28T20:18:02.527487Z"}, {"uuid": "29c774f6-8c7b-4e80-b739-80bacce26853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27520", "type": "seen", "source": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3lmk64q62zn2e", "content": "", "creation_timestamp": "2025-04-11T13:53:04.821217Z"}, {"uuid": "015def09-b910-43c8-999f-f9f81a050d29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27520", "type": "seen", "source": "https://bsky.app/profile/darrenpmeyer.bsky.social/post/3lmk6dtxhwb2r", "content": "", "creation_timestamp": "2025-04-11T13:57:02.727805Z"}, {"uuid": "56cce8d2-943e-4622-bdd7-affc2f9777f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27520", "type": "seen", "source": "https://bsky.app/profile/hackread.bsky.social/post/3lmkkofyulc2y", "content": "", "creation_timestamp": "2025-04-11T17:37:43.589540Z"}, {"uuid": "a51da857-f72c-497b-ad04-50201be71d58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27520", "type": "seen", "source": "https://bsky.app/profile/calebpr.bsky.social/post/3lmlmhbyafv2o", "content": "", "creation_timestamp": "2025-04-12T03:42:10.949788Z"}, {"uuid": "905c20a4-a00a-4a8f-ae48-d22095264cca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27441", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmlrp5p35c24", "content": "", "creation_timestamp": "2025-04-12T05:16:05.459053Z"}, {"uuid": "6d733900-63ba-42bc-bbf2-0e81ce7758ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27442", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmlrp5p35c24", "content": "", "creation_timestamp": "2025-04-12T05:16:05.548568Z"}, {"uuid": "45c45e4a-6b98-4445-af50-1a606b9bb054", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-17)", "content": "", "creation_timestamp": "2025-06-17T00:00:00.000000Z"}, {"uuid": "c8280c73-780e-4a6c-8cd5-2af0d3c34f92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27817", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lrf7te3jkk2h", "content": "", "creation_timestamp": "2025-06-12T05:46:16.316265Z"}, {"uuid": "626ee9fc-a709-4216-aa2d-758f0f678f98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27207", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrbhgkkdq32e", "content": "", "creation_timestamp": "2025-06-10T17:51:37.187562Z"}, {"uuid": "ead3b8ae-1ae4-41ba-aa3c-052b704e0b1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-12)", "content": "", "creation_timestamp": "2025-07-12T00:00:00.000000Z"}, {"uuid": "4488074e-6867-4c6f-b542-c245b4861f63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27520", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lmnmvmuh622x", "content": "", "creation_timestamp": "2025-04-12T22:55:30.972422Z"}, {"uuid": "092f33fb-d5f2-449a-8dee-a9114371e461", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-13)", "content": "", "creation_timestamp": "2025-06-13T00:00:00.000000Z"}, {"uuid": "e930676f-63a3-4f69-b5c8-63310034bb98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27540", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-384/", "content": "", "creation_timestamp": "2025-06-16T03:00:00.000000Z"}, {"uuid": "c00544a2-1428-4839-baec-2e41ce547d92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27539", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-383/", "content": "", "creation_timestamp": "2025-06-16T03:00:00.000000Z"}, {"uuid": "03a05c84-13bb-47ec-b19f-433f0187651e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27690", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmoz7shg5c2q", "content": "", "creation_timestamp": "2025-04-13T12:08:39.476182Z"}, {"uuid": "1ac47109-4132-4427-a70c-ffd9f6f57f76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27690", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmoz7tljg22q", "content": "", "creation_timestamp": "2025-04-13T12:08:39.998734Z"}, {"uuid": "504add99-c918-46eb-8679-67ae29c33576", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27690", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmoz7uuiws2q", "content": "", "creation_timestamp": "2025-04-13T12:08:40.524356Z"}, {"uuid": "0974043a-b5b0-4311-a317-cb94d9c013fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27495", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-381/", "content": "", "creation_timestamp": "2025-06-16T03:00:00.000000Z"}, {"uuid": "6e3e812a-b935-4289-ba62-16542ad22d4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lmqq4wchdc2q", "content": "", "creation_timestamp": "2025-04-14T04:31:15.835341Z"}, {"uuid": "1e2bdeb9-af3a-4782-a92e-9a6f92b01c17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27520", "type": "seen", "source": "https://bsky.app/profile/nopfx.bsky.social/post/3lmqtyiicms2o", "content": "", "creation_timestamp": "2025-04-14T05:39:56.643340Z"}, {"uuid": "18d5704e-c090-4e01-a79e-5da40e043ac2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3lmqwqf4ckk2d", "content": "", "creation_timestamp": "2025-04-14T06:29:34.478682Z"}, {"uuid": "52287117-67b8-4a71-9c9f-fee28560f5d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27009", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmrl34dhmr24", "content": "", "creation_timestamp": "2025-04-14T12:33:30.023709Z"}, {"uuid": "31fb1488-9473-4ee7-a71e-0fe788fa0323", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27889", "type": "seen", "source": "https://bsky.app/profile/mrtuxracer.bsky.social/post/3lmrtsdgwrs2j", "content": "", "creation_timestamp": "2025-04-14T15:09:36.362292Z"}, {"uuid": "10d7ae0c-5db9-4e7b-88df-0a3d0fe1b084", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2704", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lmsh7as7ri2p", "content": "", "creation_timestamp": "2025-04-14T20:56:50.667778Z"}, {"uuid": "7e0f3463-0e40-47d4-8963-cc83f0fc7291", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27587", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrr5invfgg2p", "content": "", "creation_timestamp": "2025-06-16T23:36:26.439545Z"}, {"uuid": "4d012e67-bb87-45ee-b955-a302bea9880c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27462", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-4b2a2cfb-440a764efa0a9ca4", "content": "", "creation_timestamp": "2025-05-29T05:44:14.899937Z"}, {"uuid": "6a15468f-0998-49bd-93e7-48bfb1b72bfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27463", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-4b2a2cfb-440a764efa0a9ca4", "content": "", "creation_timestamp": "2025-05-29T05:44:15.000086Z"}, {"uuid": "d3d33542-8044-466f-82d5-bd6fc5b1400f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27464", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-4b2a2cfb-440a764efa0a9ca4", "content": "", "creation_timestamp": "2025-05-29T05:44:15.093268Z"}, {"uuid": "36db7dfe-b54a-4813-af8e-793f390ae14c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/pstrada.bsky.social/post/3lskvlazrds2g", "content": "", "creation_timestamp": "2025-06-27T05:23:59.553184Z"}, {"uuid": "0fc05e32-06d6-48cc-8601-75de0b319e88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27242", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lr457crqbm2m", "content": "", "creation_timestamp": "2025-06-08T15:05:18.155081Z"}, {"uuid": "1f3da2ea-b252-4c36-a052-dedde139f1c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27131", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lr45dha7lb2r", "content": "", "creation_timestamp": "2025-06-08T15:07:36.994323Z"}, {"uuid": "16fc92a6-4d30-49ed-bb4a-0c91a4935cd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/pierostrada.sociale.network.ap.brid.gy/post/3lskvsg63jub2", "content": "", "creation_timestamp": "2025-06-27T05:28:01.970910Z"}, {"uuid": "d8742855-e472-4beb-bd15-f29a0c18f407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "seen", "source": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3lmtwf3yzz724", "content": "", "creation_timestamp": "2025-04-15T11:01:11.909705Z"}, {"uuid": "53e4922f-39f2-4080-836d-bb1410b564a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-21)", "content": "", "creation_timestamp": "2025-05-21T00:00:00.000000Z"}, {"uuid": "c7e58bf5-b7cf-488f-b0e6-f3e0fb0ff5e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27038", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lqvhhyd4ok2a", "content": "", "creation_timestamp": "2025-06-05T23:20:28.779412Z"}, {"uuid": "89948d62-dec5-42b7-9663-ca1b3db1fcd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-03)", "content": "", "creation_timestamp": "2025-06-03T00:00:00.000000Z"}, {"uuid": "ddca6d24-d086-456d-8fde-5cf97bffe2ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27927", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-04", "content": "", "creation_timestamp": "2025-04-15T10:00:00.000000Z"}, {"uuid": "e4a8e105-d540-4ea5-9eb4-74b28579d46b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27563", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lr46pjiwfo2e", "content": "", "creation_timestamp": "2025-06-08T15:32:15.813018Z"}, {"uuid": "4d3067c0-26bd-4a56-aeac-7a703747e3d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-11)", "content": "", "creation_timestamp": "2025-06-11T00:00:00.000000Z"}, {"uuid": "0927c6ef-8c82-4874-a8d0-e7d5c6ac4b3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27575", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-04", "content": "", "creation_timestamp": "2025-04-15T10:00:00.000000Z"}, {"uuid": "8125b703-d7a3-41f4-a6ff-5d354d5bba49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27038", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lqvi2nuu6s2a", "content": "", "creation_timestamp": "2025-06-05T23:30:57.399216Z"}, {"uuid": "2ad3b069-5fc2-4c7e-b91d-888522a28f1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27565", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-04", "content": "", "creation_timestamp": "2025-04-15T10:00:00.000000Z"}, {"uuid": "3a621ebd-f3bc-40cb-9fe8-50acedd89646", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27247", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lr47bgef2n2u", "content": "", "creation_timestamp": "2025-06-08T15:42:16.515703Z"}, {"uuid": "345d26d5-c5e1-42e5-b9f2-aefad9444418", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27387", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsbl6vb26z2s", "content": "", "creation_timestamp": "2025-06-23T12:24:07.577009Z"}, {"uuid": "a2981001-61c9-4814-b3d9-6937139bac39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27568", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-04", "content": "", "creation_timestamp": "2025-04-15T10:00:00.000000Z"}, {"uuid": "664a8e40-f4b6-41ec-9aa4-2379351080a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27719", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-04", "content": "", "creation_timestamp": "2025-04-15T10:00:00.000000Z"}, {"uuid": "986efd91-1196-41ac-af1d-e5fccbd9000e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27561", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-04", "content": "", "creation_timestamp": "2025-04-15T10:00:00.000000Z"}, {"uuid": "d06b349f-5f6b-4943-8b07-756018af0405", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27938", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-04", "content": "", "creation_timestamp": "2025-04-15T10:00:00.000000Z"}, {"uuid": "a2e2f5d3-f7fb-41e1-8518-0ff23be4197a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27953", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqng2oicygi2", "content": "", "creation_timestamp": "2025-06-02T18:34:17.757750Z"}, {"uuid": "a4b219b1-00f6-40ff-ac6d-14e4f4bcc6a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27929", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-04", "content": "", "creation_timestamp": "2025-04-15T10:00:00.000000Z"}, {"uuid": "95e55e0a-633a-4ba4-80d8-61862ffb6bcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27791", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114343784101287084", "content": "", "creation_timestamp": "2025-04-15T20:08:02.893076Z"}, {"uuid": "840dfe24-4977-4c07-be58-309815df58f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27892", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmv5megosj2j", "content": "", "creation_timestamp": "2025-04-15T22:43:11.599912Z"}, {"uuid": "d93ef0cd-5ec4-4f31-9bc9-5d3549a39f0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27929", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmv5o2a6ux2i", "content": "", "creation_timestamp": "2025-04-15T22:44:08.634739Z"}, {"uuid": "125c3df5-cd13-44bc-9bd8-717708f14f5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27927", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmv5o2eu4a2c", "content": "", "creation_timestamp": "2025-04-15T22:44:09.460252Z"}, {"uuid": "1c04008c-a648-474e-afd4-3f3fe40844cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27939", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-04", "content": "", "creation_timestamp": "2025-04-15T10:00:00.000000Z"}, {"uuid": "ce27ab2b-d0c5-4786-b21d-136b8647c2ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "seen", "source": "https://bsky.app/profile/cryptonews-poster.bsky.social/post/3lmvl2ydp3j2p", "content": "", "creation_timestamp": "2025-04-16T02:44:00.946632Z"}, {"uuid": "1746a215-c9d4-47a2-8373-82492abf1515", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27920", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lpk5ns7czr2b", "content": "", "creation_timestamp": "2025-05-19T18:00:17.967972Z"}, {"uuid": "faf6566d-e3d5-415a-87d7-90fdb9acd6b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27464", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114600410672766438", "content": "", "creation_timestamp": "2025-05-31T03:51:33.488946Z"}, {"uuid": "3f9c7506-2a3e-431b-9465-f7be9ee33f1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-26)", "content": "", "creation_timestamp": "2025-05-26T00:00:00.000000Z"}, {"uuid": "c8d82659-411a-42a6-b7b8-050d205616bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-28)", "content": "", "creation_timestamp": "2025-05-28T00:00:00.000000Z"}, {"uuid": "ee035772-f887-40f2-a885-68cd1f48bf32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-bb3f88e5-393a9aaeacf90aa5", "content": "", "creation_timestamp": "2025-06-18T11:26:06.534957Z"}, {"uuid": "aed86b88-a282-4789-97dd-dbe8cd85a32d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27203", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114819777669875206", "content": "", "creation_timestamp": "2025-07-08T21:39:28.384849Z"}, {"uuid": "5d908bc6-bee3-43f2-b004-b4068f55ef34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27936", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmwfuquzlg2v", "content": "", "creation_timestamp": "2025-04-16T10:43:43.064548Z"}, {"uuid": "5d827169-e175-488e-9a69-850c8065263f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27538", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmwfur454s2q", "content": "", "creation_timestamp": "2025-04-16T10:43:44.160767Z"}, {"uuid": "77d1aab8-00c4-463a-a6a7-f6261dff514b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27571", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmwfuroneq2h", "content": "", "creation_timestamp": "2025-04-16T10:43:47.079799Z"}, {"uuid": "020d4623-ac92-4885-aee3-82d499684639", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "seen", "source": "https://bsky.app/profile/koinsaati.bsky.social/post/3lmwj2je3c22f", "content": "", "creation_timestamp": "2025-04-16T11:40:41.603098Z"}, {"uuid": "dcdfe883-a5d6-476a-8d67-fe8814268e76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "seen", "source": "https://bsky.app/profile/koinsaati.bsky.social/post/3lmwj2mhfys2f", "content": "", "creation_timestamp": "2025-04-16T11:40:42.145958Z"}, {"uuid": "21136417-d452-48bc-ade9-b14c4a5f68c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27954", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqnmgymahw2q", "content": "", "creation_timestamp": "2025-06-02T20:28:14.548541Z"}, {"uuid": "df25285e-3e55-43a2-97a8-2ea57f770752", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27953", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqnmq7ea762j", "content": "", "creation_timestamp": "2025-06-02T20:33:14.984783Z"}, {"uuid": "270712a1-c9a0-4cc0-84d1-e4fc618c5758", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "seen", "source": "https://bsky.app/profile/earlybirdsinvest.bsky.social/post/3lmxri6envz2k", "content": "", "creation_timestamp": "2025-04-16T23:44:06.749224Z"}, {"uuid": "f42a561a-bd81-4cba-9906-7fe7ef059e67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27920", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114536099967876264", "content": "", "creation_timestamp": "2025-05-19T19:16:30.298120Z"}, {"uuid": "681bb4e2-7650-45ce-892d-a6411a048867", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27956", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqnnc4ehqo2e", "content": "", "creation_timestamp": "2025-06-02T20:43:15.931950Z"}, {"uuid": "c3269c2e-1ea4-4140-8010-43708c0935e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-19)", "content": "", "creation_timestamp": "2025-06-19T00:00:00.000000Z"}, {"uuid": "0b142c33-34ab-4083-888e-3ac76e486889", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27920", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/4040098", "content": "", "creation_timestamp": "2025-05-19T19:56:22.645196Z"}, {"uuid": "44becc3c-361c-4a2f-8d2b-d84063436539", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-26)", "content": "", "creation_timestamp": "2025-06-26T00:00:00.000000Z"}, {"uuid": "08bd8a8e-db54-4c7f-b122-8db3a30e48bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27729", "type": "seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3lmzwe6av4h26", "content": "", "creation_timestamp": "2025-04-17T20:16:39.327642Z"}, {"uuid": "ddf75cdf-f183-4731-81f2-bb3f1525eed9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27520", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lmzyvzgmb52y", "content": "", "creation_timestamp": "2025-04-17T21:02:38.171267Z"}, {"uuid": "7eb6ff49-e4af-4681-aa5a-34e145bf875f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27203", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ltij3xezqd2w", "content": "", "creation_timestamp": "2025-07-09T00:00:30.880757Z"}, {"uuid": "083a2398-342a-449e-8063-6ee75fa2f5dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/ehcgroup.bsky.social/post/3lpcseq5dq22r", "content": "", "creation_timestamp": "2025-05-16T19:49:46.131947Z"}, {"uuid": "fa7fb774-2790-40aa-ad5a-a031ebfe21d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3lqvwk4lfcu2j", "content": "", "creation_timestamp": "2025-06-06T03:50:06.418474Z"}, {"uuid": "16997053-f085-425b-a753-c8cff249a0ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27021", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114783712216991743", "content": "", "creation_timestamp": "2025-07-02T12:47:33.239140Z"}, {"uuid": "2db80bb5-4ae8-4bc6-8202-49f499f26aa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27022", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114783712216991743", "content": "", "creation_timestamp": "2025-07-02T12:47:33.359439Z"}, {"uuid": "9dcc0ba3-6ae2-449f-b49a-620a2fc8a528", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27023", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114783712216991743", "content": "", "creation_timestamp": "2025-07-02T12:47:33.470524Z"}, {"uuid": "1dce83f7-9085-49be-a780-75ebb81945ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27024", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114783712216991743", "content": "", "creation_timestamp": "2025-07-02T12:47:33.580822Z"}, {"uuid": "84088973-f31e-4a3b-983b-c2ddb0400678", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27025", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114783712216991743", "content": "", "creation_timestamp": "2025-07-02T12:47:33.688285Z"}, {"uuid": "73d7c3f0-0dae-4404-af15-0d0fc74de23f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27151", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqchwxanfuv2", "content": "", "creation_timestamp": "2025-05-29T10:08:28.903935Z"}, {"uuid": "867f3b47-6b67-43d5-b111-1aaa9ad023bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27021", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsybjoy5rz2r", "content": "", "creation_timestamp": "2025-07-02T13:02:25.822809Z"}, {"uuid": "70c1446b-b5dc-4030-a918-ed0898bfacc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27599", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114359909527505857", "content": "", "creation_timestamp": "2025-04-18T16:28:57.464220Z"}, {"uuid": "fae3d016-1b86-482f-afa9-2d70af1bc4f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27599", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ln42fr6wn724", "content": "", "creation_timestamp": "2025-04-18T16:34:35.502574Z"}, {"uuid": "7f7b2aee-d283-4abf-a37c-41736e41f823", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27113", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114360724984751686", "content": "", "creation_timestamp": "2025-04-18T19:56:20.318167Z"}, {"uuid": "9abec58d-e338-4591-8816-3b422c6685f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27462", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lq5ogdt6ua2m", "content": "", "creation_timestamp": "2025-05-27T12:20:55.913191Z"}, {"uuid": "5f7ea4db-a4ba-4e68-b748-fae56c4a93aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27463", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lq5ogdt6ua2m", "content": "", "creation_timestamp": "2025-05-27T12:20:56.012905Z"}, {"uuid": "01075a37-6278-42d4-972b-cc08a93f2136", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27464", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lq5ogdt6ua2m", "content": "", "creation_timestamp": "2025-05-27T12:20:56.109537Z"}, {"uuid": "b4aa7455-e326-448a-aeba-24bf01641ffe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lpcwgj3mu52r", "content": "", "creation_timestamp": "2025-05-16T21:02:21.524536Z"}, {"uuid": "e9d88096-2397-43d5-aa4d-91639adf0d53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27025", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsybo6icpv2r", "content": "", "creation_timestamp": "2025-07-02T13:04:56.310562Z"}, {"uuid": "e2607926-618c-43c7-9425-db60db863d47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2777", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lpcwgj63762n", "content": "", "creation_timestamp": "2025-05-16T21:02:22.106658Z"}, {"uuid": "84a4918b-421d-4876-9e4d-a63f0b4cb936", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/raid1d.bsky.social/post/3lruysvf3q22w", "content": "", "creation_timestamp": "2025-06-18T12:23:22.546392Z"}, {"uuid": "496bef8b-e71d-4bda-b556-a6e25918a35d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-03)", "content": "", "creation_timestamp": "2025-07-03T00:00:00.000000Z"}, {"uuid": "1b4ac745-c893-48d2-9cb5-973db92fd064", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lrv2avnuxl2q", "content": "", "creation_timestamp": "2025-06-18T12:49:03.926009Z"}, {"uuid": "4d91d2d5-3c51-4eca-8609-f2b888abf67d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27446", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3ltcarvxqpv2o", "content": "", "creation_timestamp": "2025-07-06T12:15:45.236230Z"}, {"uuid": "3d3393ea-917d-458b-804d-310c0bb7aa05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27520", "type": "seen", "source": "https://bsky.app/profile/rajsamani.bsky.social/post/3lncqwcd6q22k", "content": "", "creation_timestamp": "2025-04-21T08:33:26.030901Z"}, {"uuid": "b7f14b02-a99d-46d5-b7c6-6f6324aab0e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27024", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsydzm7zd72m", "content": "", "creation_timestamp": "2025-07-02T13:47:07.508003Z"}, {"uuid": "022b8524-f9d0-4afb-8c36-d68197f09189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-30)", "content": "", "creation_timestamp": "2025-05-30T00:00:00.000000Z"}, {"uuid": "71111396-ed4e-48fb-a8c2-b5d43bb1f6c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27446", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114806333138890839", "content": "", "creation_timestamp": "2025-07-06T12:40:20.905353Z"}, {"uuid": "3b91483f-16a4-4e20-8a90-ff12e51d7195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27446", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q3/7", "content": "", "creation_timestamp": "2025-07-06T09:53:06.000000Z"}, {"uuid": "238f7a91-75f8-4807-afb0-a7cca059e778", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27522", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqwcursnf2d2", "content": "", "creation_timestamp": "2025-06-06T07:30:55.259104Z"}, {"uuid": "b2bc25ef-fb3a-4c07-9b21-b84cd0f012b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27151", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqcnq6khbo2k", "content": "", "creation_timestamp": "2025-05-29T11:51:51.035554Z"}, {"uuid": "45219dff-2428-435d-9981-dacd1a9fb13c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27113", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114816361290443115", "content": "", "creation_timestamp": "2025-07-08T07:10:42.737305Z"}, {"uuid": "16c19759-4295-40b1-a1bc-aa3e6685ea15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27086", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114377364182338148", "content": "", "creation_timestamp": "2025-04-21T18:27:54.145018Z"}, {"uuid": "79895c7f-b59c-46f2-816c-9f97432e4d54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27086", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lne2luzh7m2v", "content": "", "creation_timestamp": "2025-04-21T20:59:14.160543Z"}, {"uuid": "e8bb5026-47ba-481b-b587-bff3e0075609", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27483", "type": "seen", "source": "https://infosec.exchange/users/wdormann/statuses/114378804966922705", "content": "", "creation_timestamp": "2025-04-22T00:34:19.395766Z"}, {"uuid": "c6a7a9e8-e102-412f-bf76-97af565adbd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27741", "type": "seen", "source": "https://infosec.exchange/users/wdormann/statuses/114378804966922705", "content": "", "creation_timestamp": "2025-04-22T00:34:19.484581Z"}, {"uuid": "5cb5edd1-2908-451a-b3a7-b34cc670c316", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27733", "type": "seen", "source": "https://infosec.exchange/users/wdormann/statuses/114378804966922705", "content": "", "creation_timestamp": "2025-04-22T00:34:19.565813Z"}, {"uuid": "369358f3-c63d-4d93-9e0e-3f1640dd9f4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27483", "type": "seen", "source": "https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3lnegmokqwq32", "content": "", "creation_timestamp": "2025-04-22T00:34:40.363031Z"}, {"uuid": "35852569-d3a1-4e98-91d2-d521c5409b15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27741", "type": "seen", "source": "https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3lnegmokqwq32", "content": "", "creation_timestamp": "2025-04-22T00:34:40.473212Z"}, {"uuid": "b432e154-15a3-4d26-8e28-f8e75299f026", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27733", "type": "seen", "source": "https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3lnegmokqwq32", "content": "", "creation_timestamp": "2025-04-22T00:34:40.558237Z"}, {"uuid": "d5448a60-d946-4650-a014-78ee705979c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2703", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lpy3qvcbg325", "content": "", "creation_timestamp": "2025-05-25T07:03:30.360447Z"}, {"uuid": "57dcae04-3757-4f79-9845-4642e9e0af32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27444", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqrnv262am2q", "content": "", "creation_timestamp": "2025-06-04T11:04:30.097351Z"}, {"uuid": "3e8bcd95-f717-4517-acd7-800ab0a50948", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-16)", "content": "", "creation_timestamp": "2025-06-16T00:00:00.000000Z"}, {"uuid": "613bd4a9-5569-4da4-9ebd-e261e7be9fd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lrzu2nwvqr24", "content": "", "creation_timestamp": "2025-06-20T10:41:31.118874Z"}, {"uuid": "c40b89cb-b0e8-446f-919a-905782ab6cf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27522", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqwivhis3ge2", "content": "", "creation_timestamp": "2025-06-06T09:21:59.088552Z"}, {"uuid": "d3ab50f9-ae7e-450c-8468-f16c5e49e0e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lrzvzweit5s2", "content": "", "creation_timestamp": "2025-06-20T11:16:55.411724Z"}, {"uuid": "2526c3e5-aaaa-405e-8d93-86a6013497c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-10)", "content": "", "creation_timestamp": "2025-07-10T00:00:00.000000Z"}, {"uuid": "b07a8a78-5a50-479c-a565-b7480cb81e8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27907", "type": "seen", "source": "https://bsky.app/profile/knaepp.bsky.social/post/3lnfu7crrwr27", "content": "", "creation_timestamp": "2025-04-22T14:10:05.604990Z"}, {"uuid": "e1c6531a-dec2-47ff-b3da-e3f08dd8e4a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27907", "type": "seen", "source": "https://bsky.app/profile/knaepp.bsky.social/post/3lnfvlynsnk2u", "content": "", "creation_timestamp": "2025-04-22T14:35:04.762676Z"}, {"uuid": "c8ace33f-384b-4603-b283-fe30394e64e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27086", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114382402386823114", "content": "", "creation_timestamp": "2025-04-22T15:49:17.643573Z"}, {"uuid": "caf65163-9ba5-4ad7-ab1e-e0583c21786b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27495", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-112-01", "content": "", "creation_timestamp": "2025-04-22T10:00:00.000000Z"}, {"uuid": "b38f7f86-904a-4240-b32e-b65246bed972", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27539", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-112-01", "content": "", "creation_timestamp": "2025-04-22T10:00:00.000000Z"}, {"uuid": "aec7b8e8-7626-43ec-a36b-749c052ce671", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27540", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-112-01", "content": "", "creation_timestamp": "2025-04-22T10:00:00.000000Z"}, {"uuid": "a032b728-7520-4e3b-bbde-c37e16ff4193", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27031", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqomyz6x6om2", "content": "", "creation_timestamp": "2025-06-03T06:10:58.644223Z"}, {"uuid": "7b3cb4f5-3bf1-46f7-bcc5-be721bdfc200", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-08)", "content": "", "creation_timestamp": "2025-06-08T00:00:00.000000Z"}, {"uuid": "f7701047-9bb0-424b-aec9-a57dcf26a39b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27029", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqomz2g7dzi2", "content": "", "creation_timestamp": "2025-06-03T06:10:59.178533Z"}, {"uuid": "a8e5d7f6-4af3-4a75-b5d4-5af5e28e9382", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-05)", "content": "", "creation_timestamp": "2025-06-05T00:00:00.000000Z"}, {"uuid": "44305bda-475a-455d-aedd-89cfe2fa8ee7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27522", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqrta4osukg2", "content": "", "creation_timestamp": "2025-06-04T12:40:57.135551Z"}, {"uuid": "1c3dc00f-ae8d-4c64-a5b3-8880fc03b008", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-1668-52db-7d69-54c279576267", "content": "", "creation_timestamp": "2025-06-18T15:49:55.638510Z"}, {"uuid": "7f33e2b6-409c-44ca-a7de-aaf18f2b63f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27087", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114383837388549905", "content": "", "creation_timestamp": "2025-04-22T21:54:07.570411Z"}, {"uuid": "f782dc1e-5e31-4c20-82de-36422fcef687", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27087", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lngzdjofmo2l", "content": "", "creation_timestamp": "2025-04-23T01:14:37.476323Z"}, {"uuid": "a1da5a21-1854-45e1-a7f6-e4a60727452f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2703", "type": "seen", "source": "https://bsky.app/profile/grafana.bsky.social/post/3lnhroytxvs2w", "content": "", "creation_timestamp": "2025-04-23T08:30:30.683519Z"}, {"uuid": "b0188e81-da1b-4cbc-8ddb-3e2fa779379d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-24)", "content": "", "creation_timestamp": "2025-05-24T00:00:00.000000Z"}, {"uuid": "cadc9b07-a052-4ca1-9fe2-45adb852209b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27732", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lpkokz2bns24", "content": "", "creation_timestamp": "2025-05-19T23:03:00.505852Z"}, {"uuid": "9bb4f285-f456-436b-bfcf-e5011bb1131f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27701", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq65vkwwxm22", "content": "", "creation_timestamp": "2025-05-27T17:00:36.433825Z"}, {"uuid": "a75e3a71-e825-420d-ae60-23b04c5d31bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/brianhaddock.bsky.social/post/3ls25qw467m2e", "content": "", "creation_timestamp": "2025-06-20T13:35:01.770830Z"}, {"uuid": "d81be03f-2fcd-4304-841e-fc940303144a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2745", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-08", "content": "", "creation_timestamp": "2025-06-12T10:00:00.000000Z"}, {"uuid": "f094e5d4-00b4-4e41-a28e-85009d0844dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27700", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq65w2v5id22", "content": "", "creation_timestamp": "2025-05-27T17:01:18.280277Z"}, {"uuid": "16998913-402f-4a7f-998b-8efff5a275f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27038", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114618197855035087", "content": "", "creation_timestamp": "2025-06-03T07:15:04.644032Z"}, {"uuid": "5f41c5b8-cfe8-4a26-a5d0-312b9bb79b66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2703", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lnhytg4c222p", "content": "", "creation_timestamp": "2025-04-23T10:38:14.598846Z"}, {"uuid": "0d64ea96-ab3a-4d76-95a4-a0b7a3238431", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27892", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-27892.yaml", "content": "", "creation_timestamp": "2025-04-22T12:39:12.000000Z"}, {"uuid": "29f60320-8479-4337-9088-a496f575b6a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2703", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnibm3tsfl24", "content": "", "creation_timestamp": "2025-04-23T13:15:14.271302Z"}, {"uuid": "1cb05240-5db0-4861-ada7-cf7a3de79df9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2703", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114387514804455996", "content": "", "creation_timestamp": "2025-04-23T13:29:21.092070Z"}, {"uuid": "549b54aa-dd40-4ed4-85b8-44c3fdecc29b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-27840", "type": "seen", "source": "https://bsky.app/profile/sambowne.infosec.exchange.ap.brid.gy/post/3lnir6cvaxki2", "content": "", "creation_timestamp": "2025-04-23T17:54:32.833322Z"}, {"uuid": "cf4aceb3-ece1-4202-94d1-bbadb2576054", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2767", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114388561336931929", "content": "", "creation_timestamp": "2025-04-23T17:55:29.290948Z"}, {"uuid": "54bfc12d-d32b-4def-833d-65b110fd121f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2770", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114388579201738740", "content": "", "creation_timestamp": "2025-04-23T18:00:01.899357Z"}, {"uuid": "60b2f71d-eee7-449a-9f84-fdbda5ffd963", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2771", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114388579201738740", "content": "", "creation_timestamp": "2025-04-23T18:00:01.980354Z"}, {"uuid": "7e75898f-92bb-43a9-b417-0d07b22e1349", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2772", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114388579201738740", "content": "", "creation_timestamp": "2025-04-23T18:00:02.075155Z"}, {"uuid": "f6ea1ebc-3156-494a-a7a3-d0a457861256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2773", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114388579201738740", "content": "", "creation_timestamp": "2025-04-23T18:00:02.181550Z"}, {"uuid": "5cfc5c77-2b85-4e34-84a4-709cab76326d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2764", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114389005957491891", "content": "", "creation_timestamp": "2025-04-23T19:48:33.720243Z"}, {"uuid": "3a9680c5-e3cf-48f3-97d6-9664184322c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2767", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114389005997586917", "content": "", "creation_timestamp": "2025-04-23T19:48:34.295071Z"}, {"uuid": "95111a29-7b12-434f-a6a9-c89d00ee0196", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2764", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lniyzvmdre2y", "content": "", "creation_timestamp": "2025-04-23T20:14:31.749574Z"}, {"uuid": "a4ac70c4-47e6-4be1-a87f-a4bc73009701", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2767", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lniyzwayab2r", "content": "", "creation_timestamp": "2025-04-23T20:14:33.790762Z"}, {"uuid": "a94d0698-d2ae-479e-8663-5ac99116381f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2769", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnj4fb6ha52a", "content": "", "creation_timestamp": "2025-04-23T21:14:34.342428Z"}, {"uuid": "ff4942cb-9c14-4a13-8466-56b7099d3753", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2770", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnj4fbuzoy2v", "content": "", "creation_timestamp": "2025-04-23T21:14:36.992832Z"}, {"uuid": "a0270941-8192-4770-affe-d20d8c5bb2bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2748", "type": "seen", "source": "https://bsky.app/profile/c1b3r53cur1ty.bsky.social/post/3lnjbikz2xw2f", "content": "", "creation_timestamp": "2025-04-23T22:45:54.540079Z"}, {"uuid": "486d5922-3d50-4aea-ac6a-7a5690701067", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27580", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnjjsst3da2h", "content": "", "creation_timestamp": "2025-04-24T01:14:49.834943Z"}, {"uuid": "a3f2d4ca-7f6c-4aee-a4b8-e35b8f2fe7c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27581", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnjjst5wtw2s", "content": "", "creation_timestamp": "2025-04-24T01:14:51.156977Z"}, {"uuid": "3a7d5d7a-8be4-4687-8640-06c5786c22fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2703", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lnjn6x5gj22m", "content": "", "creation_timestamp": "2025-04-24T02:15:16.223577Z"}, {"uuid": "e33a65cd-173c-4178-ae51-4703be275ee1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lrvhmh2h722h", "content": "", "creation_timestamp": "2025-06-18T16:48:10.305358Z"}, {"uuid": "551bc9e8-947c-49f4-b37c-7c494fe66e10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27038", "type": "seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/114625350966786575", "content": "", "creation_timestamp": "2025-06-04T13:34:15.851297Z"}, {"uuid": "29621118-b52c-4aed-8558-de08257b052a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27029", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqov2iy34l2s", "content": "", "creation_timestamp": "2025-06-03T08:34:50.378956Z"}, {"uuid": "6ed3f42c-9fa9-4fe0-bbcd-892d3bde90e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27920", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3lplnk5is3s2w", "content": "", "creation_timestamp": "2025-05-20T08:17:30.330371Z"}, {"uuid": "dd3fc34f-d71c-437a-a221-4c53990bc551", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27920", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3lplnkafeyc2w", "content": "", "creation_timestamp": "2025-05-20T08:17:31.830338Z"}, {"uuid": "dcee8a69-67a2-4acf-9751-12b3478eee70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27920", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3lplnkflv4c2w", "content": "", "creation_timestamp": "2025-05-20T08:17:33.327237Z"}, {"uuid": "86d688f9-9fe4-4463-bb01-d15090766e6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27820", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114393098223959645", "content": "", "creation_timestamp": "2025-04-24T13:09:16.525404Z"}, {"uuid": "59814dc2-72a8-4b31-add3-8d7ae15f2fed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27820", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnkt4x6vwwb2", "content": "", "creation_timestamp": "2025-04-24T14:16:47.282976Z"}, {"uuid": "1d6a9781-fcfc-4153-aa5e-eee756e84e6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27820", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnl2ovjrua2d", "content": "", "creation_timestamp": "2025-04-24T15:49:29.577874Z"}, {"uuid": "942d7a0b-2000-4bcb-993c-e41da72598cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27892", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lnlm6a2lkd2t", "content": "", "creation_timestamp": "2025-04-24T21:02:20.127212Z"}, {"uuid": "8cdb0b9a-4097-4b26-8cac-c3dd3c3f3be2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27811", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqs3rujlhqx2", "content": "", "creation_timestamp": "2025-06-04T15:13:51.169626Z"}, {"uuid": "38b8a361-4d8f-44e4-ad58-41e728ed78e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27610", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3lnmxnhnnb22y", "content": "", "creation_timestamp": "2025-04-25T10:00:22.536208Z"}, {"uuid": "99e14bd3-bb8f-4b00-9474-ad51f3fee09a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2703", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lrvmlum4hc2w", "content": "", "creation_timestamp": "2025-06-18T18:17:21.555954Z"}, {"uuid": "d60716cb-da45-4f14-96c8-7b5b98213023", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-27610", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lnmzecojf5j2", "content": "", "creation_timestamp": "2025-04-25T10:51:30.436829Z"}, {"uuid": "cc3bfb86-0105-4ac8-8ac3-07092a2a80c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27610", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lnn6cahlep2m", "content": "", "creation_timestamp": "2025-04-25T11:59:19.320983Z"}, {"uuid": "c7490a3b-dd44-421d-a6fc-d24e6738b71b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27610", "type": "seen", "source": "https://thehackernews.com/2025/04/researchers-identify-rackstatic.html", "content": "", "creation_timestamp": "2025-04-25T06:57:00.000000Z"}, {"uuid": "102e8cf9-eb1f-4d1c-855b-3d1c00057d8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27429", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0119", "content": "", "creation_timestamp": "2025-04-25T10:10:29.000000Z"}, {"uuid": "e1a53eb8-060d-4d7f-8c0e-6a740ddb83ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27111", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lnnq2hje5s2y", "content": "", "creation_timestamp": "2025-04-25T17:17:07.120381Z"}, {"uuid": "008f01fa-139b-4f85-9a02-b1995693d6d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27610", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lnnq2hje5s2y", "content": "", "creation_timestamp": "2025-04-25T17:17:07.204000Z"}, {"uuid": "f74bdd78-0282-4f42-a9ca-d91d2380f356", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-27111", "type": "seen", "source": "https://bsky.app/profile/Sempf.infosec.exchange.ap.brid.gy/post/3lnou335z54t2", "content": "", "creation_timestamp": "2025-04-26T04:39:27.994112Z"}, {"uuid": "bbd5ad95-1fad-4bfb-89ce-c01f01fa2f6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-27610", "type": "seen", "source": "https://bsky.app/profile/Sempf.infosec.exchange.ap.brid.gy/post/3lnou335z54t2", "content": "", "creation_timestamp": "2025-04-26T04:39:28.082012Z"}, {"uuid": "dc7641b5-0856-4a20-93fc-48f9762f10dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27811", "type": "seen", "source": "https://gist.github.com/leonjza/829a98f6c0954d7cb3f6614d05f87f37", "content": "", "creation_timestamp": "2025-06-03T09:14:27.000000Z"}, {"uuid": "d9b57c76-b65a-4fe8-8150-5b427dad5d0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2703", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lnpibrrd2y2v", "content": "", "creation_timestamp": "2025-04-26T10:03:20.976143Z"}, {"uuid": "2b65a50d-3ec0-4a9d-80f1-8a9ce056d393", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lrsixknh52g2", "content": "", "creation_timestamp": "2025-06-17T12:36:54.427354Z"}, {"uuid": "15f775a8-1138-4553-82d7-8ddc220ea966", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27610", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lnplzsfbws2x", "content": "", "creation_timestamp": "2025-04-26T11:10:28.200774Z"}, {"uuid": "a15989c2-3b38-442a-95e9-efbb687aa202", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27522", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqwnt4vtn2e2", "content": "", "creation_timestamp": "2025-06-06T10:47:36.774564Z"}, {"uuid": "653ede46-d68b-4f83-b55e-d92a7af1bdfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2761", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lpeqkmfsts2j", "content": "", "creation_timestamp": "2025-05-17T14:22:35.586529Z"}, {"uuid": "3e643607-4071-4f9e-b4b7-7ed91f0947af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27811", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqsak3ckyv2k", "content": "", "creation_timestamp": "2025-06-04T16:38:23.495010Z"}, {"uuid": "cfb119f4-c73b-4eb5-85c7-7c12a884b021", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lntftgcjct2f", "content": "", "creation_timestamp": "2025-04-27T23:30:12.450937Z"}, {"uuid": "51875cd8-c52d-47bd-95d0-9956477e145b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27937", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lntu45ekav2d", "content": "", "creation_timestamp": "2025-04-28T03:45:36.357600Z"}, {"uuid": "c6418608-1e59-46d2-93eb-f520922c8031", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/mds52.bsky.social/post/3lu3s3slo6625", "content": "", "creation_timestamp": "2025-07-16T16:02:05.626949Z"}, {"uuid": "dc44d17c-f3ed-47f8-9082-e2de9cef17bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-27636", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-571c4095-786a21dfffbe298b", "content": "", "creation_timestamp": "2025-07-04T11:33:48.889811Z"}, {"uuid": "b8101f19-4336-43ed-a08e-822e1d205fea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "MISP/85904d3b-1b16-528f-8394-ddfd11e0289e", "content": "", "creation_timestamp": "2025-07-03T13:25:45.000000Z"}, {"uuid": "63122126-90f1-4977-8996-63ac82a5a8cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27689", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrhak33t4h2e", "content": "", "creation_timestamp": "2025-06-13T01:04:17.801008Z"}, {"uuid": "928fbe88-0863-4e42-8463-6c5cd83b0283", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27505", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-27505.yaml", "content": "", "creation_timestamp": "2025-07-10T20:15:34.000000Z"}, {"uuid": "cb5670ed-be18-4606-9538-17d6ed547b72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-27709", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114653436896870669", "content": "", "creation_timestamp": "2025-06-09T12:36:49.666647Z"}, {"uuid": "cb736a03-0947-4d37-ba8b-190f09730276", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/billmarczak.org/post/3ls2x37bbus22", "content": "", "creation_timestamp": "2025-06-20T21:08:11.599999Z"}, {"uuid": "4eb6b132-ccba-4805-9bf8-686371527e62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27429", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0119", "content": "", "creation_timestamp": "2025-04-28T07:35:57.000000Z"}, {"uuid": "5232e1d8-ec89-403c-acb7-9a1de6dce941", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-2783", "type": "seen", "source": "https://infosec.exchange/users/threatcodex/statuses/114416165898992561", "content": "", "creation_timestamp": "2025-04-28T14:55:41.533009Z"}, {"uuid": "31bba9d5-f0ee-4594-8aad-05ffb4f5492e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27462", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lq6nlb2jgy2u", "content": "", "creation_timestamp": "2025-05-27T21:38:26.791659Z"}, {"uuid": "90acc06e-e8f6-4b5d-8654-7dc9ea959fd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27463", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lq6nlb2jgy2u", "content": "", "creation_timestamp": "2025-05-27T21:38:26.894146Z"}, {"uuid": "1311841e-d56a-46cb-8dd7-6f8e83433507", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27464", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lq6nlb2jgy2u", "content": "", "creation_timestamp": "2025-05-27T21:38:26.978741Z"}, {"uuid": "858e5e0a-7f6f-4772-ab97-b74d9d3e224e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-09)", "content": "", "creation_timestamp": "2025-07-09T00:00:00.000000Z"}, {"uuid": "c03d03d1-e421-4fe3-bd85-9e388e3fa694", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-13)", "content": "", "creation_timestamp": "2025-07-13T00:00:00.000000Z"}, {"uuid": "7b9cdb8f-a2d1-4f1b-848f-1f117f2503a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lny35vggck2u", "content": "", "creation_timestamp": "2025-04-29T20:02:37.652961Z"}, {"uuid": "12458ced-e75e-4ccf-94aa-b4f7b20f6325", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lny35ybjds2u", "content": "", "creation_timestamp": "2025-04-29T20:02:38.698763Z"}, {"uuid": "4115149c-a281-4f76-8b49-aa0909e8187b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27610", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3lny6yvvbwn2x", "content": "", "creation_timestamp": "2025-04-29T21:11:18.626338Z"}, {"uuid": "93e800a7-a400-4ca7-aaf3-019adc31bc29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-23)", "content": "", "creation_timestamp": "2025-06-23T00:00:00.000000Z"}, {"uuid": "b9af920c-7f8a-4c5d-914b-dd332ea96844", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27462", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/168", "content": "", "creation_timestamp": "2025-05-27T18:50:05.000000Z"}, {"uuid": "78ac6fef-1fd3-4aaa-ad7d-d2c576b3cca7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27464", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/168", "content": "", "creation_timestamp": "2025-05-27T18:50:05.000000Z"}, {"uuid": "02a59616-4128-4c86-b4bd-c5af37e9a4b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27818", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lr6oqv6nhm2m", "content": "", "creation_timestamp": "2025-06-09T15:24:48.804672Z"}, {"uuid": "7ce76cb7-31e7-4946-9a95-a62865a0e1d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27210", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114862947252677444", "content": "", "creation_timestamp": "2025-07-16T12:38:04.075143Z"}, {"uuid": "75c3146a-64e3-4dcc-8cb4-984ff57c13ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27134", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114427698562006042", "content": "", "creation_timestamp": "2025-04-30T15:48:36.297442Z"}, {"uuid": "8d8b48ea-45f0-4909-9053-f6d7be65893b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27532", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo25ta434e2l", "content": "", "creation_timestamp": "2025-04-30T15:55:32.454067Z"}, {"uuid": "5e165bd4-3b91-4921-9277-61e5a9316667", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27463", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/168", "content": "", "creation_timestamp": "2025-05-27T18:50:05.000000Z"}, {"uuid": "fb49ebe2-93fa-4eb0-a452-edd4f588d4a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27531", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114637169259974567", "content": "", "creation_timestamp": "2025-06-06T15:39:45.212647Z"}, {"uuid": "6f7d3d04-ac83-4260-9e7a-7234bf0be001", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/mwyr.es/post/3lrw57lywmg2x", "content": "", "creation_timestamp": "2025-06-18T23:14:41.586859Z"}, {"uuid": "228d3fd6-d7a8-45e9-b9b8-36e63b1f9f60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27429", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0119", "content": "", "creation_timestamp": "2025-04-30T11:12:27.000000Z"}, {"uuid": "f9d0c541-85ec-4c2d-bbd8-0eb424a82890", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27134", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo27rtocch2h", "content": "", "creation_timestamp": "2025-04-30T16:30:32.984749Z"}, {"uuid": "ae4e3f58-ff7b-4242-83b0-fdcdb22a1392", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27131", "type": "seen", "source": "https://bsky.app/profile/lbtoday1.bsky.social/post/3lo2r3z2qqo23", "content": "", "creation_timestamp": "2025-04-30T21:40:27.902747Z"}, {"uuid": "71c61b6e-9ed5-4d54-b8b2-b8a50ef95fb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27611", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo2rxilxrt24", "content": "", "creation_timestamp": "2025-04-30T21:55:53.473381Z"}, {"uuid": "1d651d3b-fc6a-4b0e-849b-30dcb00bb904", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2759", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-268/", "content": "", "creation_timestamp": "2025-04-30T03:00:00.000000Z"}, {"uuid": "bd21e934-2b38-489c-a1ce-ec129f0fe784", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27480", "type": "seen", "source": "https://bsky.app/profile/technofeed.bsky.social/post/3lo3nsfuoqp2x", "content": "", "creation_timestamp": "2025-05-01T06:14:04.750321Z"}, {"uuid": "585deae5-44a3-4abe-8737-50d42e877195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27817", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lr6ozuh2lg2c", "content": "", "creation_timestamp": "2025-06-09T15:29:42.360515Z"}, {"uuid": "5c0766a5-2aca-44e9-a1d2-9fc239914582", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://aus.social/users/mwyres/statuses/114706905953436449", "content": "", "creation_timestamp": "2025-06-18T23:14:42.992473Z"}, {"uuid": "acc89129-0caf-4060-8228-55b930643edf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27038", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lqspc4qmy527", "content": "", "creation_timestamp": "2025-06-04T21:02:26.325038Z"}, {"uuid": "9c63a023-8dc7-4b1a-8458-4e27afa2b2c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27819", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lr6pctrjc42u", "content": "", "creation_timestamp": "2025-06-09T15:34:45.699698Z"}, {"uuid": "478b761f-dd25-47a5-944b-30864981c74c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-10)", "content": "", "creation_timestamp": "2025-06-10T00:00:00.000000Z"}, {"uuid": "30afabed-13be-4af6-91d2-a83ee7e2b0f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27689", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114674546048798396", "content": "", "creation_timestamp": "2025-06-13T06:05:09.616713Z"}, {"uuid": "40c0733b-60e9-4331-a571-398e232d244f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27461", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114787856061012885", "content": "", "creation_timestamp": "2025-07-03T06:21:23.347371Z"}, {"uuid": "b175796d-e629-467a-b25b-a5883a73bf7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27460", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114787856061012885", "content": "", "creation_timestamp": "2025-07-03T06:21:23.447611Z"}, {"uuid": "98769721-8a9b-4c7e-a064-118153886146", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27449", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114787856061012885", "content": "", "creation_timestamp": "2025-07-03T06:21:23.547062Z"}, {"uuid": "ab31dbf2-c183-4c79-9151-4bc92843dea6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27456", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114787856061012885", "content": "", "creation_timestamp": "2025-07-03T06:21:23.748851Z"}, {"uuid": "a1290f50-6a31-4534-aebf-652f93d91e73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27447", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114787856061012885", "content": "", "creation_timestamp": "2025-07-03T06:21:23.852832Z"}, {"uuid": "b7db378a-d79a-4d3d-91f4-dd740650668b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27448", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114787856061012885", "content": "", "creation_timestamp": "2025-07-03T06:21:23.956276Z"}, {"uuid": "67c10838-fba7-48f9-ac48-e8cc4196fc1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27458", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114787856061012885", "content": "", "creation_timestamp": "2025-07-03T06:21:24.057145Z"}, {"uuid": "34eeacfc-9927-4675-bccd-82a2af930cf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27450", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114787856061012885", "content": "", "creation_timestamp": "2025-07-03T06:21:24.191273Z"}, {"uuid": "db5443f5-983a-4c91-bcad-ddb8cf728136", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27457", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114787856061012885", "content": "", "creation_timestamp": "2025-07-03T06:21:24.390315Z"}, {"uuid": "d72728b2-753d-425a-b402-87fba0ef7c99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27451", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114787856061012885", "content": "", "creation_timestamp": "2025-07-03T06:21:24.580614Z"}, {"uuid": "ccbd3daa-6cc3-41d2-a60e-ed68a58a2c9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27453", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114787856061012885", "content": "", "creation_timestamp": "2025-07-03T06:21:24.675124Z"}, {"uuid": "f2fd7ea5-2901-4386-826c-592beb101c5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27452", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114787856061012885", "content": "", "creation_timestamp": "2025-07-03T06:21:24.768717Z"}, {"uuid": "6da33b98-6ae4-452b-8ce6-ec609d39c069", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27459", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114787856061012885", "content": "", "creation_timestamp": "2025-07-03T06:21:24.919429Z"}, {"uuid": "fef1975d-fb5f-41b9-b7ea-91889c6e32a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27454", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114787856061012885", "content": "", "creation_timestamp": "2025-07-03T06:21:25.112647Z"}, {"uuid": "2b200eda-5fcf-4abf-a27a-2fc358a0c603", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27455", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114787856061012885", "content": "", "creation_timestamp": "2025-07-03T06:21:25.206526Z"}, {"uuid": "9deb2718-f24f-4e03-9c64-f4e409bb4bc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo4qb4ltxu2j", "content": "", "creation_timestamp": "2025-05-01T16:30:45.050680Z"}, {"uuid": "22b56fc3-23a6-4e3e-8c5f-bdf5f4e5ed50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2774", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-282/", "content": "", "creation_timestamp": "2025-05-01T03:00:00.000000Z"}, {"uuid": "3d4c4029-40c2-48f2-a8a8-9b26f0c0d6b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27365", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo5q5aorbs24", "content": "", "creation_timestamp": "2025-05-02T02:01:15.325196Z"}, {"uuid": "d6b0ab53-a712-4c4f-95b7-82fe728ad420", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27460", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lt23lwyqz3d2", "content": "", "creation_timestamp": "2025-07-03T06:23:55.043812Z"}, {"uuid": "f1a18d0a-2a47-4ea0-8e0f-79f10577332c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27447", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lt23lwyqz3d2", "content": "", "creation_timestamp": "2025-07-03T06:23:55.436789Z"}, {"uuid": "0cd2846c-db4a-47b8-82b2-7afb4851c32d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27458", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lt23lwyqz3d2", "content": "", "creation_timestamp": "2025-07-03T06:23:55.634561Z"}, {"uuid": "3802ffb5-3f63-436d-a782-0d92d1f3424d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27461", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lt23lwyqz3d2", "content": "", "creation_timestamp": "2025-07-03T06:23:54.945658Z"}, {"uuid": "d12b5d60-6498-40b4-b18f-92c89cafe54f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27449", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lt23lwyqz3d2", "content": "", "creation_timestamp": "2025-07-03T06:23:55.144501Z"}, {"uuid": "bd305f4a-104e-401f-9aa6-17898e36ae5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27456", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lt23lwyqz3d2", "content": "", "creation_timestamp": "2025-07-03T06:23:55.339616Z"}, {"uuid": "aec7300c-9b08-4915-9c5f-30a6fe04416a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27448", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lt23lwyqz3d2", "content": "", "creation_timestamp": "2025-07-03T06:23:55.534683Z"}, {"uuid": "660536f4-2307-4379-9f3b-b707961754a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27450", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lt23lwyqz3d2", "content": "", "creation_timestamp": "2025-07-03T06:23:55.744990Z"}, {"uuid": "61a9837f-1288-4f88-94ac-086746988c77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27457", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lt23lwyqz3d2", "content": "", "creation_timestamp": "2025-07-03T06:23:55.941475Z"}, {"uuid": "c5fac201-d079-43f2-883e-a95cf5f74137", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3ls3igzduvq2n", "content": "", "creation_timestamp": "2025-06-21T02:19:00.361180Z"}, {"uuid": "03eb4504-7e73-4867-aa02-3b01b4bde7cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2796", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lq7blnon4m2e", "content": "", "creation_timestamp": "2025-05-28T03:36:34.874613Z"}, {"uuid": "d46cba56-0c1c-48de-a766-0ac6fa25efcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-25)", "content": "", "creation_timestamp": "2025-06-25T00:00:00.000000Z"}, {"uuid": "24c49a3c-57ee-4d58-b2ff-e2dcb20d2998", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-22)", "content": "", "creation_timestamp": "2025-05-22T00:00:00.000000Z"}, {"uuid": "a898dd2d-a8cc-443e-98e6-9e77ef6ea863", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27526", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lq7ctfaox62s", "content": "", "creation_timestamp": "2025-05-28T03:58:48.233861Z"}, {"uuid": "62638ef1-36ba-46c9-ac9f-9c4262b19c37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27528", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lq7d4ejslm2z", "content": "", "creation_timestamp": "2025-05-28T04:03:49.620282Z"}, {"uuid": "d98cb7ba-12e7-44b5-9076-faed79230f1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27151", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lrnjyzps3k2f", "content": "", "creation_timestamp": "2025-06-15T13:09:41.701742Z"}, {"uuid": "a2878d49-e0e4-4a3a-9861-50330adfd688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27218", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lsmjzavytn24", "content": "", "creation_timestamp": "2025-06-27T21:02:27.842468Z"}, {"uuid": "8c00016f-0c76-4654-a8d9-af91d639d12d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27522", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lq7dfe4y5w2e", "content": "", "creation_timestamp": "2025-05-28T04:08:51.075286Z"}, {"uuid": "6ccca6c7-2ba5-4a0f-a770-1b0ed9ece31f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27151", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lrnmygxmyn2s", "content": "", "creation_timestamp": "2025-06-15T14:03:04.689591Z"}, {"uuid": "2ad6a4ed-db4b-4fcb-acb2-8121966e29f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27820", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lo7tiuqd6c23", "content": "", "creation_timestamp": "2025-05-02T22:06:46.609505Z"}, {"uuid": "1dba945d-b478-4aff-b918-fb7000e7b0b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27038", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3lqpe4jzrec27", "content": "", "creation_timestamp": "2025-06-03T13:04:32.595613Z"}, {"uuid": "a6acf7a7-ff23-4a0d-a038-e40e9ebb1bd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27038", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3lqpe4obvsk27", "content": "", "creation_timestamp": "2025-06-03T13:04:33.317089Z"}, {"uuid": "3991c5d1-c9d9-4942-8c2d-785f345224bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27038", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3lqpe4obwrs27", "content": "", "creation_timestamp": "2025-06-03T13:04:34.023035Z"}, {"uuid": "1cc5208b-c3b5-4a60-8933-59e7b7bc6e22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2774", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3locqzuaxkk2q", "content": "", "creation_timestamp": "2025-05-04T02:00:33.599638Z"}, {"uuid": "df02584b-2539-4578-894c-25e0e84b169c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-2774", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lod3vf3qcs2r", "content": "", "creation_timestamp": "2025-05-04T05:14:56.183538Z"}, {"uuid": "8e5a2247-a50e-4273-92fb-8c663dcbb11e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27819", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/237", "content": "", "creation_timestamp": "2025-06-09T13:07:36.000000Z"}, {"uuid": "fa94f02c-13cf-41d7-8235-4f439e45b95a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27818", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/236", "content": "", "creation_timestamp": "2025-06-09T13:04:22.000000Z"}, {"uuid": "3059fcb3-991c-41eb-90dd-6f6a8367c788", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27817", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/235", "content": "", "creation_timestamp": "2025-06-09T13:00:36.000000Z"}, {"uuid": "c1d11125-c2f0-47a8-9e46-f92297d32d09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-12)", "content": "", "creation_timestamp": "2025-06-12T00:00:00.000000Z"}, {"uuid": "c667cdb8-4151-44d6-8531-f3083c887bb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrt7xmnbeu2k", "content": "", "creation_timestamp": "2025-06-17T19:25:55.448735Z"}, {"uuid": "f57b91a1-2a58-4019-8df2-0273acf2279a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrt7zpem3q2p", "content": "", "creation_timestamp": "2025-06-17T19:27:05.349139Z"}, {"uuid": "ba521b3a-7308-4e7e-b24e-391948a1a52d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrta3rfqpg22", "content": "", "creation_timestamp": "2025-06-17T19:28:14.598483Z"}, {"uuid": "e2a7d7ea-eec0-4630-b936-818458fee6a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27407", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3loelotrb422j", "content": "", "creation_timestamp": "2025-05-04T19:30:16.087747Z"}, {"uuid": "5a3044db-d6f6-4b32-a3b6-c93f0b52e087", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27407", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lofcjxpwjx2v", "content": "", "creation_timestamp": "2025-05-05T02:19:07.782205Z"}, {"uuid": "fc0c0f89-cc89-4069-be5b-5c361acb02af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2774", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lofcjxpwjx2v", "content": "", "creation_timestamp": "2025-05-05T02:19:07.867465Z"}, {"uuid": "35f92cf6-d997-48a2-8120-70cfbb47945e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2774", "type": "seen", "source": "https://bsky.app/profile/securestep9.bsky.social/post/3log2ocjqzc2r", "content": "", "creation_timestamp": "2025-05-05T09:31:05.968119Z"}, {"uuid": "d7b913be-b180-4388-a100-1b002c3b0a65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrta5tmwwv2p", "content": "", "creation_timestamp": "2025-06-17T19:29:24.393380Z"}, {"uuid": "cfbca5de-cc9b-48e6-b8fd-6c78ad9687f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/techit.bsky.social/post/3lrta72nwcv26", "content": "", "creation_timestamp": "2025-06-17T19:30:05.902917Z"}, {"uuid": "47a3138a-ef4e-47c5-936b-7238ae9648c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3lrwo5yws3j2c", "content": "", "creation_timestamp": "2025-06-19T04:18:01.831535Z"}, {"uuid": "76d18b66-e1f0-4c91-b63d-55bab9f086b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrta7vtgov2g", "content": "", "creation_timestamp": "2025-06-17T19:30:33.469962Z"}, {"uuid": "b64250da-1631-45b0-b78d-3f52f39cab0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtabybsqh22", "content": "", "creation_timestamp": "2025-06-17T19:31:43.092758Z"}, {"uuid": "0a5a3e9d-b89f-4119-977e-5a3126bafac6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27526", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq7rcayjrmc2", "content": "", "creation_timestamp": "2025-05-28T08:18:45.574472Z"}, {"uuid": "1e1571ca-887b-4278-aed1-3c6bd11fc00b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtae2caki2e", "content": "", "creation_timestamp": "2025-06-17T19:32:52.345576Z"}, {"uuid": "80164e8e-ccb8-4b2d-903b-85fbc127adcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27465", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lsvrw3oyo42k", "content": "", "creation_timestamp": "2025-07-01T13:17:42.481337Z"}, {"uuid": "8ded20d3-ee76-40c7-aa47-5f9a7c95a198", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27528", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq7rcbd42o42", "content": "", "creation_timestamp": "2025-05-28T08:18:46.127282Z"}, {"uuid": "71d35755-ee81-4e5a-a219-90aa304122f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtag4gr2q2u", "content": "", "creation_timestamp": "2025-06-17T19:34:01.618329Z"}, {"uuid": "c820dd6e-a1a5-4952-beda-6393bf5c9d8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27522", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq7rd4qgfbc2", "content": "", "creation_timestamp": "2025-05-28T08:18:47.056384Z"}, {"uuid": "04ec6626-2d0d-4ba1-99d8-4545b813f2fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtai6drd32w", "content": "", "creation_timestamp": "2025-06-17T19:35:10.726619Z"}, {"uuid": "2fa8be0e-b7a8-4835-a101-0d12bfa393e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtakatrrf2g", "content": "", "creation_timestamp": "2025-06-17T19:36:20.570545Z"}, {"uuid": "eacd6d70-1dee-4098-af2a-f02627df7579", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27920", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3logspxbc432r", "content": "", "creation_timestamp": "2025-05-05T16:41:29.012379Z"}, {"uuid": "9f23798b-81f7-4280-b9e8-441b42d145a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3loib2tellq2d", "content": "", "creation_timestamp": "2025-05-06T06:30:45.238562Z"}, {"uuid": "56267a51-c6ff-469b-bd1b-ada1b75ef55d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/guardingpearsof.bsky.social/post/3loibs3iosf2i", "content": "", "creation_timestamp": "2025-05-06T06:43:45.155439Z"}, {"uuid": "62ee0de6-6c9b-431d-95b7-8489389ed4cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3loict5lgrk2z", "content": "", "creation_timestamp": "2025-05-06T07:02:14.587929Z"}, {"uuid": "f004e199-b402-4922-b350-c0ee01313489", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/happygeek.bsky.social/post/3loiihk4q622q", "content": "", "creation_timestamp": "2025-05-06T08:43:09.385168Z"}, {"uuid": "c27b3783-3fed-4c6b-b5b2-a58d288841bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2766", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqxrf2ujit2s", "content": "", "creation_timestamp": "2025-06-06T21:23:07.501389Z"}, {"uuid": "33006029-72a5-4f09-bc57-267c6e9266d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtamcm6t32w", "content": "", "creation_timestamp": "2025-06-17T19:37:29.747837Z"}, {"uuid": "40cbe36e-8dab-469f-90fa-f4ee1954d7f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lrtany3ujl2q", "content": "", "creation_timestamp": "2025-06-17T19:38:26.284229Z"}, {"uuid": "69421966-0a3c-4b31-b10e-e0a28b133f81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtaoehtej2b", "content": "", "creation_timestamp": "2025-06-17T19:38:39.027030Z"}, {"uuid": "f984e5cf-e29f-496d-877a-44b596475234", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-02)", "content": "", "creation_timestamp": "2025-07-02T00:00:00.000000Z"}, {"uuid": "f188cecf-952f-4d4f-979b-f6830c887279", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtaqlvnoa2e", "content": "", "creation_timestamp": "2025-06-17T19:39:53.585691Z"}, {"uuid": "b518f5be-619c-41a4-a498-efccd2442243", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-27363", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3loignvpfy4c2", "content": "", "creation_timestamp": "2025-05-06T10:06:01.449991Z"}, {"uuid": "b31ba1dd-794a-4c3b-b613-18d40a0709a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loigykgr7kk2", "content": "", "creation_timestamp": "2025-05-06T10:06:29.671219Z"}, {"uuid": "f228f7eb-767e-4468-930d-4266d141bba6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtaqvvrjh2p", "content": "", "creation_timestamp": "2025-06-17T19:40:04.047447Z"}, {"uuid": "ed72b5f9-2ac3-4fd5-8a48-d2b2c634fe1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtargnt6n2i", "content": "", "creation_timestamp": "2025-06-17T19:40:21.737483Z"}, {"uuid": "7a920d9e-3ac4-4571-843d-200483d2bf78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtarsrew727", "content": "", "creation_timestamp": "2025-06-17T19:40:34.139752Z"}, {"uuid": "aeb76d8a-4837-4b09-861c-7fc4db958d93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtau535hc2j", "content": "", "creation_timestamp": "2025-06-17T19:41:51.955639Z"}, {"uuid": "f9a75b4d-05e5-46ce-8944-505521c4e0fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtas5vjbb26", "content": "", "creation_timestamp": "2025-06-17T19:40:45.690880Z"}, {"uuid": "667f9532-5c68-49ae-8c3e-b83289cb8260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtasiaxbh22", "content": "", "creation_timestamp": "2025-06-17T19:40:56.789130Z"}, {"uuid": "8c389280-8969-4bb8-b7f6-5d0fdd2b7843", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27241", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3loinx5lfv72r", "content": "", "creation_timestamp": "2025-05-06T10:21:21.940129Z"}, {"uuid": "62423d82-6234-4695-8b40-2c0268840956", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27248", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3loinx6hvhk2p", "content": "", "creation_timestamp": "2025-05-06T10:21:26.660525Z"}, {"uuid": "c34cb4a1-e796-4dba-a3b3-77158c884de7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27132", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3loinx6vi5n2t", "content": "", "creation_timestamp": "2025-05-06T10:21:28.977824Z"}, {"uuid": "24ccce41-328d-4d11-b16d-4aa90ebebb2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://infosec.exchange/users/tomcat/statuses/114460475904053331", "content": "", "creation_timestamp": "2025-05-06T10:44:18.199732Z"}, {"uuid": "afec7256-aeda-45d4-9820-4608d434e8d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3loiqaejgu42o", "content": "", "creation_timestamp": "2025-05-06T11:02:17.303862Z"}, {"uuid": "082dd4ef-5bd2-4932-bb7d-71b1a5541720", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/114460748943391624", "content": "", "creation_timestamp": "2025-05-06T11:53:44.409423Z"}, {"uuid": "deefa357-aa40-4926-b0d5-dafc56bb56cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3loit4ljrbc2g", "content": "", "creation_timestamp": "2025-05-06T11:53:51.704651Z"}, {"uuid": "68c872d0-2ce5-4dc8-8431-bdf061a84112", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/hack4career.com/post/3loitr3c35z2b", "content": "", "creation_timestamp": "2025-05-06T12:05:19.159817Z"}, {"uuid": "d880f9f4-b0f1-4acd-bbae-b744419efea9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://thehackernews.com/2025/05/google-fixes-actively-exploited-android.html", "content": "", "creation_timestamp": "2025-05-06T03:46:00.000000Z"}, {"uuid": "f10ada2e-07a4-4b5b-992d-13bbaa2a7482", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-27363", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114461166451723009", "content": "", "creation_timestamp": "2025-05-06T13:39:55.354295Z"}, {"uuid": "0ac87ef1-7a49-41af-b959-4987f5467f6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27889", "type": "seen", "source": "https://bsky.app/profile/mrtuxracer.bsky.social/post/3loizmahoe222", "content": "", "creation_timestamp": "2025-05-06T13:49:59.145661Z"}, {"uuid": "b2e72c1f-a3c9-45d6-997e-f642b4f949b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3loj2n74qz22c", "content": "", "creation_timestamp": "2025-05-06T14:08:25.407508Z"}, {"uuid": "6dcbe07c-04af-4f5f-96ea-5a9f4230a430", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/bypassblues.bsky.social/post/3loj76oaqpk2s", "content": "", "creation_timestamp": "2025-05-06T15:29:45.032314Z"}, {"uuid": "a37f60cd-f6d7-418d-a8eb-3dd272b97275", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27533", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lojb73h7i62v", "content": "", "creation_timestamp": "2025-05-06T16:05:47.125173Z"}, {"uuid": "86d199f6-281e-41d9-82a9-a7b9cccbc73d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lojfwczy5y2q", "content": "", "creation_timestamp": "2025-05-06T17:30:21.908622Z"}, {"uuid": "ed260582-8a7d-4a22-87f6-4ccb6ba2b7dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lojhtiouwm2o", "content": "", "creation_timestamp": "2025-05-06T18:04:34.719103Z"}, {"uuid": "70c24e66-023a-4f91-a396-8e818f4bf658", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-27363", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lojkqmkfxef2", "content": "", "creation_timestamp": "2025-05-06T18:58:34.579350Z"}, {"uuid": "9f1d0b6a-3e98-4644-a606-5a2715a06ce4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27533", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/105", "content": "", "creation_timestamp": "2025-05-06T13:39:27.000000Z"}, {"uuid": "75d15aef-81bb-4bcc-8651-468cdf2d1e23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/3954610", "content": "", "creation_timestamp": "2025-05-06T20:05:08.041360Z"}, {"uuid": "a297cce7-7ee8-47e4-8b54-daa6cac7fa37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lojrrae6mc26", "content": "", "creation_timestamp": "2025-05-06T21:02:19.352041Z"}, {"uuid": "bcd4dabe-5c96-43a8-a261-e778fba2a15e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/107", "content": "", "creation_timestamp": "2025-05-06T17:53:49.000000Z"}, {"uuid": "d7782eb7-969c-4a52-b591-65560c52a781", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtassusm42l", "content": "", "creation_timestamp": "2025-06-17T19:41:08.026854Z"}, {"uuid": "3769beb6-f927-4f45-a4a7-a8eac375dd11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/mwyr.es/post/3lojxtemhse2w", "content": "", "creation_timestamp": "2025-05-06T22:50:50.755429Z"}, {"uuid": "380dcea2-9188-4963-ab5e-6910d9746ff9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://aus.social/users/mwyres/statuses/114463332828939346", "content": "", "creation_timestamp": "2025-05-06T22:50:52.110350Z"}, {"uuid": "6a4ace36-5133-4d21-8832-e28ead81d356", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3lok5juqe432j", "content": "", "creation_timestamp": "2025-05-07T00:32:54.100146Z"}, {"uuid": "d106464f-7256-4366-8dcb-ebd4be080678", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3lokbz6za6324", "content": "", "creation_timestamp": "2025-05-07T01:53:03.557610Z"}, {"uuid": "0a4f993a-a069-478e-a4c7-ed4d42317543", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lokdekpiju2w", "content": "", "creation_timestamp": "2025-05-07T02:17:18.492379Z"}, {"uuid": "ce76907c-7913-4aa2-b73a-751d1331021b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/softfantw.bsky.social/post/3lokpzsuwos27", "content": "", "creation_timestamp": "2025-05-07T06:03:56.531800Z"}, {"uuid": "cff3c87a-778f-4fb1-8226-6027eddeab66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lokrsrku3k27", "content": "", "creation_timestamp": "2025-05-07T06:35:47.942934Z"}, {"uuid": "fb9d23b9-5ef5-4d18-994f-dc20bb745c19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/kaldata.bsky.social/post/3lokttw3pxb2v", "content": "", "creation_timestamp": "2025-05-07T07:12:14.518804Z"}, {"uuid": "12dc1341-4df7-426b-a3fd-9d16e7e2a991", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lokurcbi6k2t", "content": "", "creation_timestamp": "2025-05-07T07:28:39.528430Z"}, {"uuid": "123bf0f3-b0dd-4e09-abf4-ba6c4c7ba5ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lol4bx52nq2q", "content": "", "creation_timestamp": "2025-05-07T09:43:14.647436Z"}, {"uuid": "c052e333-2b76-4bea-8a5d-ae23e1081a87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtat5iw6t2w", "content": "", "creation_timestamp": "2025-06-17T19:41:18.899132Z"}, {"uuid": "f09b9300-91c8-4abd-a422-0a2737e9d34e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27134", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lroeg4jhrg2u", "content": "", "creation_timestamp": "2025-06-15T21:02:21.826209Z"}, {"uuid": "b65f73bb-6a1b-40d0-99c2-614b6bee1e26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27465", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lsvwhcmesb22", "content": "", "creation_timestamp": "2025-07-01T14:38:55.146104Z"}, {"uuid": "4429bb3e-28e5-4f0f-926e-2a803cb606f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27462", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3lqefammegc2j", "content": "", "creation_timestamp": "2025-05-30T04:25:21.832535Z"}, {"uuid": "6750c840-a142-470e-bcb8-ace13603fab7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27464", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3lqefammegc2j", "content": "", "creation_timestamp": "2025-05-30T04:25:22.006456Z"}, {"uuid": "565e2c87-74aa-4afb-b263-7c36438d0fb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtathjvoy2u", "content": "", "creation_timestamp": "2025-06-17T19:41:29.569903Z"}, {"uuid": "2595d5ac-6257-4389-bdd1-1a38213c324d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27463", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3lqefammegc2j", "content": "", "creation_timestamp": "2025-05-30T04:25:21.920038Z"}, {"uuid": "9bc23f55-c864-42c6-88a2-b58968d7f043", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtatrofhw2p", "content": "", "creation_timestamp": "2025-06-17T19:41:40.061063Z"}, {"uuid": "b1c50d55-f335-4e1a-9fb9-8ee140996d8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-06)", "content": "", "creation_timestamp": "2025-07-06T00:00:00.000000Z"}, {"uuid": "f54488dd-e084-49bc-aaac-3e145ebc94b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtaumimkr2b", "content": "", "creation_timestamp": "2025-06-17T19:42:08.466033Z"}, {"uuid": "db0d8ddf-b498-4f24-92ff-1368819fba7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-27363", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lol5bv2cva52", "content": "", "creation_timestamp": "2025-05-07T10:06:32.604989Z"}, {"uuid": "dd86003c-8f8a-45d8-b83d-c2464e78abc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3lol5qygzlz23", "content": "", "creation_timestamp": "2025-05-07T10:09:32.648113Z"}, {"uuid": "2363835e-7c9a-4598-8468-6347a6c90baa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27528", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lq7wbsfa6q2k", "content": "", "creation_timestamp": "2025-05-28T09:46:53.013618Z"}, {"uuid": "56d549af-bd87-4e1d-addf-ff0a973e17dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtavbo35f2i", "content": "", "creation_timestamp": "2025-06-17T19:42:30.377923Z"}, {"uuid": "0b5d3ed0-f1ec-4d8c-885b-f9a433261999", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27526", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lq7whrmwba2k", "content": "", "creation_timestamp": "2025-05-28T09:50:13.357074Z"}, {"uuid": "ccb6ca27-fb30-40cc-a2a8-1460d5ccb09a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtawdg6tz26", "content": "", "creation_timestamp": "2025-06-17T19:43:05.786686Z"}, {"uuid": "bff16325-3aa3-43b1-b0fc-2244cd1b1b57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27522", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lq7woikv4p2o", "content": "", "creation_timestamp": "2025-05-28T09:54:03.229869Z"}, {"uuid": "f440a83c-0596-49e9-82a6-a8918adb8d3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lrtawwbvir2f", "content": "", "creation_timestamp": "2025-06-17T19:43:26.159525Z"}, {"uuid": "ba5934bc-60ce-4c08-929f-69dc687df26b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3loldmnazyc2x", "content": "", "creation_timestamp": "2025-05-07T11:54:34.509934Z"}, {"uuid": "65859a0d-18e6-49a9-875d-cb662fd13fe3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lolf5yoads2x", "content": "", "creation_timestamp": "2025-05-07T12:22:06.231642Z"}, {"uuid": "27bcf4e5-6d53-4902-8e9c-47731b3e3f1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-27363", "type": "seen", "source": "https://bsky.app/profile/OpenSource.activitypub.awakari.com.ap.brid.gy/post/3lol7wpvoakg2", "content": "", "creation_timestamp": "2025-05-07T12:23:18.411887Z"}, {"uuid": "97f1701b-f0c8-4ef0-9f25-f0a0dbe76ac0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27533", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114466527798008796", "content": "", "creation_timestamp": "2025-05-07T12:23:22.987862Z"}, {"uuid": "b6d9b3fa-4b67-4554-97b7-2a884ec88144", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27533", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lolaamhepr52", "content": "", "creation_timestamp": "2025-05-07T12:23:32.026500Z"}, {"uuid": "3ad86dc7-bec9-49b1-a1d9-0187b068d5cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lolfpczbgm2f", "content": "", "creation_timestamp": "2025-05-07T12:31:47.592447Z"}, {"uuid": "f9f11956-f6cd-4dea-9161-8eeb0f66ec7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lolfqjnk3k2p", "content": "", "creation_timestamp": "2025-05-07T12:32:27.028601Z"}, {"uuid": "2478cbe7-4341-419b-a295-a154d0fad172", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0143", "content": "", "creation_timestamp": "2025-05-07T09:19:50.000000Z"}, {"uuid": "4ad03fed-c60a-418a-aa88-836de635e8aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-2775", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/114466967388160257", "content": "", "creation_timestamp": "2025-05-07T14:15:11.403522Z"}, {"uuid": "92de5e74-f2b4-4259-a33d-6f8a42c437d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/114466967388160257", "content": "", "creation_timestamp": "2025-05-07T14:15:11.519186Z"}, {"uuid": "ed22eb93-e527-452e-8172-d06bdd67fc49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2777", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/114466967388160257", "content": "", "creation_timestamp": "2025-05-07T14:15:11.651271Z"}, {"uuid": "756d5bf8-79e2-47c1-9943-d16164a439e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2778", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/114466967388160257", "content": "", "creation_timestamp": "2025-05-07T14:15:11.744895Z"}, {"uuid": "428ed309-2d03-4cd1-8ea8-d22394e51d08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lollj2iuyj2r", "content": "", "creation_timestamp": "2025-05-07T14:15:39.277212Z"}, {"uuid": "a82c3640-ba8c-4f3d-b02b-968672ac4012", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lolll3ln2k2p", "content": "", "creation_timestamp": "2025-05-07T14:16:50.518494Z"}, {"uuid": "e2d027a1-3f7a-4a71-9b52-aa7ae1bf218d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lolll3ln2k2p", "content": "", "creation_timestamp": "2025-05-07T14:16:50.619196Z"}, {"uuid": "71114729-c3b6-4d28-8e93-0a31c56478aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2777", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lolll3ln2k2p", "content": "", "creation_timestamp": "2025-05-07T14:16:50.714404Z"}, {"uuid": "e0d2b3af-5e23-4f87-9b01-933db006384f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2778", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lolll3ln2k2p", "content": "", "creation_timestamp": "2025-05-07T14:16:50.812711Z"}, {"uuid": "91aa6dbc-d268-4b36-81df-4afa75381d28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lolll4zukc2p", "content": "", "creation_timestamp": "2025-05-07T14:16:51.849672Z"}, {"uuid": "4f7c7ae2-3c6e-4d50-847b-aeb7d2a9c6c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lolll4zukc2p", "content": "", "creation_timestamp": "2025-05-07T14:16:51.947646Z"}, {"uuid": "bfaa421b-3028-44a7-a514-8e052ad078ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2777", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lolll4zukc2p", "content": "", "creation_timestamp": "2025-05-07T14:16:52.051852Z"}, {"uuid": "05e145b7-b6fd-42b1-a4fe-3b3a82d61ff3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2778", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lolll4zukc2p", "content": "", "creation_timestamp": "2025-05-07T14:16:52.146228Z"}, {"uuid": "58c5dbfc-defc-4822-9816-f0232f1bf4f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lolll4zwis2p", "content": "", "creation_timestamp": "2025-05-07T14:16:53.206137Z"}, {"uuid": "b4562d05-2702-4299-b59c-db375be4e6f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lolll4zwis2p", "content": "", "creation_timestamp": "2025-05-07T14:16:53.298521Z"}, {"uuid": "b38b8e9b-5b91-4465-9ef3-b41adf938f33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2777", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lolll4zwis2p", "content": "", "creation_timestamp": "2025-05-07T14:16:53.387152Z"}, {"uuid": "7a6bfc94-8ce8-4a24-9deb-34ea61a68c17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2778", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lolll4zwis2p", "content": "", "creation_timestamp": "2025-05-07T14:16:53.473837Z"}, {"uuid": "b9868adc-d7ee-426a-8d99-b37328198702", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lollwh3wyl2g", "content": "", "creation_timestamp": "2025-05-07T14:23:08.120854Z"}, {"uuid": "9dab1948-1478-4759-9e3f-11b52eab43f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114467330819942836", "content": "", "creation_timestamp": "2025-05-07T15:47:36.037440Z"}, {"uuid": "d05953d6-e050-4eda-83ee-1237e98e2558", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114467330819942836", "content": "", "creation_timestamp": "2025-05-07T15:47:36.130173Z"}, {"uuid": "86422732-ec39-4982-8aaf-35f16f214e7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2777", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114467330819942836", "content": "", "creation_timestamp": "2025-05-07T15:47:36.213732Z"}, {"uuid": "0332f36b-b21a-4bff-ae90-d254bdf6b425", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2778", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114467330819942836", "content": "", "creation_timestamp": "2025-05-07T15:47:36.276878Z"}, {"uuid": "cc014d90-1cda-459d-b16a-432d5f71fc62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "seen", "source": "https://thehackernews.com/2025/05/ottokit-wordpress-plugin-with-100k.html", "content": "", "creation_timestamp": "2025-05-07T11:44:00.000000Z"}, {"uuid": "d438cc17-bb32-4e13-a625-3d74a7d06784", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "https://thehackernews.com/2025/05/sysaid-patches-4-critical-flaws.html", "content": "", "creation_timestamp": "2025-05-07T09:31:00.000000Z"}, {"uuid": "7a6a3d64-56fd-4d95-bce6-a8926b6c7214", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "seen", "source": "https://thehackernews.com/2025/05/sysaid-patches-4-critical-flaws.html", "content": "", "creation_timestamp": "2025-05-07T09:31:00.000000Z"}, {"uuid": "2295c4fa-cc5d-4dbd-bb01-2bd5c75ef606", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2777", "type": "seen", "source": "https://thehackernews.com/2025/05/sysaid-patches-4-critical-flaws.html", "content": "", "creation_timestamp": "2025-05-07T09:31:00.000000Z"}, {"uuid": "db8f8828-6892-4947-a08c-845c0e186906", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/royans.bsky.social/post/3loluvz33no2i", "content": "", "creation_timestamp": "2025-05-07T17:03:57.926780Z"}, {"uuid": "33968aa3-d955-4601-b186-bc6e3086ebbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lolzp5hxhk2i", "content": "", "creation_timestamp": "2025-05-07T18:29:37.409525Z"}, {"uuid": "264e7552-5a31-4017-bff9-95aada0219bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lom4zarxgko2", "content": "", "creation_timestamp": "2025-05-07T19:32:26.395477Z"}, {"uuid": "5c25a901-1af8-4bb6-a1ee-214ee56e9ba1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3lom5hfmr4l23", "content": "", "creation_timestamp": "2025-05-07T19:36:50.648860Z"}, {"uuid": "e7e5345c-18bb-454b-985e-4cee213fd270", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "https://bsky.app/profile/sambowne.infosec.exchange.ap.brid.gy/post/3lom5dgyxlqg2", "content": "", "creation_timestamp": "2025-05-07T19:38:24.385173Z"}, {"uuid": "20f9bfad-19bb-4651-ad12-e5671381a039", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lom5nfcask2x", "content": "", "creation_timestamp": "2025-05-07T19:40:14.098188Z"}, {"uuid": "ce9faced-c2a5-4d3e-a0d8-b2b66e4f949c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2777", "type": "seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3lom6jcwn542q", "content": "", "creation_timestamp": "2025-05-07T19:55:48.565467Z"}, {"uuid": "ebffc258-0120-43c0-9842-b7519306385c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lomcacqxk52k", "content": "", "creation_timestamp": "2025-05-07T21:02:22.219928Z"}, {"uuid": "d06594d7-0243-4cac-8178-647ed9e5c2f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3lomkm62gks23", "content": "", "creation_timestamp": "2025-05-07T23:32:12.409580Z"}, {"uuid": "62c6c741-6ee4-4351-8826-fd3ff21cddb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3lomnunmcud2x", "content": "", "creation_timestamp": "2025-05-08T00:30:35.716011Z"}, {"uuid": "fb774431-af47-4a2e-a27f-53766748e4da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lomtv2durb2w", "content": "", "creation_timestamp": "2025-05-08T02:18:11.186625Z"}, {"uuid": "b4456b31-d433-4cb5-a1d1-ae2fbd3e0f0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lomtv2durb2w", "content": "", "creation_timestamp": "2025-05-08T02:18:11.276400Z"}, {"uuid": "3397a182-12f7-42b1-a64c-644b74cb7b72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lomvmvjfqs22", "content": "", "creation_timestamp": "2025-05-08T02:49:28.371494Z"}, {"uuid": "997c6d21-4225-4003-81c7-42aa0eaf5226", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lon7zgiu75j2", "content": "", "creation_timestamp": "2025-05-08T05:55:34.286730Z"}, {"uuid": "eb0e6b3f-e690-4bc7-b81c-13f501579f77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lonaiwdei22t", "content": "", "creation_timestamp": "2025-05-08T06:04:02.739116Z"}, {"uuid": "72404e5a-5832-431e-b8c6-7180b78df8f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/mrtechking.bsky.social/post/3longgeylzc2g", "content": "", "creation_timestamp": "2025-05-08T07:50:00.545922Z"}, {"uuid": "19f18d62-b3b2-47dc-a55a-1006ff6e84c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27533", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3loni5pueym2j", "content": "", "creation_timestamp": "2025-05-08T08:20:56.728849Z"}, {"uuid": "5c9d0ced-5855-4dc5-ac35-0b876fe05187", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lonm5bifdr2j", "content": "", "creation_timestamp": "2025-05-08T09:32:17.094865Z"}, {"uuid": "88e90626-fcad-49af-96f4-bbe1b2451971", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtay5jfue2l", "content": "", "creation_timestamp": "2025-06-17T19:44:07.328422Z"}, {"uuid": "cf71c13b-15ab-4b7f-a555-c4e731eeebac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27920", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lpmyc6ky2z2a", "content": "", "creation_timestamp": "2025-05-20T21:02:23.263783Z"}, {"uuid": "337fe4db-d640-46c7-b5cf-92b81bd6e2ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtb27n6wz2b", "content": "", "creation_timestamp": "2025-06-17T19:45:16.098097Z"}, {"uuid": "58735eb7-e4bb-4950-a4a0-2e05abe806d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27387", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lse64bfcrwy2", "content": "", "creation_timestamp": "2025-06-24T13:08:17.564657Z"}, {"uuid": "fc95cfec-1e60-4b28-b31a-972fc54a4b36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtb4ctjfk2j", "content": "", "creation_timestamp": "2025-06-17T19:46:26.725962Z"}, {"uuid": "4ad51806-ec62-4c83-835f-33faee2cab5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtb4nx2oq27", "content": "", "creation_timestamp": "2025-06-17T19:46:38.667459Z"}, {"uuid": "4639fc08-3d52-4920-bf70-d39351511cda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtb4z3q2v2g", "content": "", "creation_timestamp": "2025-06-17T19:46:49.859281Z"}, {"uuid": "e12f7c77-b9fc-4f2c-8b2a-54b7502ec048", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-27636", "type": "seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3lt2if2lwxt2r", "content": "", "creation_timestamp": "2025-07-03T10:10:26.369733Z"}, {"uuid": "03c6f6f3-0a9b-4dd8-8f07-64b90e04bb91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27038", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lqy26k4q5k23", "content": "", "creation_timestamp": "2025-06-07T00:00:36.606762Z"}, {"uuid": "036e7c37-12b5-4b4f-99b7-d51c31e87fe7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtb5cygtf2g", "content": "", "creation_timestamp": "2025-06-17T19:47:00.643213Z"}, {"uuid": "0f0142fe-86fb-41f6-85ec-2f486cc73558", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtb5npujm2l", "content": "", "creation_timestamp": "2025-06-17T19:47:11.939377Z"}, {"uuid": "0a438dc3-6d3e-4ac4-94e1-69f7a5fff2bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtb5y5yhv2g", "content": "", "creation_timestamp": "2025-06-17T19:47:22.756241Z"}, {"uuid": "13e855f6-20fe-48d1-8344-d8e500e7749c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27038", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lqy4veekys23", "content": "", "creation_timestamp": "2025-06-07T00:49:10.013469Z"}, {"uuid": "373eb218-4d54-4c83-8e4b-280f060f45a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtb6e4ygr22", "content": "", "creation_timestamp": "2025-06-17T19:47:35.265261Z"}, {"uuid": "f22065a8-8159-4c09-a60f-79ff3c1a97a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-2783", "type": "seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3lrtbd5z66s2r", "content": "", "creation_timestamp": "2025-06-17T19:50:16.619284Z"}, {"uuid": "ff5ec22c-e6d2-4b16-ae69-15c21e0fec9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-2783", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lrtb2z4dq2w2", "content": "", "creation_timestamp": "2025-06-17T19:47:46.520565Z"}, {"uuid": "ba86b0c7-d740-45e1-aed5-d6f103b22000", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtb6t624l2w", "content": "", "creation_timestamp": "2025-06-17T19:47:50.709647Z"}, {"uuid": "f70143dc-29fb-45d9-9aeb-dfd4b4690149", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtb7i4m762k", "content": "", "creation_timestamp": "2025-06-17T19:48:13.113350Z"}, {"uuid": "7123cc0a-8e21-4f36-9edb-54399725980c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtbajkjkc2j", "content": "", "creation_timestamp": "2025-06-17T19:48:47.840143Z"}, {"uuid": "c86c314f-5cf9-4b67-a630-ebed866b2ba6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-27)", "content": "", "creation_timestamp": "2025-05-27T00:00:00.000000Z"}, {"uuid": "586ffce8-4d0e-455d-836f-59bc5bd839b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27038", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lqy6remhz223", "content": "", "creation_timestamp": "2025-06-07T01:22:41.423231Z"}, {"uuid": "d388e337-3ced-4870-ae72-5aca4570e4ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtbcd77wx22", "content": "", "creation_timestamp": "2025-06-17T19:49:48.434606Z"}, {"uuid": "2b513aef-a3f4-4221-8f29-019d95bf7d24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtbefkg652i", "content": "", "creation_timestamp": "2025-06-17T19:50:57.835915Z"}, {"uuid": "0a0ab347-db88-4fe9-9382-b4e8d0c5ae16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-2783", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lrtbdltsjsm2", "content": "", "creation_timestamp": "2025-06-17T19:51:29.834574Z"}, {"uuid": "9c760562-5b5e-42fe-8035-c26623dcc883", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27465", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q3/0", "content": "", "creation_timestamp": "2025-07-01T10:03:58.000000Z"}, {"uuid": "98abf316-4062-491c-a20a-dcfd9d8c5ba7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2790", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-590/", "content": "", "creation_timestamp": "2025-07-11T03:00:00.000000Z"}, {"uuid": "2d3eb816-773a-413a-8bce-e57b5c2bf544", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lonnead4od42", "content": "", "creation_timestamp": "2025-05-08T11:28:44.287300Z"}, {"uuid": "35cbb05b-5c7e-44ff-98b4-2e8f754f4eb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lontctnpqsq2", "content": "", "creation_timestamp": "2025-05-08T11:41:40.982324Z"}, {"uuid": "bc6b812e-9062-4076-899e-ea1ca3958b4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/114472197786505302", "content": "", "creation_timestamp": "2025-05-08T12:25:23.597934Z"}, {"uuid": "8cd7f091-75f6-4fa3-afc1-42de330a5ebf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/114472197786505302", "content": "", "creation_timestamp": "2025-05-08T12:25:23.681165Z"}, {"uuid": "9f650c4e-43f6-4fa2-8b5d-50d40dc5fb13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2777", "type": "seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/114472197786505302", "content": "", "creation_timestamp": "2025-05-08T12:25:23.761880Z"}, {"uuid": "51f08b81-b705-40b1-a8e2-bc490430619c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2778", "type": "seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/114472197786505302", "content": "", "creation_timestamp": "2025-05-08T12:25:23.841009Z"}, {"uuid": "858b7167-62ff-4ad1-ba8a-971a31808aca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lonw2n7ejzj2", "content": "", "creation_timestamp": "2025-05-08T12:30:11.753838Z"}, {"uuid": "f7359e17-cff9-403b-99fe-bb649824b62f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27533", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lonw6ea6dn23", "content": "", "creation_timestamp": "2025-05-08T12:31:53.776898Z"}, {"uuid": "f8e5c8a7-9250-4d1d-b33b-51e6223fa71c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lonwkr6huu2p", "content": "", "creation_timestamp": "2025-05-08T12:38:47.651830Z"}, {"uuid": "11420e0a-7dca-4fbf-a1e6-c0cae8c0ce89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lonxbkqr6c2t", "content": "", "creation_timestamp": "2025-05-08T12:51:32.418420Z"}, {"uuid": "d013411a-b4eb-4258-aba2-cb477b65c3ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27610", "type": "seen", "source": "https://bsky.app/profile/brideoflinux.bsky.social/post/3loodjeoa7z25", "content": "", "creation_timestamp": "2025-05-08T16:30:38.586360Z"}, {"uuid": "464626fb-ca53-4a50-8d1f-562d9308243c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27695", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3looojr5xpch2", "content": "", "creation_timestamp": "2025-05-08T19:48:25.486171Z"}, {"uuid": "b01bbfb4-a334-434b-bd89-57febaacc9be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-2783", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lrtbe72723w2", "content": "", "creation_timestamp": "2025-06-17T19:51:31.584393Z"}, {"uuid": "bfb99431-a756-4044-a1dc-d45bedb96880", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3looreefyxfb2", "content": "", "creation_timestamp": "2025-05-08T21:13:50.750504Z"}, {"uuid": "f03d9615-18a0-41cb-9b2a-f7151e3656a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27695", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3looxq22syp2n", "content": "", "creation_timestamp": "2025-05-08T22:32:17.668560Z"}, {"uuid": "e8fb3022-ef0e-4526-b389-58473f4565a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtbgige3a27", "content": "", "creation_timestamp": "2025-06-17T19:52:08.538610Z"}, {"uuid": "1a925312-6631-40c3-97aa-ae411de05f11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27522", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/171", "content": "", "creation_timestamp": "2025-05-28T01:35:05.000000Z"}, {"uuid": "fbafd334-dd96-408d-b2f3-c34b1f2c35e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtbikp34z2x", "content": "", "creation_timestamp": "2025-06-17T19:53:17.651852Z"}, {"uuid": "7c91c7a3-9148-40ad-ba76-45e17c3a2da7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27720", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loozcq6f5gh2", "content": "", "creation_timestamp": "2025-05-08T23:16:42.679133Z"}, {"uuid": "5013ad4c-7c76-470b-8899-05b6b5dbbe02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3lop4cx2abm2t", "content": "", "creation_timestamp": "2025-05-08T23:54:26.721503Z"}, {"uuid": "f6aef51e-1ff4-4baf-96ae-8a6ebb7a3c03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3lopex56bmo25", "content": "", "creation_timestamp": "2025-05-09T02:28:54.037392Z"}, {"uuid": "78f9ee3d-451e-4287-ba98-8c2c0a86a10e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3loprsu4c3g24", "content": "", "creation_timestamp": "2025-05-09T06:19:08.983469Z"}, {"uuid": "45bf03cb-0047-4d85-ba07-38c97167bc7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27610", "type": "seen", "source": "https://bsky.app/profile/derdreschi84.bsky.social/post/3lopzd6o5tk25", "content": "", "creation_timestamp": "2025-05-09T08:33:26.843376Z"}, {"uuid": "cda5b413-653a-4633-9632-4f76f056f9b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27038", "type": "seen", "source": "https://threatintel.cc/2025/06/03/qualcomm-fixes-three-adreno-gpu.html", "content": "", "creation_timestamp": "2025-06-03T10:01:25.000000Z"}, {"uuid": "882c7d08-f018-43ce-b8a9-12cf4064b34d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtbknf64u2l", "content": "", "creation_timestamp": "2025-06-17T19:54:27.509801Z"}, {"uuid": "ad7e5b25-36f8-4b80-8582-752dd10349b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtbqluihv2g", "content": "", "creation_timestamp": "2025-06-17T19:57:47.524363Z"}, {"uuid": "a799759d-1188-4ee8-948f-7f12c311dd73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtbqtpwmh2p", "content": "", "creation_timestamp": "2025-06-17T19:57:55.373923Z"}, {"uuid": "98ac7df2-4881-4ce3-8bb0-2a3b21cc8ada", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtbr5l4bq2p", "content": "", "creation_timestamp": "2025-06-17T19:58:05.566126Z"}, {"uuid": "d8427835-4d7f-4833-a76f-9664b8396e73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtbrrvmoq2p", "content": "", "creation_timestamp": "2025-06-17T19:58:27.284243Z"}, {"uuid": "1e24d3b7-6382-4081-8ac6-2b17df9adb48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtbri74cc22", "content": "", "creation_timestamp": "2025-06-17T19:58:17.181060Z"}, {"uuid": "2afbc05e-c9f2-4739-83ec-7c1072a098a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtbs4ysb52i", "content": "", "creation_timestamp": "2025-06-17T19:58:39.210262Z"}, {"uuid": "ed9805b8-d0c0-4010-ae92-bdfe30186fa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtbsx4bcf2g", "content": "", "creation_timestamp": "2025-06-17T19:59:06.912423Z"}, {"uuid": "327ebc09-d2d6-44fb-835b-b85414a52984", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtbtlxgfp22", "content": "", "creation_timestamp": "2025-06-17T19:59:27.913065Z"}, {"uuid": "88621e7c-974f-41b2-9392-1d71c9037fa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3lrtbunjodz2b", "content": "", "creation_timestamp": "2025-06-17T20:00:03.000265Z"}, {"uuid": "8280fd76-0cb8-45c4-a2a7-06cdbac6deef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/hack4career.com/post/3loqfq2ze4y2t", "content": "", "creation_timestamp": "2025-05-09T12:15:31.142711Z"}, {"uuid": "5788efdd-c607-46b4-a54a-dd7ff6f47a49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27533", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3loqkfpw5rp2o", "content": "", "creation_timestamp": "2025-05-09T13:39:12.431861Z"}, {"uuid": "eee283bb-3331-4a86-8a75-2991cbe17308", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/114478983375670362", "content": "", "creation_timestamp": "2025-05-09T17:11:04.843835Z"}, {"uuid": "99e53d61-2841-4310-accc-7a00d13d13ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3lpnmpgkukc2t", "content": "", "creation_timestamp": "2025-05-21T03:07:37.446789Z"}, {"uuid": "b20ccacb-975b-4c5f-8262-99ff08967aad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27446", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q3/8", "content": "", "creation_timestamp": "2025-07-07T07:49:08.000000Z"}, {"uuid": "f0b5ab5b-bd0e-4b22-b069-5c6e03a3d50d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-08)", "content": "", "creation_timestamp": "2025-07-08T00:00:00.000000Z"}, {"uuid": "be4982d7-8499-40c6-93b3-132da5135fe3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3losnmspjjf2y", "content": "", "creation_timestamp": "2025-05-10T09:42:10.842490Z"}, {"uuid": "b9405aa3-cc11-4797-9bf0-b9d81454b7ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27566", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lpnmwf7x6k24", "content": "", "creation_timestamp": "2025-05-21T03:11:31.409334Z"}, {"uuid": "78177b48-27b4-4330-885b-bf1fdc57c899", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27446", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3ltekiqfhyd2d", "content": "", "creation_timestamp": "2025-07-07T10:14:54.332305Z"}, {"uuid": "93afd6c6-e8e3-4c7c-860b-63777d148638", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27528", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/172", "content": "", "creation_timestamp": "2025-05-28T01:38:24.000000Z"}, {"uuid": "99e5d695-9fbc-45d9-99cf-149e52fd4e7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27526", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/170", "content": "", "creation_timestamp": "2025-05-28T01:31:55.000000Z"}, {"uuid": "241f60f0-dcea-43af-a13f-91df04f9a7cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-2775.yaml", "content": "", "creation_timestamp": "2025-05-10T14:15:02.000000Z"}, {"uuid": "b2fee7eb-dc8a-4391-80e6-72fd5ab775ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-2776.yaml", "content": "", "creation_timestamp": "2025-05-10T14:15:02.000000Z"}, {"uuid": "b0aab9e6-7a0a-4698-9cb1-f4cbe038415b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2777", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-2777.yaml", "content": "", "creation_timestamp": "2025-05-10T14:15:02.000000Z"}, {"uuid": "5ef8cf1f-5f9a-4a31-8733-82b8f438f1de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lottmvote626", "content": "", "creation_timestamp": "2025-05-10T21:02:17.097065Z"}, {"uuid": "f53be3d4-3c27-497d-bae6-20b687d14a4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27533", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lottmvrbgk2y", "content": "", "creation_timestamp": "2025-05-10T21:02:17.665682Z"}, {"uuid": "1d1491ab-8be1-4efd-ba47-6919107a64c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-06)", "content": "", "creation_timestamp": "2025-06-06T00:00:00.000000Z"}, {"uuid": "e4e86bef-7cd1-4295-a21f-e781bb98b75c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/top10vpn.bsky.social/post/3lov5zybqux2l", "content": "", "creation_timestamp": "2025-05-11T09:41:12.477165Z"}, {"uuid": "bcc372a5-0eff-43b2-999b-a1e4b9366ed7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27828", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsekbeanrx2m", "content": "", "creation_timestamp": "2025-06-24T16:45:35.126686Z"}, {"uuid": "6f6ab605-d34d-4fd5-b5ef-b402de1ddf1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27210", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lu335chwpw26", "content": "", "creation_timestamp": "2025-07-16T09:11:19.081545Z"}, {"uuid": "f1a88999-9c32-4559-bf4c-fec53493f689", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3lovh6xdyp42r", "content": "", "creation_timestamp": "2025-05-11T12:25:04.271046Z"}, {"uuid": "70dda158-0c8b-422a-8216-fab1affd5f6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27533", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lowe3u7klc2w", "content": "", "creation_timestamp": "2025-05-11T21:02:18.898995Z"}, {"uuid": "e3ad21bc-a327-4a03-9c8c-4cb7cd51e1b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lowe3uc5lk2w", "content": "", "creation_timestamp": "2025-05-11T21:02:19.475882Z"}, {"uuid": "bebdbd6c-4c2c-4556-950e-16cc8d0e2aae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lowe3uenfd2r", "content": "", "creation_timestamp": "2025-05-11T21:02:20.092538Z"}, {"uuid": "9cc53bc9-40d9-402e-8018-a26b132b4311", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2777", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lowe3uhbet2r", "content": "", "creation_timestamp": "2025-05-11T21:02:20.695579Z"}, {"uuid": "d6114148-2cd2-4c93-b050-32e8828b11bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-27)", "content": "", "creation_timestamp": "2025-06-27T00:00:00.000000Z"}, {"uuid": "6104519b-bfed-40e5-97ea-057b19dd2ab8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27038", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/4142670", "content": "", "creation_timestamp": "2025-06-03T17:38:09.080388Z"}, {"uuid": "df9e2803-33ba-4581-834b-ac88c584dda8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-20)", "content": "", "creation_timestamp": "2025-05-20T00:00:00.000000Z"}, {"uuid": "81203b61-5336-4159-8473-c975216b4310", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-15)", "content": "", "creation_timestamp": "2025-06-15T00:00:00.000000Z"}, {"uuid": "567422f7-d287-41ce-a1f9-398e9925ac1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27533", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3loy3uquqi226", "content": "", "creation_timestamp": "2025-05-12T13:40:30.764535Z"}, {"uuid": "0fedf479-e5b7-4c79-b4ec-605a73bfde2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27533", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3loy3urvs3s26", "content": "", "creation_timestamp": "2025-05-12T13:40:31.302381Z"}, {"uuid": "2f14c08a-911f-40b2-a4a2-b3db25c7cf1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27696", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3loyh66t75c2t", "content": "", "creation_timestamp": "2025-05-12T17:02:36.350285Z"}, {"uuid": "68380d94-f706-4842-a19a-141524548db6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27696", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/119", "content": "", "creation_timestamp": "2025-05-12T14:34:57.000000Z"}, {"uuid": "5f9fafc4-e8a7-4dc6-811c-52522e7ba9cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27920", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3loyplq2oy62w", "content": "", "creation_timestamp": "2025-05-12T19:33:20.089911Z"}, {"uuid": "b2ae3119-d537-41d5-a259-33a0404701b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27920", "type": "seen", "source": "https://bsky.app/profile/yokoi.bsky.social/post/3loyyxzreos2e", "content": "", "creation_timestamp": "2025-05-12T22:21:19.429252Z"}, {"uuid": "7d028d8c-8a0b-409d-98f6-73bccb984c6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/newsnexttech.bsky.social/post/3lrtgyj62ra2e", "content": "", "creation_timestamp": "2025-06-17T21:31:42.134956Z"}, {"uuid": "1a61d58c-898c-40d3-ae78-72a757d86a23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-04)", "content": "", "creation_timestamp": "2025-07-04T00:00:00.000000Z"}, {"uuid": "25f669e9-564d-4e76-a3e5-93ce3d2006e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27920", "type": "seen", "source": "https://bsky.app/profile/stringsvsatoms.bsky.social/post/3lozq3x43lk2i", "content": "", "creation_timestamp": "2025-05-13T05:15:06.514944Z"}, {"uuid": "ae5186eb-bbcf-4135-ab38-99f6e2e60040", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27920", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lozzh2lpaf2h", "content": "", "creation_timestamp": "2025-05-13T08:02:21.211860Z"}, {"uuid": "efa55d62-6e39-4127-b317-cd43713b9544", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27921", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lozzh2lpaf2h", "content": "", "creation_timestamp": "2025-05-13T08:02:21.302207Z"}, {"uuid": "04ac702a-925a-4d0a-8b86-423a6a2d8704", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27920", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lp246c4wu52e", "content": "", "creation_timestamp": "2025-05-13T08:51:07.541020Z"}, {"uuid": "dfa4f397-9bb9-4166-9dd2-65b8e2e1b487", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27920", "type": "seen", "source": "https://bsky.app/profile/virusbtn.bsky.social/post/3lp25sp4uuc2j", "content": "", "creation_timestamp": "2025-05-13T09:20:29.745862Z"}, {"uuid": "6e92812e-10bf-4149-b17e-d501d1e51b2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-04)", "content": "", "creation_timestamp": "2025-06-04T00:00:00.000000Z"}, {"uuid": "50fcd2b5-416f-4e2d-9cd7-324e3dba093f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-29)", "content": "", "creation_timestamp": "2025-05-29T00:00:00.000000Z"}, {"uuid": "8311e55b-a6bf-4448-b6cc-b3749841f005", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-27636", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114789378245748413", "content": "", "creation_timestamp": "2025-07-03T12:48:30.197244Z"}, {"uuid": "6058843e-98f4-4cec-8aa9-713b1c655f47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lrtj3kbsfiv2", "content": "", "creation_timestamp": "2025-06-17T22:12:10.305315Z"}, {"uuid": "f34d15a8-46d2-44cc-917e-d73a62aec3cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2760", "type": "seen", "source": "https://bsky.app/profile/teemutiainen.bsky.social/post/3lqmebk3j3g2x", "content": "", "creation_timestamp": "2025-06-02T08:29:13.966015Z"}, {"uuid": "e00add68-7bde-46e7-bca0-552a34b4ba5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2761", "type": "seen", "source": "https://bsky.app/profile/teemutiainen.bsky.social/post/3lqmebk3j3g2x", "content": "", "creation_timestamp": "2025-06-02T08:29:14.068833Z"}, {"uuid": "71e756ea-2cfd-4a0e-a9ab-22b63685d12b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ls5tpstkhc25", "content": "", "creation_timestamp": "2025-06-22T00:46:09.313639Z"}, {"uuid": "bf46fcd4-a116-4530-801b-63e7bcf3ae3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27920", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lp2ehdmmbf2p", "content": "", "creation_timestamp": "2025-05-13T11:19:22.010846Z"}, {"uuid": "9789b5e9-c7b2-4273-9b76-763dbf556470", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27920", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-47e8df00-879faa5b2ea09852", "content": "", "creation_timestamp": "2025-05-13T14:46:13.486971Z"}, {"uuid": "e7f8e53b-b0c3-4938-8123-de215742f4a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27921", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-47e8df00-879faa5b2ea09852", "content": "", "creation_timestamp": "2025-05-13T14:46:13.581885Z"}, {"uuid": "aa74bd9c-cf0a-4c08-bcf1-31cbb56ecce7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27920", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lp2v4o3c4426", "content": "", "creation_timestamp": "2025-05-13T16:17:37.114558Z"}, {"uuid": "f8696f98-29c2-4240-9615-2f8bd3965421", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27920", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lp33bw5cxz26", "content": "", "creation_timestamp": "2025-05-13T18:07:55.099596Z"}, {"uuid": "10065b1f-9188-4811-a302-657ef7fe2e4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27197", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp3e6lqfdi2t", "content": "", "creation_timestamp": "2025-05-13T20:47:07.720071Z"}, {"uuid": "bab13baa-7970-4118-b308-ad5b8e7a4682", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27920", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lp3ezqzvhe26", "content": "", "creation_timestamp": "2025-05-13T21:02:22.327601Z"}, {"uuid": "fa47afcd-b812-4051-b88d-b9335dc4a4d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27613", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q3/13", "content": "", "creation_timestamp": "2025-07-08T15:11:31.000000Z"}, {"uuid": "88815fbd-a047-476a-9e8a-f993aa6808e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-274886", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0156", "content": "", "creation_timestamp": "2025-05-13T17:10:10.000000Z"}, {"uuid": "f160ca16-6109-42fb-91d6-e07ec89cab9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27614", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q3/13", "content": "", "creation_timestamp": "2025-07-08T15:11:31.000000Z"}, {"uuid": "c501c711-684e-44a2-b673-136e533269fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27505", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ltxbwwatkv2p", "content": "", "creation_timestamp": "2025-07-14T21:02:22.294124Z"}, {"uuid": "4908b871-1073-4cbf-8901-fda15bf566ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27522", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114585365516413568", "content": "", "creation_timestamp": "2025-05-28T12:05:22.573008Z"}, {"uuid": "edaec4c7-d76a-4a24-ab33-34999f8371ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27526", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114585365516413568", "content": "", "creation_timestamp": "2025-05-28T12:05:22.648137Z"}, {"uuid": "b39d0b33-91eb-477d-b62e-f1e3ea5e2628", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27528", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114585365516413568", "content": "", "creation_timestamp": "2025-05-28T12:05:22.713933Z"}, {"uuid": "69fc76cf-437e-487b-9543-5f737979a028", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27488", "type": "seen", "source": "https://www.thezdi.com/blog/2025/5/13/the-may-2025-security-update-review", "content": "", "creation_timestamp": "2025-05-13T16:27:02.000000Z"}, {"uuid": "def152ca-4e82-4190-ac7a-24b6308175ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-2783", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lrtpluhdbaw2", "content": "", "creation_timestamp": "2025-06-18T00:06:24.586300Z"}, {"uuid": "9dabbc6d-463f-4035-b70d-3a2236024de6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27889", "type": "seen", "source": "https://bsky.app/profile/rcesecurity.com/post/3lt2ytb5zbc2o", "content": "", "creation_timestamp": "2025-07-03T15:04:42.660748Z"}, {"uuid": "d42d2472-519b-4b28-8013-7dc989bdffd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27818", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lralw3worx2e", "content": "", "creation_timestamp": "2025-06-10T09:39:14.272086Z"}, {"uuid": "1c27c878-d9ef-4fe2-bbb3-b654e00ca3c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27468", "type": "seen", "source": "https://www.thezdi.com/blog/2025/5/13/the-may-2025-security-update-review", "content": "", "creation_timestamp": "2025-05-13T16:27:02.000000Z"}, {"uuid": "f51282f3-b18f-4f18-a98c-15f02b42353e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27613", "type": "seen", "source": "https://github.blog/open-source/git/git-security-vulnerabilities-announced-6/", "content": "", "creation_timestamp": "2025-07-08T15:02:11.000000Z"}, {"uuid": "84abfda7-5fe6-4f5a-a96f-019afc188448", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27819", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lramhysusi2p", "content": "", "creation_timestamp": "2025-06-10T09:49:14.731523Z"}, {"uuid": "9bbe4516-eda3-4ce2-96ab-709fd3fcec17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27614", "type": "seen", "source": "https://github.blog/open-source/git/git-security-vulnerabilities-announced-6/", "content": "", "creation_timestamp": "2025-07-08T15:02:11.000000Z"}, {"uuid": "52a754a2-3fc0-4e35-940f-338483c9ae98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27218", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lsjhgrruev2h", "content": "", "creation_timestamp": "2025-06-26T15:38:15.220591Z"}, {"uuid": "bc8eb4cd-534c-4f70-af61-32d8c15b5985", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27817", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lramqxav3r2c", "content": "", "creation_timestamp": "2025-06-10T09:54:15.137808Z"}, {"uuid": "a6b00d41-5693-4248-ade7-3f8e327a5714", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27091", "type": "seen", "source": "https://gist.github.com/EbonJaeger/94d6b11fee980a997a2d1e6007418f90", "content": "", "creation_timestamp": "2025-06-13T18:04:24.000000Z"}, {"uuid": "17afd6c3-b2ea-48e9-b543-8939f4add2a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27889", "type": "seen", "source": "https://bsky.app/profile/mrtuxracer.bsky.social/post/3lt2zf4xht22o", "content": "", "creation_timestamp": "2025-07-03T15:14:42.477442Z"}, {"uuid": "8c6681cf-a5e1-46dd-9aaa-b5025bd40516", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://thehackernews.com/2025/06/google-chrome-zero-day-cve-2025-2783.html", "content": "", "creation_timestamp": "2025-06-17T17:16:00.000000Z"}, {"uuid": "3569a3b6-0643-40a4-ae54-0d3c78d8ba89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27532", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114692656897305175", "content": "", "creation_timestamp": "2025-06-16T10:50:59.963782Z"}, {"uuid": "336ab2df-bf73-46eb-8e4c-dd85558f4a2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27920", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lp3ya73k7pf2", "content": "", "creation_timestamp": "2025-05-14T02:46:27.898137Z"}, {"uuid": "7ded1724-0ce7-4ba0-bc20-77447440c8a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3lp444plv3z2a", "content": "", "creation_timestamp": "2025-05-14T03:55:34.398142Z"}, {"uuid": "f313bd3f-5865-4908-b0c0-848a05eee673", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-27007.yaml", "content": "", "creation_timestamp": "2025-05-13T10:08:41.000000Z"}, {"uuid": "dcc50341-67d9-4df7-b03b-7dd69758ce29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27532", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lrpsqczhca52", "content": "", "creation_timestamp": "2025-06-16T10:51:22.732496Z"}, {"uuid": "166f6f54-89cd-44d1-8589-71bfd3bdbf50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27461", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lt2zuerr6b2o", "content": "", "creation_timestamp": "2025-07-03T15:23:13.448816Z"}, {"uuid": "c9f90220-6f8e-4905-93c7-955b0457be64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27459", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lt325dafdz2r", "content": "", "creation_timestamp": "2025-07-03T15:28:14.069212Z"}, {"uuid": "0ddb732e-55a0-4f6d-888e-8c82e4f35609", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-09)", "content": "", "creation_timestamp": "2025-06-09T00:00:00.000000Z"}, {"uuid": "1de506d6-c07b-41d7-b3fa-6b84e36e1f3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27522", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqf5tj4pnoe2", "content": "", "creation_timestamp": "2025-05-30T11:45:33.451670Z"}, {"uuid": "f10dcc84-caea-4488-a104-9e3abe300e94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27614", "type": "seen", "source": "https://www.thezdi.com/blog/2025/7/8/the-july-2025-security-update-review", "content": "", "creation_timestamp": "2025-07-08T15:56:31.000000Z"}, {"uuid": "905a669b-0ae7-43fd-881c-68345a4f7cc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://unit42.paloaltonetworks.com/apache-cve-2025-24813-cve-2025-27636-cve-2025-29891/", "content": "", "creation_timestamp": "2025-07-03T08:00:03.000000Z"}, {"uuid": "a6038b86-4d04-460a-97e3-a803535f50e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27151", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3ltexanaygc2q", "content": "", "creation_timestamp": "2025-07-07T14:03:03.802913Z"}, {"uuid": "a43aedd6-7da4-4a2c-8e62-004048bcd135", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27920", "type": "seen", "source": "https://bsky.app/profile/insightsintothings.com/post/3lp5gmchuxs2t", "content": "", "creation_timestamp": "2025-05-14T16:35:56.399053Z"}, {"uuid": "6ec93a4e-76b3-469f-8cc7-834d0a81fdab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lp5vionrhf2l", "content": "", "creation_timestamp": "2025-05-14T21:02:26.862884Z"}, {"uuid": "eac025d7-1af6-40b5-86bb-3ac1a0ead72c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27891", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp63whpfze2t", "content": "", "creation_timestamp": "2025-05-14T22:57:27.195554Z"}, {"uuid": "6cb8dc53-d348-4273-9731-8af6e4c7ea13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27920", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lp6brsb3hi2c", "content": "", "creation_timestamp": "2025-05-15T00:42:10.767562Z"}, {"uuid": "df28abbf-b545-4415-bf75-c6b16b1d8ec7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27523", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp743gygko2l", "content": "", "creation_timestamp": "2025-05-15T08:32:50.570742Z"}, {"uuid": "2d1d87bf-7239-4bb4-a88a-abe8ee21b868", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27038", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lqq6swi63k2u", "content": "", "creation_timestamp": "2025-06-03T21:02:14.556427Z"}, {"uuid": "d5fc2f2e-8b79-4b85-a974-829c4e234369", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-2783", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lrxyr26nnv2w", "content": "", "creation_timestamp": "2025-06-19T17:00:17.912212Z"}, {"uuid": "ecb71c4b-89ad-41f4-a200-e8eee8145f40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27524", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp7ehvuujh24", "content": "", "creation_timestamp": "2025-05-15T11:02:58.805460Z"}, {"uuid": "685d2323-fe41-4dca-9ef7-231787adf4c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27525", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp7ehwgfks2h", "content": "", "creation_timestamp": "2025-05-15T11:03:00.658246Z"}, {"uuid": "f957c437-2b2d-405c-9ff6-e19d238ffc29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-21)", "content": "", "creation_timestamp": "2025-06-21T00:00:00.000000Z"}, {"uuid": "acff8c3c-b2ca-4d04-98c0-b187de17aa01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-27522", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lqfae7vzxxc2", "content": "", "creation_timestamp": "2025-05-30T12:30:42.973847Z"}, {"uuid": "5b9f12ba-309f-4fda-98cd-418b41cdc64c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27522", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqu7lwx5osv2", "content": "", "creation_timestamp": "2025-06-05T11:29:37.216104Z"}, {"uuid": "d7a126fd-7390-4093-bf16-72755d690a87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lru7zyd34s2x", "content": "", "creation_timestamp": "2025-06-18T04:59:54.759917Z"}, {"uuid": "98c0ba00-8cd7-41ff-9dd7-d5346664c857", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27613", "type": "seen", "source": "https://www.thezdi.com/blog/2025/7/8/the-july-2025-security-update-review", "content": "", "creation_timestamp": "2025-07-08T15:56:31.000000Z"}, {"uuid": "43ca7d1f-f49d-4f6b-85fb-599ce412791d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27110", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lparle4itx2g", "content": "", "creation_timestamp": "2025-05-16T00:30:13.845734Z"}, {"uuid": "3b7e4dfe-fd7d-4d94-90a7-b9b9e8c0c274", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3lpaw2nqnbh2f", "content": "", "creation_timestamp": "2025-05-16T01:50:21.295968Z"}, {"uuid": "795c6f08-fabe-420f-a237-89497f739be8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27998", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lpp4anrufq2h", "content": "", "creation_timestamp": "2025-05-21T17:18:25.775847Z"}, {"uuid": "2bd64e8a-db7d-4326-9378-b37ccc839cf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27210", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lu4bpfj2nk24", "content": "", "creation_timestamp": "2025-07-16T20:41:28.728919Z"}, {"uuid": "8be397da-ec88-4a1a-a379-5831e7b48cc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27209", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lu4bpfj2nk24", "content": "", "creation_timestamp": "2025-07-16T20:41:28.940968Z"}, {"uuid": "b588801e-77c9-4ecb-8efa-3d6c7791a6d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27210", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lu4c4i4mu224", "content": "", "creation_timestamp": "2025-07-16T20:48:52.805846Z"}, {"uuid": "74d92124-4543-422f-87e5-acdce3d0d05f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27209", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lu4c4i4mu224", "content": "", "creation_timestamp": "2025-07-16T20:48:52.915876Z"}, {"uuid": "85d5b620-6fbf-418a-9be4-69118e85790e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2709", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-2709.yaml", "content": "", "creation_timestamp": "2025-07-16T13:27:37.000000Z"}, {"uuid": "2c782c64-b9fa-4e2a-b7ec-a764bcaa9fad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2710", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-2710.yaml", "content": "", "creation_timestamp": "2025-07-16T13:27:11.000000Z"}, {"uuid": "fe6ccd89-3e65-4c48-8d86-ddfd7a714a39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2711", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-2711.yaml", "content": "", "creation_timestamp": "2025-07-16T13:26:47.000000Z"}, {"uuid": "e7e4137e-0f42-4333-89ec-e6cf5fbd6e7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2712", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-2712.yaml", "content": "", "creation_timestamp": "2025-07-16T13:25:39.000000Z"}, {"uuid": "27513451-e364-4397-b9e9-bc1666558b2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-16)", "content": "", "creation_timestamp": "2025-07-16T00:00:00.000000Z"}, {"uuid": "5d161a32-6cff-4f11-9cc2-32e98f58e0af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-19)", "content": "", "creation_timestamp": "2025-09-19T00:00:00.000000Z"}, {"uuid": "61dd794a-3b5c-4a57-b5f3-64c3f3ebff3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27915", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m2pldvrdes2u", "content": "", "creation_timestamp": "2025-10-08T21:25:53.189416Z"}, {"uuid": "6fa2acb6-dbaf-442c-a63f-b042f94f8ddf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27210", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lu6tdl454d22", "content": "", "creation_timestamp": "2025-07-17T21:02:18.179079Z"}, {"uuid": "4c4073c4-aaef-4197-9e69-06eca058c3fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2709", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lu6tdmcp4d2k", "content": "", "creation_timestamp": "2025-07-17T21:02:30.930766Z"}, {"uuid": "5fae13e5-3e43-4cc4-8895-01385ef67dd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2710", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lu6tdmfcdk2h", "content": "", "creation_timestamp": "2025-07-17T21:02:31.683400Z"}, {"uuid": "21895b6e-f016-4928-b51b-c0ce967d1c75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2711", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lu6tdmhutn2f", "content": "", "creation_timestamp": "2025-07-17T21:02:32.430204Z"}, {"uuid": "27ab12bd-5356-4824-bf92-b0e66257e7ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2712", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lu6tdmkit52f", "content": "", "creation_timestamp": "2025-07-17T21:02:33.185694Z"}, {"uuid": "48f27754-fe19-4ae6-baea-53566bd60da8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27225", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-27225.yaml", "content": "", "creation_timestamp": "2025-10-01T18:53:17.000000Z"}, {"uuid": "d4a12134-c0c4-4cae-af30-5cfed58475a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27223", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-27223.yaml", "content": "", "creation_timestamp": "2025-10-01T18:49:45.000000Z"}, {"uuid": "f9a43c15-5483-46d2-b926-0a242f257e17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-e22c8dce-bb63b273fc6425d5", "content": "", "creation_timestamp": "2025-07-17T21:27:25.132646Z"}, {"uuid": "b9083c71-e10d-45b2-aa47-7576b0b15a34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27210", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3lu7brm2npk24", "content": "", "creation_timestamp": "2025-07-18T01:20:47.555431Z"}, {"uuid": "b4dba9dd-d5d8-4cbf-9676-dcdcc4e0e612", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27209", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3lu7brm2npk24", "content": "", "creation_timestamp": "2025-07-18T01:20:47.664424Z"}, {"uuid": "5975dbd1-cf32-4e9d-925f-ab49035586c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-17)", "content": "", "creation_timestamp": "2025-07-17T00:00:00.000000Z"}, {"uuid": "530b41bf-0938-4693-aff5-124089a0bd1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-25)", "content": "", "creation_timestamp": "2025-10-25T00:00:00.000000Z"}, {"uuid": "1f875d4a-174d-4ea0-9504-a22b9b24b1de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27212", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3luargyyruc26", "content": "", "creation_timestamp": "2025-07-18T15:33:48.607027Z"}, {"uuid": "7acb4c86-81ed-4701-b178-6e232f9b7435", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27212", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114875484940193721", "content": "", "creation_timestamp": "2025-07-18T17:46:34.016628Z"}, {"uuid": "9dea9ebd-fd44-47d5-9f68-3cae646806c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27210", "type": "seen", "source": "https://gist.github.com/EbonJaeger/99013e0308373f7313be77f71320c51b", "content": "", "creation_timestamp": "2025-07-18T17:52:32.000000Z"}, {"uuid": "77fed277-9d28-414e-993c-1e5e3ee2fe16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27209", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lubwyoizo22v", "content": "", "creation_timestamp": "2025-07-19T02:45:46.543388Z"}, {"uuid": "9b0441b5-582b-4c58-a8b8-e2910cea13de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27210", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3luby4irpcr2w", "content": "", "creation_timestamp": "2025-07-19T03:05:48.465749Z"}, {"uuid": "476ac531-27ef-4214-926f-d2bd5479d53d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27210", "type": "seen", "source": "https://threatintel.cc/2025/07/19/nodejs-security-advisory-av-canadian.html", "content": "", "creation_timestamp": "2025-07-19T14:15:49.000000Z"}, {"uuid": "f8115838-a29a-4724-bc07-d358a9bd58cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-20)", "content": "", "creation_timestamp": "2025-07-20T00:00:00.000000Z"}, {"uuid": "7ebb57dd-a9d6-45b8-bd0b-5165f65cb92a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27218", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/sitecore_xp_cve_2025_27218.rb", "content": "", "creation_timestamp": "2025-03-28T14:47:14.000000Z"}, {"uuid": "9b2c9f3b-2305-424e-b46e-dc64d846d901", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-21)", "content": "", "creation_timestamp": "2025-10-21T00:00:00.000000Z"}, {"uuid": "4b9b74a0-00d3-4810-9366-471f6b690332", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27888", "type": "seen", "source": "https://bsky.app/profile/license-token.com/post/3luih7m52uj24", "content": "", "creation_timestamp": "2025-07-21T16:51:57.192485Z"}, {"uuid": "216f9e43-67ca-4fc0-92d8-54c13a7b7000", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-21)", "content": "", "creation_timestamp": "2025-07-21T00:00:00.000000Z"}, {"uuid": "4c0a36f1-2573-4887-bda7-d164bfe04f96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/4454338", "content": "", "creation_timestamp": "2025-07-22T19:05:20.703061Z"}, {"uuid": "fa81c330-0096-4026-a2d7-1e569ee194f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/4454339", "content": "", "creation_timestamp": "2025-07-22T19:05:22.803672Z"}, {"uuid": "4303be21-9550-461e-9efc-a3b0ecb16440", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27212", "type": "seen", "source": "MISP/a3c5beab-b790-4171-8b4c-02c8a9678071", "content": "", "creation_timestamp": "2025-07-22T03:54:24.000000Z"}, {"uuid": "1ec90ca4-63a1-40e7-b3b6-28d9b70e88ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2790", "type": "seen", "source": "MISP/a3c5beab-b790-4171-8b4c-02c8a9678071", "content": "", "creation_timestamp": "2025-07-22T03:54:24.000000Z"}, {"uuid": "d8a81d27-52be-4cf7-9c1f-59e0a4f7e68b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3lumevymf722c", "content": "", "creation_timestamp": "2025-07-23T06:21:29.581586Z"}, {"uuid": "3d276fe6-1f12-4d0e-a8e9-89ce09680bfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3lumewnetvc2c", "content": "", "creation_timestamp": "2025-07-23T06:21:51.766668Z"}, {"uuid": "5a738583-7578-46dd-a215-69733cdf2f42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lumkveejko2b", "content": "", "creation_timestamp": "2025-07-23T08:08:28.440708Z"}, {"uuid": "2bf32d2e-9157-4114-a257-6598a6b42f71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lumkveejko2b", "content": "", "creation_timestamp": "2025-07-23T08:08:28.561335Z"}, {"uuid": "ebefa274-ac3d-426c-9bac-1c24f96fe60d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lumkz54mvrw2", "content": "", "creation_timestamp": "2025-07-23T08:10:39.677831Z"}, {"uuid": "eb99a459-b5b4-47c2-be5f-d863af93e4bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lumkz54mvrw2", "content": "", "creation_timestamp": "2025-07-23T08:10:39.812100Z"}, {"uuid": "3a2f9902-7cad-47f9-97fe-42ed9dc23aa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-13)", "content": "", "creation_timestamp": "2025-10-13T00:00:00.000000Z"}, {"uuid": "3b70bfc9-57c8-41f3-bf88-f2a7f44e1dc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27218", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "3441ca2c-3822-44ca-86ee-7608e221c7cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "https://thehackernews.com/2025/07/cisa-warns-sysaid-flaws-under-active.html", "content": "", "creation_timestamp": "2025-07-23T04:23:00.000000Z"}, {"uuid": "0c638f8e-c536-448c-ae4d-5ebfacf28e44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3lunfaeuyy222", "content": "", "creation_timestamp": "2025-07-23T15:59:57.834296Z"}, {"uuid": "0660c39b-72e5-4fe0-84cf-1bbab1a96bf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3lunfaeuyy222", "content": "", "creation_timestamp": "2025-07-23T15:59:57.961970Z"}, {"uuid": "812d7020-1685-4f00-85e0-7fe8e335fc52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lunw55spn42d", "content": "", "creation_timestamp": "2025-07-23T21:02:28.662152Z"}, {"uuid": "da9c8f02-7a68-4638-9c8e-fba48192475e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lunw55xhul2c", "content": "", "creation_timestamp": "2025-07-23T21:02:29.460622Z"}, {"uuid": "32fa2f05-3367-49ab-b17d-c7a385841e55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lunx5ubi7s26", "content": "", "creation_timestamp": "2025-07-23T21:20:37.680774Z"}, {"uuid": "c70f4ca7-776e-41c0-bded-cfc0174c209c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lunyt53ols2v", "content": "", "creation_timestamp": "2025-07-23T21:50:28.220779Z"}, {"uuid": "e55d46bb-409f-4ffe-9d3f-7544f0dbd4ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3luolntsbj22v", "content": "", "creation_timestamp": "2025-07-24T03:27:35.274441Z"}, {"uuid": "678094c9-d229-4de7-baf3-09ee307e7cfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3luolntsbj22v", "content": "", "creation_timestamp": "2025-07-24T03:27:35.382752Z"}, {"uuid": "4b8ef50f-b19c-48ac-9e87-e2ffcb614d34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-23)", "content": "", "creation_timestamp": "2025-07-23T00:00:00.000000Z"}, {"uuid": "1a25b081-c148-4908-a253-a02c58590d5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27520", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "44b5dd43-b3ce-4c57-a023-bf4d026a52db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27074", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m4rzeupmk52n", "content": "", "creation_timestamp": "2025-11-04T07:32:31.904647Z"}, {"uuid": "27f973b2-a56d-4840-b3c9-b17be36e21bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "5b203a57-1b90-4ad8-8232-4b5aa16d531b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27216", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lzbtz6zl4s22", "content": "", "creation_timestamp": "2025-09-20T16:58:24.748283Z"}, {"uuid": "cdc6f5a2-5b26-401c-8c3f-bfc8d315d777", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lupohh4tn22d", "content": "", "creation_timestamp": "2025-07-24T13:50:19.813592Z"}, {"uuid": "1f256cbd-2fba-4867-be84-8d5453f30854", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lupohh4tn22d", "content": "", "creation_timestamp": "2025-07-24T13:50:19.928918Z"}, {"uuid": "809bda0c-802a-4fa1-80ba-6695399cdfc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27505", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3luqgm5djp72k", "content": "", "creation_timestamp": "2025-07-24T21:02:24.581005Z"}, {"uuid": "4cf060d9-4114-4a6a-a22d-0d9a1b14068a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-24)", "content": "", "creation_timestamp": "2025-07-24T00:00:00.000000Z"}, {"uuid": "474f4f49-f8df-4621-9483-7918021f1468", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-24)", "content": "", "creation_timestamp": "2025-07-24T00:00:00.000000Z"}, {"uuid": "b34b443a-5a12-4a4a-86d5-24f78307f6eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27915", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m6iagpxj4a2b", "content": "", "creation_timestamp": "2025-11-25T21:02:39.988407Z"}, {"uuid": "d0486c76-3118-43cd-8321-06b6fc68295a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27553", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lusydkxxhk27", "content": "", "creation_timestamp": "2025-07-25T21:25:04.467707Z"}, {"uuid": "0eb7bcf6-189e-41d2-9fc4-7f60b8bea7d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-25)", "content": "", "creation_timestamp": "2025-07-25T00:00:00.000000Z"}, {"uuid": "32a9a38a-aa0e-45c6-a180-98c7a491bdfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-26)", "content": "", "creation_timestamp": "2025-07-26T00:00:00.000000Z"}, {"uuid": "8d667b81-32f7-4fdd-99d5-7ce86c51de3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2746", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-10-22T12:02:06.000000Z"}, {"uuid": "c57c3b1d-8f34-4885-b0aa-aaef1979282c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://www.acn.gov.it/portale/w/operation-forumtroll-rilevato-sfruttamento-di-una-0day-in-chrome", "content": "", "creation_timestamp": "2025-03-26T08:36:09.000000Z"}, {"uuid": "2e593115-24bf-4f6d-9fd1-1b8a46bb4a1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-27)", "content": "", "creation_timestamp": "2025-07-27T00:00:00.000000Z"}, {"uuid": "e82652cf-029e-460b-9786-4756c26af9f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2747", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-10-22T12:02:06.000000Z"}, {"uuid": "3d35c161-1300-433f-81da-d7ecd7732984", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://thehackernews.com/2025/10/chrome-zero-day-exploited-to-deliver.html", "content": "", "creation_timestamp": "2025-10-28T07:22:00.000000Z"}, {"uuid": "11286e81-e3c9-4547-b7b5-ecb9a9c45a77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27520", "type": "seen", "source": "MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea", "content": "", "creation_timestamp": "2025-09-10T07:00:37.000000Z"}, {"uuid": "d644d45f-16db-4a62-aee8-acf1dc7bdc5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2713", "type": "seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "content": "", "creation_timestamp": "2025-09-10T07:47:58.000000Z"}, {"uuid": "87487b73-4f8b-441d-8501-615ad10b6a58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2794", "type": "seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "content": "", "creation_timestamp": "2025-09-10T07:47:56.000000Z"}, {"uuid": "644b2ac7-ef93-469e-b5b6-9c163c4185c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27915", "type": "seen", "source": "https://bsky.app/profile/calimegai.bsky.social/post/3m2lumlbl3c26", "content": "", "creation_timestamp": "2025-10-07T10:01:00.692496Z"}, {"uuid": "157449b7-5b75-4c28-8f43-dcca4b0b47b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-27)", "content": "", "creation_timestamp": "2025-07-27T00:00:00.000000Z"}, {"uuid": "173f03f4-7f92-450b-a04d-4371e65611f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27802", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3luzouzylrn2b", "content": "", "creation_timestamp": "2025-07-28T13:24:28.028541Z"}, {"uuid": "5910c270-8f03-4a69-9f1d-3884fbf8fafb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27801", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3luzp3qwjvb2h", "content": "", "creation_timestamp": "2025-07-28T13:28:13.488593Z"}, {"uuid": "542080b6-8528-43f7-a182-0eabb4807eb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27800", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3luzpmfm5nu2q", "content": "", "creation_timestamp": "2025-07-28T13:37:32.181404Z"}, {"uuid": "4f16010e-e6ad-43df-830e-57f5c7c8c925", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27724", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3luzwc47lt52v", "content": "", "creation_timestamp": "2025-07-28T15:37:03.514045Z"}, {"uuid": "4086997d-b217-4b04-b9f3-b0528118ef5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27724", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3luzxmxnto72j", "content": "", "creation_timestamp": "2025-07-28T16:01:01.088348Z"}, {"uuid": "aa10ded0-8642-4221-abaf-5573a5514027", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27210", "type": "seen", "source": "https://bsky.app/profile/securitycipher.bsky.social/post/3lv2cgss3iq25", "content": "", "creation_timestamp": "2025-07-28T19:14:25.552931Z"}, {"uuid": "2efaf6ee-3197-405e-a5c3-569d58a8f3ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27210", "type": "seen", "source": "https://bsky.app/profile/youranonriots.bsky.social/post/3lv2h2hd45s2l", "content": "", "creation_timestamp": "2025-07-28T20:37:00.695566Z"}, {"uuid": "33e04c97-f98d-4410-b472-e54e0debdd81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27210", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lv32nssloe2w", "content": "", "creation_timestamp": "2025-07-29T02:27:50.884774Z"}, {"uuid": "f0e79b90-11ef-4e56-9119-612af1c5f2d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-28)", "content": "", "creation_timestamp": "2025-07-28T00:00:00.000000Z"}, {"uuid": "f367147d-04d9-422a-854f-f0fbe4aa0d8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27686", "type": "seen", "source": "MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea", "content": "", "creation_timestamp": "2025-09-10T07:00:40.000000Z"}, {"uuid": "82dede49-98da-4357-9ec5-74f1fd608312", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2748", "type": "seen", "source": "MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea", "content": "", "creation_timestamp": "2025-09-10T07:00:38.000000Z"}, {"uuid": "802078bd-2bbd-4fc2-ab8e-0a7aaeb2161e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2704", "type": "seen", "source": "MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea", "content": "", "creation_timestamp": "2025-09-10T07:00:38.000000Z"}, {"uuid": "f40d8d8a-5003-4ee9-b7d5-7fc6ba8ffac1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2787", "type": "seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "content": "", "creation_timestamp": "2025-09-10T07:48:00.000000Z"}, {"uuid": "d2a5d940-8775-4bf9-8b7b-5210822451f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/115403251349771913", "content": "", "creation_timestamp": "2025-10-19T22:44:30.956316Z"}, {"uuid": "9421b9b8-262c-4d3f-8a7a-c2cdc4ea5889", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27149", "type": "seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "content": "", "creation_timestamp": "2025-09-10T07:47:56.000000Z"}, {"uuid": "a7d23cc6-dadb-4ff5-8dc2-7f6b1f6f6aab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27232", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3m6wj4dk6wj2c", "content": "", "creation_timestamp": "2025-12-01T13:15:07.955420Z"}, {"uuid": "a801fcea-92c9-4e2d-aee7-45f08a9f3e56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-29)", "content": "", "creation_timestamp": "2025-07-29T00:00:00.000000Z"}, {"uuid": "6f08500f-87a4-46a6-94bb-3028a6620195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-30)", "content": "", "creation_timestamp": "2025-07-30T00:00:00.000000Z"}, {"uuid": "098ae839-d22b-49f0-84db-4394fa1a9ddd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27223", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m2ahapki2u26", "content": "", "creation_timestamp": "2025-10-02T21:02:26.312367Z"}, {"uuid": "809d4fe0-d065-41e9-bc65-28abb40c02c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27225", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m2ahapnans2g", "content": "", "creation_timestamp": "2025-10-02T21:02:26.871249Z"}, {"uuid": "ca1e0947-796d-46e9-868a-6ad1cf745572", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27060", "type": "seen", "source": "https://bsky.app/profile/ycftbwc.bsky.social/post/3m2qgddqust2u", "content": "", "creation_timestamp": "2025-10-09T05:28:36.597907Z"}, {"uuid": "5db9fe6c-b437-4272-b6a8-2e532290026f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27093", "type": "seen", "source": "https://infosec.exchange/users/dragonjar/statuses/115593005207563115", "content": "", "creation_timestamp": "2025-11-22T11:01:25.079078Z"}, {"uuid": "251d0dd7-555d-4323-a9f6-6079ae7ed202", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/115451690423548057", "content": "", "creation_timestamp": "2025-10-28T12:03:11.445907Z"}, {"uuid": "582c1d7e-388f-45e8-8e58-22c9ba7f47ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27551", "type": "seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "content": "", "creation_timestamp": "2025-09-10T07:48:00.000000Z"}, {"uuid": "2a53956d-0d3a-4c7f-9657-9fbb53e2997a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-31)", "content": "", "creation_timestamp": "2025-07-31T00:00:00.000000Z"}, {"uuid": "3ef70dc9-6fec-47a1-add7-8bc5c0ce433f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/115451847999269799", "content": "", "creation_timestamp": "2025-10-28T12:43:16.700939Z"}, {"uuid": "da9dcdbe-0437-4212-bc24-49106dbda754", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3m4axib7emc2d", "content": "", "creation_timestamp": "2025-10-28T12:43:24.481355Z"}, {"uuid": "239e44b6-c0f7-4124-a3ff-468b296695b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27613", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lvgfa7vai22p", "content": "", "creation_timestamp": "2025-08-02T14:36:26.346653Z"}, {"uuid": "c71b0457-da2a-46f8-af2f-2463b5a96d9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27614", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lvghzg2ofk2p", "content": "", "creation_timestamp": "2025-08-02T15:26:18.795524Z"}, {"uuid": "a4697e17-7271-4bef-8ebc-cd3e69f8db7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2712", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lvh2scwgph2z", "content": "", "creation_timestamp": "2025-08-02T21:02:22.600747Z"}, {"uuid": "2181eda9-298b-4af6-8cff-7a1136228447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-02)", "content": "", "creation_timestamp": "2025-08-02T00:00:00.000000Z"}, {"uuid": "5ac49339-4c88-4a47-880c-454311101529", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://threatintel.cc/2025/10/28/italian-spyware-vendor-linked-to.html", "content": "", "creation_timestamp": "2025-10-28T11:03:40.000000Z"}, {"uuid": "661e0e8b-b71e-48ed-949e-03086057f783", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/il-nb.bsky.social/post/3m4b4mokzna2i", "content": "", "creation_timestamp": "2025-10-28T14:15:20.452250Z"}, {"uuid": "25493164-e3d9-4639-b078-c0047475364b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3m4b5c6gdn22s", "content": "", "creation_timestamp": "2025-10-28T14:27:25.201248Z"}, {"uuid": "491cd587-46d0-4f60-8f4e-db3e9dc50d38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3m4b5cb5es22s", "content": "", "creation_timestamp": "2025-10-28T14:27:25.672369Z"}, {"uuid": "1f74bc38-2c4f-4444-9bd5-a4d234c4f650", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27212", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lvmg4276do2s", "content": "", "creation_timestamp": "2025-08-05T00:07:55.308592Z"}, {"uuid": "44d0a6b9-06dd-40ff-95b7-44798ec5949d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27211", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lvmgnxgzw62p", "content": "", "creation_timestamp": "2025-08-05T00:17:55.662749Z"}, {"uuid": "ab34ec03-940c-4004-84f5-422d66b6e5f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3m4b5cb5frc2s", "content": "", "creation_timestamp": "2025-10-28T14:27:26.165177Z"}, {"uuid": "e4ca87a3-bc99-408a-8dec-90960df3745f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27038", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/114976061890898504", "content": "", "creation_timestamp": "2025-08-05T12:04:36.678039Z"}, {"uuid": "f199687e-1bb7-4f0c-b8cb-e3d9ed806290", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27038", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3lvno5rvgbk2t", "content": "", "creation_timestamp": "2025-08-05T12:04:44.694783Z"}, {"uuid": "b018e52b-2501-43a4-8cae-877b7e381c8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27931", "type": "seen", "source": "https://infosec.place/objects/d631279c-d381-4f29-9c03-fe65be24f0d2", "content": "", "creation_timestamp": "2025-08-05T15:00:05.337017Z"}, {"uuid": "0da2b84b-60a6-4265-a237-f3135661db22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27038", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lvnzvqfcty2a", "content": "", "creation_timestamp": "2025-08-05T15:34:58.304087Z"}, {"uuid": "7c7022b1-59b7-486b-af3e-3ec191f98dea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27038", "type": "seen", "source": "https://thehackernews.com/2025/08/google-fixes-3-android-vulnerabilities.html", "content": "", "creation_timestamp": "2025-08-05T11:59:00.000000Z"}, {"uuid": "7d6c2eb9-17ae-4092-9fa6-2b0cf9ebe8e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27367", "type": "seen", "source": "MISP/853ff921-86fb-463b-bc2a-2860bf336b81", "content": "", "creation_timestamp": "2025-08-06T01:04:19.000000Z"}, {"uuid": "0510eed5-993c-4367-9bb8-868f47b86a66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27042", "type": "seen", "source": "MISP/853ff921-86fb-463b-bc2a-2860bf336b81", "content": "", "creation_timestamp": "2025-08-06T01:04:20.000000Z"}, {"uuid": "3dd0cbc1-8774-4f8d-ae4a-baafa130a870", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27043", "type": "seen", "source": "MISP/853ff921-86fb-463b-bc2a-2860bf336b81", "content": "", "creation_timestamp": "2025-08-06T01:04:20.000000Z"}, {"uuid": "a5aa8eed-5ed0-426c-9dff-2eb12b4f8f09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27051", "type": "seen", "source": "MISP/853ff921-86fb-463b-bc2a-2860bf336b81", "content": "", "creation_timestamp": "2025-08-06T01:04:20.000000Z"}, {"uuid": "71d67ff9-7640-448f-94e9-66e04a682b60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27052", "type": "seen", "source": "MISP/853ff921-86fb-463b-bc2a-2860bf336b81", "content": "", "creation_timestamp": "2025-08-06T01:04:20.000000Z"}, {"uuid": "183f6924-125d-4f2c-a207-22735c6849a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27056", "type": "seen", "source": "MISP/853ff921-86fb-463b-bc2a-2860bf336b81", "content": "", "creation_timestamp": "2025-08-06T01:04:20.000000Z"}, {"uuid": "4e032d52-6f69-4406-8dea-20768eb94502", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27057", "type": "seen", "source": "MISP/853ff921-86fb-463b-bc2a-2860bf336b81", "content": "", "creation_timestamp": "2025-08-06T01:04:20.000000Z"}, {"uuid": "8eaa4040-e707-4229-9964-20d06bf6124f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27920", "type": "seen", "source": "MISP/853ff921-86fb-463b-bc2a-2860bf336b81", "content": "", "creation_timestamp": "2025-08-06T01:04:20.000000Z"}, {"uuid": "2aab185e-c85f-4c3f-aa57-2b3aa495be60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27058", "type": "seen", "source": "MISP/853ff921-86fb-463b-bc2a-2860bf336b81", "content": "", "creation_timestamp": "2025-08-06T01:04:20.000000Z"}, {"uuid": "c5a50516-5f57-4b9b-ae04-48a0bd714939", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-02)", "content": "", "creation_timestamp": "2025-10-02T00:00:00.000000Z"}, {"uuid": "e6c8acd2-be08-40db-9e74-15f15dd56849", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27061", "type": "seen", "source": "MISP/853ff921-86fb-463b-bc2a-2860bf336b81", "content": "", "creation_timestamp": "2025-08-06T01:04:20.000000Z"}, {"uuid": "ecc80029-335c-4085-bc59-c0f1281646d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3m4b6em3yvj24", "content": "", "creation_timestamp": "2025-10-28T14:46:36.526896Z"}, {"uuid": "20d44062-674e-435e-82f7-d0d30467c1e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-19)", "content": "", "creation_timestamp": "2025-10-19T00:00:00.000000Z"}, {"uuid": "81315bcc-feef-4959-9d13-6dc422c369b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-27076", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3lvpuf53u5f2k", "content": "", "creation_timestamp": "2025-08-06T09:01:32.422207Z"}, {"uuid": "d6e5743b-90de-4ca1-b4ca-cd7c3bdf1d4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27065", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lvpxurkqu62k", "content": "", "creation_timestamp": "2025-08-06T10:03:57.065946Z"}, {"uuid": "bef7c2e8-4c6d-48ad-b6b3-ef9ec3346c04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27221", "type": "seen", "source": "https://gist.github.com/Darkcrai86/80137e2035551f24fb93907ce037aa12", "content": "", "creation_timestamp": "2025-10-07T12:02:42.000000Z"}, {"uuid": "4cb4a562-dc5a-448c-b458-4797dc9ec02d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27038", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-09-28T08:23:31.000000Z"}, {"uuid": "6f397f49-9239-4ac0-9a8c-08f048c64499", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-09-28T08:23:31.000000Z"}, {"uuid": "53e55fd8-20fc-4281-8836-a2089fa485bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27038", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-97f996f8-335e4df9a924fc03", "content": "", "creation_timestamp": "2025-08-06T21:47:01.344577Z"}, {"uuid": "3cbd872c-84e0-4aee-bd43-661d2ebe5baa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27038", "type": "seen", "source": "https://bsky.app/profile/sonoclaudio.ransomnews.online/post/3lvsc636m3k2s", "content": "", "creation_timestamp": "2025-08-07T08:13:29.579341Z"}, {"uuid": "aca4eb97-a00d-488a-be12-a99ac4890d05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-06)", "content": "", "creation_timestamp": "2025-08-06T00:00:00.000000Z"}, {"uuid": "33f59b1e-e4bc-4950-b992-f94b4ccf121c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-06)", "content": "", "creation_timestamp": "2025-09-06T00:00:00.000000Z"}, {"uuid": "e1fa8861-5d05-49d8-a677-131e37a67e08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-09-28T08:23:31.000000Z"}, {"uuid": "0a45b2ed-1901-466c-9cf2-df86e8b2f082", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-09-28T08:23:31.000000Z"}, {"uuid": "9fcde0af-7962-4b13-938a-5ffd6d4c2e63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-09-28T08:23:31.000000Z"}, {"uuid": "bc721d9d-f671-46c3-9235-07f8b193ba13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27920", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-09-28T08:23:31.000000Z"}, {"uuid": "a6667f2a-56a5-4d82-9ae0-cbf966821cac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-23)", "content": "", "creation_timestamp": "2025-10-23T00:00:00.000000Z"}, {"uuid": "a6f4ea5f-3fe7-4276-b106-fd73b7fbb133", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-07)", "content": "", "creation_timestamp": "2025-08-07T00:00:00.000000Z"}, {"uuid": "b9c3c4f4-6110-44a3-85a0-607eb9c68671", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-08)", "content": "", "creation_timestamp": "2025-08-08T00:00:00.000000Z"}, {"uuid": "66aa1a57-685e-42ff-9ffd-7da1d0ee650d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27915", "type": "seen", "source": "https://bsky.app/profile/mmarcoseguridad.bsky.social/post/3m3cras6hb62h", "content": "", "creation_timestamp": "2025-10-16T12:31:58.935982Z"}, {"uuid": "ba24b063-9fca-42a5-af41-c9ca901ac747", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27505", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-28)", "content": "", "creation_timestamp": "2025-11-28T00:00:00.000000Z"}, {"uuid": "7bc73ee6-bcca-4ebe-81a0-f3ff824aadcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27222", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-27222.yaml", "content": "", "creation_timestamp": "2025-10-01T18:48:20.000000Z"}, {"uuid": "e78a89cf-6456-4ec8-8287-4a7905d756c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27505", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-20)", "content": "", "creation_timestamp": "2025-11-20T00:00:00.000000Z"}, {"uuid": "23664dbb-cdbb-4a67-8e05-1665749110b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27915", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3m2qway4cns2i", "content": "", "creation_timestamp": "2025-10-09T10:13:54.729286Z"}, {"uuid": "edeb2071-604b-44c5-abd0-05162303b199", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-09-29T03:12:16.000000Z"}, {"uuid": "1f3a7f03-5567-4487-ad71-043e6ee6caab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-09-29T03:12:16.000000Z"}, {"uuid": "ddec03cf-d93d-4109-b58c-2c2a274f147f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27889", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-09T13:26:56.000000Z"}, {"uuid": "f7a7211e-612f-4790-a17d-1f3e1a2d8295", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27599", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-09T13:26:56.000000Z"}, {"uuid": "e3b22e1c-dd70-4fe1-9a78-8decf999d898", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-09T13:26:57.000000Z"}, {"uuid": "542718e9-ac08-487f-86be-8e1a8c18ccf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27218", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-09T13:26:57.000000Z"}, {"uuid": "9a8e3333-0d8b-4ef2-86bf-b1820a580163", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27520", "type": "seen", "source": "MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea", "content": "", "creation_timestamp": "2025-08-09T17:25:37.000000Z"}, {"uuid": "d30281d3-d769-47bf-8998-18fe995e8b8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2748", "type": "seen", "source": "MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea", "content": "", "creation_timestamp": "2025-08-09T17:25:37.000000Z"}, {"uuid": "963425d4-63c4-40b6-b2f2-a6931273ee05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2704", "type": "seen", "source": "MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea", "content": "", "creation_timestamp": "2025-08-09T17:25:37.000000Z"}, {"uuid": "27b26fb6-c281-44fa-952d-0d901d88b68e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27686", "type": "seen", "source": "MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea", "content": "", "creation_timestamp": "2025-08-09T17:25:38.000000Z"}, {"uuid": "3e70d531-dbeb-4604-b910-1cb61d7fd2fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27038", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-09-29T03:12:16.000000Z"}, {"uuid": "378846d3-eea1-45f5-9b97-ec81faf1d6ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27232", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m6wqmal2r42k", "content": "", "creation_timestamp": "2025-12-01T15:29:17.465955Z"}, {"uuid": "b6fcd8dd-c89a-4a7d-a90a-dc148742ae0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-09-29T03:12:16.000000Z"}, {"uuid": "85c32c09-f829-4f2f-a9de-98897baa9d67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-09-29T03:12:16.000000Z"}, {"uuid": "dc8a4f6f-49b9-400e-9613-a2bede49d181", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-09)", "content": "", "creation_timestamp": "2025-08-09T00:00:00.000000Z"}, {"uuid": "59236626-a2dd-42f7-986c-20da7566af3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27920", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-09-29T03:12:16.000000Z"}, {"uuid": "648bff82-bcd9-44f6-a7f9-cf90775327e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27835", "type": "seen", "source": "https://bsky.app/profile/redteam-pentesting.de/post/3m5ish3rsqc2e", "content": "", "creation_timestamp": "2025-11-13T08:59:48.109715Z"}, {"uuid": "e74b1fab-4575-4060-bedb-be08ae151061", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27835", "type": "seen", "source": "https://bsky.app/profile/redteam-pentesting.de/post/3m5ish4f7tc2e", "content": "", "creation_timestamp": "2025-11-13T08:59:48.633371Z"}, {"uuid": "e80f3edd-767b-4f96-aa5b-51e787ec1583", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27835", "type": "seen", "source": "https://bsky.app/profile/redteam-pentesting.de/post/3m5ish4f7td2e", "content": "", "creation_timestamp": "2025-11-13T08:59:49.178940Z"}, {"uuid": "7d6279b8-4ea6-40c6-9f0b-765cb4d870b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27835", "type": "seen", "source": "https://bsky.app/profile/redteam-pentesting.de/post/3m5ish6oog32e", "content": "", "creation_timestamp": "2025-11-13T08:59:49.684798Z"}, {"uuid": "0d075fb2-adaa-451e-9068-f3e8c0e87993", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2747", "type": "seen", "source": "https://bsky.app/profile/threatint.eu/post/3m3n4x752yd27", "content": "", "creation_timestamp": "2025-10-20T15:27:58.487447Z"}, {"uuid": "4e78b9c4-3bb1-4219-bcf1-8e2f4ab8f33f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/115491474225502691", "content": "", "creation_timestamp": "2025-11-04T12:40:44.139713Z"}, {"uuid": "9d58c1cd-6413-45da-9a75-6a60459d158c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2794", "type": "seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "content": "", "creation_timestamp": "2025-08-10T18:27:44.000000Z"}, {"uuid": "dd041733-813b-4dda-8a63-7d04eeeeacf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27149", "type": "seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "content": "", "creation_timestamp": "2025-08-10T18:27:44.000000Z"}, {"uuid": "92cb43e2-8994-4e2e-84be-6b7c69a40840", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2713", "type": "seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "content": "", "creation_timestamp": "2025-08-10T18:27:44.000000Z"}, {"uuid": "f7a49788-4166-4fa6-8efd-4c33804c258e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2787", "type": "seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "content": "", "creation_timestamp": "2025-08-10T18:27:45.000000Z"}, {"uuid": "7d7fbec0-5d9c-497e-8ece-7e631ea18f37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27034", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lz2wd2qtqk2d", "content": "", "creation_timestamp": "2025-09-17T22:51:01.369317Z"}, {"uuid": "a403a17a-16c8-4256-adf5-517ff60e9f3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27551", "type": "seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "content": "", "creation_timestamp": "2025-08-10T18:27:45.000000Z"}, {"uuid": "c57e008c-c34e-4c8e-ba99-a49c065c79e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "seen", "source": "https://bsky.app/profile/wardenshield.bsky.social/post/3lw3pagelbk2g", "content": "", "creation_timestamp": "2025-08-11T02:01:29.188182Z"}, {"uuid": "27a5706d-0453-4de8-82b9-ea07b02f3dcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27577", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lw44flgpzh2e", "content": "", "creation_timestamp": "2025-08-11T05:56:53.118578Z"}, {"uuid": "acc92187-0e9d-4582-a6d9-d8a237f098e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27128", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lw44ojzzxa2p", "content": "", "creation_timestamp": "2025-08-11T06:01:53.452942Z"}, {"uuid": "c3291995-ac4d-4fa8-9820-bdf49de3d91e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3m4meaanw6d2k", "content": "", "creation_timestamp": "2025-11-02T01:30:50.395354Z"}, {"uuid": "71706fa9-fae5-40b3-9fd1-52cc09f4321e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-08)", "content": "", "creation_timestamp": "2025-11-08T00:00:00.000000Z"}, {"uuid": "f1ff042f-1e01-4aae-971c-1cc4c3d0ebe8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "seen", "source": "https://gist.github.com/strikoder/49a945eeff34362d58ae0eea2caa2fa5", "content": "", "creation_timestamp": "2025-11-17T07:26:08.000000Z"}, {"uuid": "5d505c74-5c84-4670-a9b7-cbe601c16263", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2747", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/4950882", "content": "", "creation_timestamp": "2025-10-20T16:19:13.361885Z"}, {"uuid": "bf51832b-a348-410f-9e1f-6e5ca2e74393", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://threatintel.cc/2025/11/04/new-dante-spyware-linked-to.html", "content": "", "creation_timestamp": "2025-11-04T11:40:50.000000Z"}, {"uuid": "a859f599-e1c9-4cae-8d6c-e609ca2fe0ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2746", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/4950883", "content": "", "creation_timestamp": "2025-10-20T16:19:14.670098Z"}, {"uuid": "a62dddb4-db8f-4b7e-9252-62e03b60a681", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "e92402ac-b04a-4e73-ad0b-3c8344ca18bd", "vulnerability": "CVE-2025-27915", "type": "exploited", "source": "https://strikeready.com/blog/0day-ics-attack-in-the-wild/", "content": "", "creation_timestamp": "2025-10-07T15:43:20.208391Z"}, {"uuid": "7732f75f-a57b-461d-aaf6-3fd7674c5459", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3m4mgzfkazg2o", "content": "", "creation_timestamp": "2025-11-02T02:20:41.072876Z"}, {"uuid": "9cb4a94b-8ae0-423e-b09c-a216745e1625", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27915", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m2cxppvxok2p", "content": "", "creation_timestamp": "2025-10-03T21:02:31.871172Z"}, {"uuid": "f098821c-b2ee-458c-87f0-f540989892a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27038", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lw4th2bops27", "content": "", "creation_timestamp": "2025-08-11T12:49:21.543194Z"}, {"uuid": "bdb706c6-3604-42c0-a7ab-2aff4b588c20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lw56nqfslk2q", "content": "", "creation_timestamp": "2025-08-11T16:09:54.884291Z"}, {"uuid": "2eb3de91-4a62-4b79-a328-8325341dcc0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27889", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-11T18:47:37.000000Z"}, {"uuid": "7f33a173-633f-4f12-8bb7-73d2b24706bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27599", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-11T18:47:39.000000Z"}, {"uuid": "240b4f86-429d-4076-9f9b-5a6f36b3e0d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-11T18:47:40.000000Z"}, {"uuid": "3f8af0b5-1605-43ac-b6f7-b40be686be3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27218", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-11T18:47:42.000000Z"}, {"uuid": "ab51b8f2-6caa-4a04-9d12-8524b4454f3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2753", "type": "seen", "source": "MISP/3e4b778d-5810-4171-a915-f1d106684af4", "content": "", "creation_timestamp": "2025-08-11T18:27:48.000000Z"}, {"uuid": "2f5db4b9-0d0e-4371-97ec-003c1e10ac10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2740", "type": "seen", "source": "MISP/3e4b778d-5810-4171-a915-f1d106684af4", "content": "", "creation_timestamp": "2025-08-11T18:27:48.000000Z"}, {"uuid": "fc95e347-5421-48c2-94b9-8707e0927019", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2746", "type": "seen", "source": "MISP/3e4b778d-5810-4171-a915-f1d106684af4", "content": "", "creation_timestamp": "2025-08-11T18:27:48.000000Z"}, {"uuid": "528a6c2f-2399-44c6-9f46-36bc83dcd4e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27093", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/115587896765175745", "content": "", "creation_timestamp": "2025-11-21T13:22:15.428201Z"}, {"uuid": "935fc57e-8e7a-4e26-9ebf-79d555644903", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2747", "type": "seen", "source": "MISP/3e4b778d-5810-4171-a915-f1d106684af4", "content": "", "creation_timestamp": "2025-08-11T18:27:48.000000Z"}, {"uuid": "42eb8b1d-2a5e-41f5-8c7e-7c63ab01b226", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2706", "type": "seen", "source": "MISP/3e4b778d-5810-4171-a915-f1d106684af4", "content": "", "creation_timestamp": "2025-08-11T18:27:48.000000Z"}, {"uuid": "fbabc193-2c03-44de-90d1-3bd17b64176b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27612", "type": "seen", "source": "MISP/3e4b778d-5810-4171-a915-f1d106684af4", "content": "", "creation_timestamp": "2025-08-11T18:27:49.000000Z"}, {"uuid": "de57f22a-5013-4fc3-b2a3-781b380a28d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-11)", "content": "", "creation_timestamp": "2025-08-11T00:00:00.000000Z"}, {"uuid": "71dda740-19e0-453d-9768-04be30d0b9f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3m4btu5ktw52r", "content": "", "creation_timestamp": "2025-10-28T21:11:07.452036Z"}, {"uuid": "3d73643f-5a4a-4087-a6c7-1d4475cfe68d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27093", "type": "seen", "source": "https://infosec.exchange/users/r1cksec/statuses/115615186636747982", "content": "", "creation_timestamp": "2025-11-26T09:35:46.640986Z"}, {"uuid": "999e40f2-4e0b-41e9-a505-62ba69932554", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-01)", "content": "", "creation_timestamp": "2025-11-01T00:00:00.000000Z"}, {"uuid": "bcbb3d8b-d992-4835-89b0-edccc6157c6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lz3rlxsabc2e", "content": "", "creation_timestamp": "2025-09-18T06:59:12.103480Z"}, {"uuid": "8731c8bb-792b-42ac-ad54-0a28da4883ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27093", "type": "seen", "source": "https://threatintel.cc/2025/11/21/sliver-c-insecure-default-network.html", "content": "", "creation_timestamp": "2025-11-21T12:22:30.000000Z"}, {"uuid": "42a68545-de85-4bed-a745-5400bfae3284", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27778", "type": "seen", "source": "MISP/02fb130c-7874-4693-9b66-81ed91a2e996", "content": "", "creation_timestamp": "2025-08-12T13:33:27.000000Z"}, {"uuid": "7e04eac5-b028-4c94-9bcd-a230effa90bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27018", "type": "seen", "source": "MISP/02fb130c-7874-4693-9b66-81ed91a2e996", "content": "", "creation_timestamp": "2025-08-12T13:33:28.000000Z"}, {"uuid": "42430718-3de6-4e53-975e-a81934e2880c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27407", "type": "seen", "source": "MISP/02fb130c-7874-4693-9b66-81ed91a2e996", "content": "", "creation_timestamp": "2025-08-12T13:33:28.000000Z"}, {"uuid": "a2decb14-d852-42d4-b579-ae41d5e72900", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-3522e91b-9452d6f54741433d", "content": "", "creation_timestamp": "2025-10-27T04:16:27.582886Z"}, {"uuid": "1e8d696c-45b9-4068-bfad-4f7218a80f93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "seen", "source": "MISP/02fb130c-7874-4693-9b66-81ed91a2e996", "content": "", "creation_timestamp": "2025-08-12T13:33:28.000000Z"}, {"uuid": "cd1aef6a-a1fa-4c54-a4a5-647e52bad43a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/ehcgroup.bsky.social/post/3m4c54c4pws23", "content": "", "creation_timestamp": "2025-10-28T23:56:45.851091Z"}, {"uuid": "7a0807e8-ec07-4f76-8e5f-9195b5bf1e9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-01)", "content": "", "creation_timestamp": "2025-11-01T00:00:00.000000Z"}, {"uuid": "7768a966-b215-4fa7-8271-6d8e2c3f541c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27512", "type": "seen", "source": "MISP/02fb130c-7874-4693-9b66-81ed91a2e996", "content": "", "creation_timestamp": "2025-08-12T13:33:28.000000Z"}, {"uuid": "fb01db52-afdc-44b7-a150-9416a67a3118", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27429", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3lw7rlkrj622o", "content": "", "creation_timestamp": "2025-08-12T16:54:01.747753Z"}, {"uuid": "b616ebbf-752a-4cbd-97ed-7b948ef8b62f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lwa7hpsftb2p", "content": "", "creation_timestamp": "2025-08-12T21:02:30.450622Z"}, {"uuid": "c2d4a4f3-fdbe-450e-842e-755e567b163c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-14)", "content": "", "creation_timestamp": "2025-09-14T00:00:00.000000Z"}, {"uuid": "69964799-c3a7-4fb2-a28f-ae30f0a24501", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lwbhnrev5r2z", "content": "", "creation_timestamp": "2025-08-13T09:01:37.550554Z"}, {"uuid": "898502c9-d4db-45a3-9cbd-76e85fe54f7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-12)", "content": "", "creation_timestamp": "2025-08-12T00:00:00.000000Z"}, {"uuid": "694baddb-3596-45f2-bebd-45768d8b9826", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27915", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/4875001", "content": "", "creation_timestamp": "2025-10-07T19:16:14.283241Z"}, {"uuid": "e7eec119-5c4b-4731-ac5c-2f9b6ba3c05b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27915", "type": "seen", "source": "https://thehackernews.com/2025/10/zimbra-zero-day-exploited-to-target.html", "content": "", "creation_timestamp": "2025-10-06T04:01:00.000000Z"}, {"uuid": "01fe8f95-6d68-4dac-bfd2-43151ccc0e07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27914", "type": "seen", "source": "MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868", "content": "", "creation_timestamp": "2025-08-13T13:26:34.000000Z"}, {"uuid": "d41006b7-dbf3-40a0-92ce-f16a0eeb6f20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27788", "type": "seen", "source": "MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868", "content": "", "creation_timestamp": "2025-08-13T13:26:34.000000Z"}, {"uuid": "73adbfbc-824b-4cfc-ad44-d6d7dfe2dae2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27152", "type": "seen", "source": "MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868", "content": "", "creation_timestamp": "2025-08-13T13:26:34.000000Z"}, {"uuid": "16c08c80-3049-41ff-9985-21033492d5f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27494", "type": "seen", "source": "MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868", "content": "", "creation_timestamp": "2025-08-13T13:26:35.000000Z"}, {"uuid": "c133f393-e7a4-4faa-bb98-d5f3ea020c40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27176", "type": "seen", "source": "MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868", "content": "", "creation_timestamp": "2025-08-13T13:26:34.000000Z"}, {"uuid": "bc2ca22c-f46e-4780-9604-1c11216d4696", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27403", "type": "seen", "source": "MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868", "content": "", "creation_timestamp": "2025-08-13T13:26:35.000000Z"}, {"uuid": "130e431f-6c4a-4e93-ae7c-7b382cbcaae7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27438", "type": "seen", "source": "MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868", "content": "", "creation_timestamp": "2025-08-13T13:26:35.000000Z"}, {"uuid": "e1e117c9-4454-4ae7-9e0f-8221063c377d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27179", "type": "seen", "source": "MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868", "content": "", "creation_timestamp": "2025-08-13T13:26:34.000000Z"}, {"uuid": "66e9a232-dd09-4efe-b718-4eec03abd40f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27912", "type": "seen", "source": "MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868", "content": "", "creation_timestamp": "2025-08-13T13:26:35.000000Z"}, {"uuid": "55426825-1ed3-4cd8-8150-602bf5fe3c35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27915", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3m2mw66rsjo2c", "content": "", "creation_timestamp": "2025-10-07T20:01:24.654746Z"}, {"uuid": "9a6a6b7d-a149-4652-98a2-92433d43abdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27166", "type": "seen", "source": "MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868", "content": "", "creation_timestamp": "2025-08-13T13:26:34.000000Z"}, {"uuid": "ba7ff09f-7452-4a1e-9788-7030b4905338", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27601", "type": "seen", "source": "MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868", "content": "", "creation_timestamp": "2025-08-13T13:26:34.000000Z"}, {"uuid": "273a65dd-0849-4e5e-ba8b-35e003f8bea3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-27388", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3lwdy4ebq2r24", "content": "", "creation_timestamp": "2025-08-14T09:01:26.954491Z"}, {"uuid": "e65a0504-aa93-4ac8-92e6-5952fe371f2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-13)", "content": "", "creation_timestamp": "2025-08-13T00:00:00.000000Z"}, {"uuid": "81c5afed-6cfa-4789-b8bd-feb93ebca462", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-17)", "content": "", "creation_timestamp": "2025-09-17T00:00:00.000000Z"}, {"uuid": "c2d46cee-de5e-4b81-8765-cc31e1bb9c02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://gist.github.com/Darkcrai86/9033c5080d2d49509c29ce385ef02d1c", "content": "", "creation_timestamp": "2025-10-27T08:30:09.000000Z"}, {"uuid": "b81aec0f-1332-453d-bf2f-991a24a5fd30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27915", "type": "seen", "source": "https://bsky.app/profile/technadu.com/post/3m2jfmaqwzs2i", "content": "", "creation_timestamp": "2025-10-06T10:27:17.175131Z"}, {"uuid": "95809a27-f4af-419e-a6ce-09b50f749596", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27915", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/115326861103133608", "content": "", "creation_timestamp": "2025-10-06T10:57:27.170281Z"}, {"uuid": "89f4dbc2-e8e1-48c7-82fa-1ba8b554645f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-10)", "content": "", "creation_timestamp": "2025-09-10T00:00:00.000000Z"}, {"uuid": "28ab504d-342b-44ab-9137-cf0c70d88cd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/dasgeldco.bsky.social/post/3lydieladgq24", "content": "", "creation_timestamp": "2025-09-08T15:10:05.519530Z"}, {"uuid": "77f92c81-9507-49eb-8b83-d415393ecaa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3m4d35ue5pk25", "content": "", "creation_timestamp": "2025-10-29T08:54:28.919945Z"}, {"uuid": "a750d835-8604-40f7-8807-c184172b0a48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27434", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-16T01:45:14.000000Z"}, {"uuid": "8fa06afe-e9af-4110-aaa1-b1606906b1bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27816", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-16T01:45:14.000000Z"}, {"uuid": "9f85eefb-34f7-4d4f-8e7f-72d6a2ec6760", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27925", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-16T01:45:14.000000Z"}, {"uuid": "87543307-1ecc-48c3-8935-375d076dba1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27615", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-16T01:45:14.000000Z"}, {"uuid": "5d84c57c-ae06-4af5-a6c0-976a97fa508c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27254", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-16T01:45:14.000000Z"}, {"uuid": "87d0c3a3-4520-487d-8154-7a9d8a1db921", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27255", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-16T01:45:14.000000Z"}, {"uuid": "d6246e1c-c829-4a7d-b3bb-2e2724965a63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27257", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-16T01:45:14.000000Z"}, {"uuid": "1bad667d-47ce-4073-9918-d02b02ebe198", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27607", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-16T01:45:14.000000Z"}, {"uuid": "59639923-5027-4c95-88a3-c2eddc2c1665", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27517", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-16T01:45:14.000000Z"}, {"uuid": "90146db3-888a-4bb5-9927-c63fc4c9ebd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27915", "type": "seen", "source": "https://infosec.exchange/users/tomcat/statuses/115327218844632618", "content": "", "creation_timestamp": "2025-10-06T12:28:25.956778Z"}, {"uuid": "7a796ac3-4f9b-419c-9641-ec85846444b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27823", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-16T01:45:14.000000Z"}, {"uuid": "a6df644e-c4c3-44c3-b760-ccd63536dfa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27505", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-16)", "content": "", "creation_timestamp": "2025-11-16T00:00:00.000000Z"}, {"uuid": "1ba9ee84-0010-4951-87ed-469f723861e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27826", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-16T01:45:14.000000Z"}, {"uuid": "3f1526b6-59a9-4e9b-b8c0-e06b15c089af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27603", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-16T01:45:14.000000Z"}, {"uuid": "32d4f37e-401a-4453-9806-e7d5257e3207", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27519", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-16T01:45:14.000000Z"}, {"uuid": "81a299c1-ac43-4f3f-9b8b-fabe7f96a1d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27622", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-16T01:45:15.000000Z"}, {"uuid": "98c75ed1-1234-4f18-a323-3e5a2dbbeb26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27915", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-10-07T18:10:02.000000Z"}, {"uuid": "6c1db55d-0e18-4d89-872f-563131b4d9b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27915", "type": "seen", "source": "https://threatintel.cc/2025/10/06/zimbra-users-targeted-in-zeroday.html", "content": "", "creation_timestamp": "2025-10-06T08:57:33.000000Z"}, {"uuid": "43061640-e834-4260-a251-c469738fabdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-09)", "content": "", "creation_timestamp": "2025-10-09T00:00:00.000000Z"}, {"uuid": "59034760-0d15-4560-bb98-e0646a0ab3f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27915", "type": "seen", "source": "https://threatintel.cc/2025/10/06/daily-cyber-threat-intelligence-briefing.html", "content": "", "creation_timestamp": "2025-10-06T10:09:49.000000Z"}, {"uuid": "22aa0ad9-ab6e-4a6d-b848-508e413610b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27888", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-27888.yaml", "content": "", "creation_timestamp": "2025-08-15T23:41:47.000000Z"}, {"uuid": "48d05983-3e78-41f3-91ce-a341076d9515", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27237", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m2jqx7zo3s2r", "content": "", "creation_timestamp": "2025-10-06T13:50:04.897471Z"}, {"uuid": "68196550-3599-4501-9010-50392c4e9dd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27222", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m2fi6hbyqx2n", "content": "", "creation_timestamp": "2025-10-04T21:02:22.874517Z"}, {"uuid": "eaf4f843-2f89-4ee9-b3aa-f3d036a28c14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27598", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-18T13:31:23.000000Z"}, {"uuid": "e1f76c22-baa3-47f6-ac46-d49d906318d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27423", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-18T13:31:24.000000Z"}, {"uuid": "beb165da-4698-47ac-8c7b-7065f0b39b3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-20)", "content": "", "creation_timestamp": "2025-10-20T00:00:00.000000Z"}, {"uuid": "df512b23-e15d-46b2-85a7-58260aa88743", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27507", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-18T13:31:24.000000Z"}, {"uuid": "7221c2e6-2d38-4465-86d3-3d16aed9653b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27513", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-18T13:31:24.000000Z"}, {"uuid": "94cba59e-fbc4-489d-97fb-865317ff4579", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27624", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-18T13:31:24.000000Z"}, {"uuid": "8fc6219e-c55b-413b-9aad-073b26535d15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27412", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-18T13:31:24.000000Z"}, {"uuid": "efdfe5f6-5914-4678-ad47-a40b8fd9e992", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27497", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-18T13:31:24.000000Z"}, {"uuid": "f930da9a-5c74-4bb7-90e6-a09c4dc4de39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27909", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lwoysqsbfr2t", "content": "", "creation_timestamp": "2025-08-18T18:13:15.003638Z"}, {"uuid": "122de915-58a1-4c94-9ed2-1b95a354e0bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27888", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lwpcbq2haz2t", "content": "", "creation_timestamp": "2025-08-18T21:02:52.886978Z"}, {"uuid": "d4fac36f-9621-4a8e-a660-dd61815536d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2746", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m3xrj4i24r2a", "content": "", "creation_timestamp": "2025-10-24T21:02:37.594635Z"}, {"uuid": "c0819edc-cf38-4041-9edc-2f8333311a9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27091", "type": "seen", "source": "MISP/fc16b923-3a13-4e9d-9aac-10a57cac12c7", "content": "", "creation_timestamp": "2025-08-18T18:30:59.000000Z"}, {"uuid": "95867c70-45f4-49fc-b6ae-aaf501bf3458", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27516", "type": "seen", "source": "MISP/fc16b923-3a13-4e9d-9aac-10a57cac12c7", "content": "", "creation_timestamp": "2025-08-18T18:30:59.000000Z"}, {"uuid": "602388bb-e846-4586-950e-1938645aada1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27521", "type": "seen", "source": "MISP/fc16b923-3a13-4e9d-9aac-10a57cac12c7", "content": "", "creation_timestamp": "2025-08-18T18:31:00.000000Z"}, {"uuid": "b982c4c5-28e2-4091-9273-9ce74b07de96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27150", "type": "seen", "source": "MISP/fc16b923-3a13-4e9d-9aac-10a57cac12c7", "content": "", "creation_timestamp": "2025-08-18T18:31:00.000000Z"}, {"uuid": "a4fbd3db-c011-42d2-83d9-ebda630dca5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27401", "type": "seen", "source": "MISP/fc16b923-3a13-4e9d-9aac-10a57cac12c7", "content": "", "creation_timestamp": "2025-08-18T18:31:00.000000Z"}, {"uuid": "015e30d6-c623-4931-82f0-1575e6a8920b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27402", "type": "seen", "source": "MISP/fc16b923-3a13-4e9d-9aac-10a57cac12c7", "content": "", "creation_timestamp": "2025-08-18T18:31:00.000000Z"}, {"uuid": "35bee083-14e2-4161-8718-78536ed25274", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27510", "type": "seen", "source": "MISP/fc16b923-3a13-4e9d-9aac-10a57cac12c7", "content": "", "creation_timestamp": "2025-08-18T18:31:00.000000Z"}, {"uuid": "56e2290c-f9c2-47f0-848c-48f119d98a3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27364", "type": "seen", "source": "MISP/fc16b923-3a13-4e9d-9aac-10a57cac12c7", "content": "", "creation_timestamp": "2025-08-18T18:31:00.000000Z"}, {"uuid": "abdffc69-a2e2-45cf-82b5-12821db9e75b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27598", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-19T02:47:44.000000Z"}, {"uuid": "64855908-6842-48e8-bd99-676643de113d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27507", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-19T02:47:46.000000Z"}, {"uuid": "5f2f41aa-7fa1-4174-be6a-568380dd0942", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27497", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-19T02:47:48.000000Z"}, {"uuid": "ec0a4145-8656-447a-8d15-0cb1f802a412", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27513", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-19T02:47:48.000000Z"}, {"uuid": "18fa5a1a-af94-46f1-a2ac-49d33f06f85e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27624", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-19T02:47:48.000000Z"}, {"uuid": "a5af6d03-ece8-43ea-91e8-d4cdca972b4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27412", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-19T02:47:48.000000Z"}, {"uuid": "ac48bb4f-8fbf-4b04-8be3-37e61922e896", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27423", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-19T02:47:45.000000Z"}, {"uuid": "3dee847e-bfda-404a-861a-b68e2edfbbcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27812", "type": "seen", "source": "https://bsky.app/profile/leonjza.bsky.social/post/3lwq5cmqku225", "content": "", "creation_timestamp": "2025-08-19T05:06:26.424764Z"}, {"uuid": "c5e4c0f1-501f-4512-934b-f712187b5cb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27813", "type": "seen", "source": "https://bsky.app/profile/leonjza.bsky.social/post/3lwq5cmqku225", "content": "", "creation_timestamp": "2025-08-19T05:06:26.550220Z"}, {"uuid": "299a0391-c613-47e1-9b76-d21f8e471162", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27811", "type": "seen", "source": "https://bsky.app/profile/leonjza.bsky.social/post/3lwq5cmqku225", "content": "", "creation_timestamp": "2025-08-19T05:06:26.800408Z"}, {"uuid": "06485634-7e96-4e65-8283-8e0fe58d1d55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27434", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-19T04:06:31.000000Z"}, {"uuid": "c8a5aea0-60a8-449d-8a8e-424eb01e6a6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27816", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-19T04:06:31.000000Z"}, {"uuid": "5a8dd07b-c633-49fb-95de-03fe33f54a53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27925", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-19T04:06:31.000000Z"}, {"uuid": "85a52030-77f0-40b9-a552-5101f6e70531", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27615", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-19T04:06:32.000000Z"}, {"uuid": "bb7cc2ae-47ed-4974-9278-57715b3d8625", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27254", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-19T04:06:32.000000Z"}, {"uuid": "ce3eb35d-853e-40a9-93d9-f875f3aecd4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27255", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-19T04:06:32.000000Z"}, {"uuid": "0dafe0bc-1b18-4153-a2ef-e86412290713", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27257", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-19T04:06:32.000000Z"}, {"uuid": "37b252ef-6f88-42e4-91a3-c74274156289", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27607", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-19T04:06:32.000000Z"}, {"uuid": "92b36c50-a50b-440c-ae35-0a7dfa3adbf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27517", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-19T04:06:33.000000Z"}, {"uuid": "005830f3-61f5-4529-a929-f3b643736f20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-22)", "content": "", "creation_timestamp": "2025-10-22T00:00:00.000000Z"}, {"uuid": "1898f967-b38c-4de6-b65d-4adb559c21e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27915", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m2nsnnxhix2e", "content": "", "creation_timestamp": "2025-10-08T04:31:08.572850Z"}, {"uuid": "aaebfab5-3eb4-4536-b16d-6dd73ed09abf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27826", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-19T04:06:35.000000Z"}, {"uuid": "fe69f2ad-50c8-40bb-b93d-7e35e3186640", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27823", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-19T04:06:35.000000Z"}, {"uuid": "d14d6988-2fb5-4f96-bb34-6d5986dd0592", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27603", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-19T04:06:36.000000Z"}, {"uuid": "72a6bb0a-a738-491f-babe-6ff4d70b6656", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27519", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-19T04:06:36.000000Z"}, {"uuid": "ee5be086-033b-43a7-859b-1fb08550e506", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27622", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-19T04:06:36.000000Z"}, {"uuid": "09e96a32-ad5d-4b84-9708-8938471efad2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-18)", "content": "", "creation_timestamp": "2025-08-18T00:00:00.000000Z"}, {"uuid": "b121d725-1394-4244-b3db-dca51bd0267d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27585", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "d707faec-5921-4a30-85d0-a09d61ef0e71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27583", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "deaa55b7-999f-456c-8ea6-a811904da4b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27584", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "750210fa-a6de-4619-80c8-45cb5ffa233a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27110", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "9e6e0585-1658-4506-a7e8-25adebef572b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27811", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lwseanwnc52x", "content": "", "creation_timestamp": "2025-08-20T02:15:52.569893Z"}, {"uuid": "3c95bee0-d166-4b2f-9c7e-981a63ee8b3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27425", "type": "seen", "source": "MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72", "content": "", "creation_timestamp": "2025-08-19T13:26:45.000000Z"}, {"uuid": "71926d83-7c2a-4112-bbbf-d7fa59337434", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27554", "type": "seen", "source": "MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72", "content": "", "creation_timestamp": "2025-08-19T13:26:45.000000Z"}, {"uuid": "b203d6ff-47de-4db3-a2b3-dfcb0f9fbfb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27264", "type": "seen", "source": "MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72", "content": "", "creation_timestamp": "2025-08-19T13:26:45.000000Z"}, {"uuid": "4cc2d75d-b524-4941-939d-821fd9f2e65b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27263", "type": "seen", "source": "MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72", "content": "", "creation_timestamp": "2025-08-19T13:26:45.000000Z"}, {"uuid": "9cc651e2-b5d1-478e-85f2-d5b53b512b2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27270", "type": "seen", "source": "MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72", "content": "", "creation_timestamp": "2025-08-19T13:26:45.000000Z"}, {"uuid": "409713cd-ac05-48a3-a7ad-21ed79e45d9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27271", "type": "seen", "source": "MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72", "content": "", "creation_timestamp": "2025-08-19T13:26:45.000000Z"}, {"uuid": "e6a95a02-e7e4-4f8d-8e6e-0baa70c13128", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27278", "type": "seen", "source": "MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72", "content": "", "creation_timestamp": "2025-08-19T13:26:46.000000Z"}, {"uuid": "27840297-2762-49fe-9313-7f8b073d4510", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27094", "type": "seen", "source": "MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72", "content": "", "creation_timestamp": "2025-08-19T13:26:46.000000Z"}, {"uuid": "2f9d520c-6e9d-4be4-bd5f-fd6c262316f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27417", "type": "seen", "source": "MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72", "content": "", "creation_timestamp": "2025-08-19T13:26:46.000000Z"}, {"uuid": "133d347f-fd10-4df1-bcaf-41627b71c875", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27915", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-10-08T03:34:26.000000Z"}, {"uuid": "4916e357-8654-479e-8adc-f2a65883baa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27420", "type": "seen", "source": "MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72", "content": "", "creation_timestamp": "2025-08-19T13:26:46.000000Z"}, {"uuid": "21fc5eae-41f7-4d15-8b52-6bd4448b8733", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27419", "type": "seen", "source": "MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72", "content": "", "creation_timestamp": "2025-08-19T13:26:46.000000Z"}, {"uuid": "f6654132-0f74-43d7-ab09-a4dc439b928e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27421", "type": "seen", "source": "MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72", "content": "", "creation_timestamp": "2025-08-19T13:26:46.000000Z"}, {"uuid": "b454eee3-187e-446a-ae42-dc4d06dbf138", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27499", "type": "seen", "source": "MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72", "content": "", "creation_timestamp": "2025-08-19T13:26:46.000000Z"}, {"uuid": "ddc58040-0316-45f1-8642-36503db2f777", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-19)", "content": "", "creation_timestamp": "2025-08-19T00:00:00.000000Z"}, {"uuid": "31998f65-9e41-482b-9193-3a563d4f35a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2746", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m5tfyspy7k2b", "content": "", "creation_timestamp": "2025-11-17T14:16:20.151656Z"}, {"uuid": "2f986efc-a620-466d-aa84-6e667da72f7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27564", "type": "seen", "source": "https://infosec.place/objects/9b20d8a2-c575-410b-bac3-961774fd4ff5", "content": "", "creation_timestamp": "2025-08-20T13:30:11.092036Z"}, {"uuid": "17f1e2e0-ea1e-4897-9083-7baf7e1fd73a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27129", "type": "seen", "source": "https://infosec.place/objects/99b2cad4-193e-4e7b-87fd-d7dfa3ca58a5", "content": "", "creation_timestamp": "2025-08-20T13:30:28.154966Z"}, {"uuid": "2617018d-9291-46e1-b0c5-22c4602e010b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27129", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lwttv5unrn2u", "content": "", "creation_timestamp": "2025-08-20T16:28:25.722435Z"}, {"uuid": "2ca05fc8-abd3-4e18-ba64-fe2b6cc7dd1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27915", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-c3744166-48c8172eb5443a2a", "content": "", "creation_timestamp": "2025-10-06T18:19:42.287121Z"}, {"uuid": "eedeca67-ed1a-4e53-9538-4e8677e2929a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27215", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lwuuv45o6b2q", "content": "", "creation_timestamp": "2025-08-21T02:18:57.291985Z"}, {"uuid": "68439d28-d8eb-4898-9a5f-aecef4883b19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27217", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lwuv33h6u42u", "content": "", "creation_timestamp": "2025-08-21T02:22:17.801363Z"}, {"uuid": "5eaf43a0-8832-4519-a6f0-15f6ec9a4c92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27213", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lwuvslj7672t", "content": "", "creation_timestamp": "2025-08-21T02:35:26.771792Z"}, {"uuid": "1d147458-1a8e-4a81-99bf-2c862d7a2d4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27216", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lwuw3jx3qu2q", "content": "", "creation_timestamp": "2025-08-21T02:40:26.878896Z"}, {"uuid": "b9af3978-8f7f-461c-ac46-e54ce15476e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27214", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lwuwnhhd7q2n", "content": "", "creation_timestamp": "2025-08-21T02:50:28.169182Z"}, {"uuid": "f09af0be-919c-4cd7-8547-01efc3bc8aa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27778", "type": "seen", "source": "MISP/02fb130c-7874-4693-9b66-81ed91a2e996", "content": "", "creation_timestamp": "2025-08-21T03:19:26.000000Z"}, {"uuid": "1d8a8501-4b55-4750-869d-04c81dc1685a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27512", "type": "seen", "source": "MISP/02fb130c-7874-4693-9b66-81ed91a2e996", "content": "", "creation_timestamp": "2025-08-21T03:19:31.000000Z"}, {"uuid": "8b185bdc-438c-4c7b-b6ac-6b60ebb10d0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27018", "type": "seen", "source": "MISP/02fb130c-7874-4693-9b66-81ed91a2e996", "content": "", "creation_timestamp": "2025-08-21T03:19:27.000000Z"}, {"uuid": "efa1e6c3-7899-4245-98d7-81a38d4a68e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27407", "type": "seen", "source": "MISP/02fb130c-7874-4693-9b66-81ed91a2e996", "content": "", "creation_timestamp": "2025-08-21T03:19:28.000000Z"}, {"uuid": "c40818d2-e2c6-4ed1-93d2-837ad7a3a070", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "seen", "source": "MISP/02fb130c-7874-4693-9b66-81ed91a2e996", "content": "", "creation_timestamp": "2025-08-21T03:19:29.000000Z"}, {"uuid": "89846302-9268-432c-82fa-eef2f066676f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-20)", "content": "", "creation_timestamp": "2025-08-20T00:00:00.000000Z"}, {"uuid": "ba729090-3cb5-463c-b162-a6991e6eb5e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/technadu.com/post/3m46gvolnss2f", "content": "", "creation_timestamp": "2025-10-27T12:41:29.871292Z"}, {"uuid": "792bc92d-5224-4c45-aca5-2b1e563f0244", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-20)", "content": "", "creation_timestamp": "2025-08-20T00:00:00.000000Z"}, {"uuid": "b4a64f34-3727-4b00-b120-ce6dd9d68210", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27367", "type": "seen", "source": "MISP/853ff921-86fb-463b-bc2a-2860bf336b81", "content": "", "creation_timestamp": "2025-08-21T10:03:51.000000Z"}, {"uuid": "9afb6031-ca65-4b7d-85a3-d9147ca5afc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27043", "type": "seen", "source": "MISP/853ff921-86fb-463b-bc2a-2860bf336b81", "content": "", "creation_timestamp": "2025-08-21T10:03:54.000000Z"}, {"uuid": "c74ffc8d-ab2d-465a-8818-598559ff69eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27052", "type": "seen", "source": "MISP/853ff921-86fb-463b-bc2a-2860bf336b81", "content": "", "creation_timestamp": "2025-08-21T10:03:54.000000Z"}, {"uuid": "d8e60d0a-e882-4782-861b-ae05db1e76cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27057", "type": "seen", "source": "MISP/853ff921-86fb-463b-bc2a-2860bf336b81", "content": "", "creation_timestamp": "2025-08-21T10:03:54.000000Z"}, {"uuid": "3c0c05a7-c61e-4720-890e-0351a046910c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27061", "type": "seen", "source": "MISP/853ff921-86fb-463b-bc2a-2860bf336b81", "content": "", "creation_timestamp": "2025-08-21T10:03:54.000000Z"}, {"uuid": "921931ec-9435-403b-ac96-c7b499f61892", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27056", "type": "seen", "source": "MISP/853ff921-86fb-463b-bc2a-2860bf336b81", "content": "", "creation_timestamp": "2025-08-21T10:03:54.000000Z"}, {"uuid": "25d2c74e-3c0b-4020-90d3-f96d704dc289", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27058", "type": "seen", "source": "MISP/853ff921-86fb-463b-bc2a-2860bf336b81", "content": "", "creation_timestamp": "2025-08-21T10:03:54.000000Z"}, {"uuid": "79f8d15c-3c16-4332-99d7-9c8a91349f7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27920", "type": "seen", "source": "MISP/853ff921-86fb-463b-bc2a-2860bf336b81", "content": "", "creation_timestamp": "2025-08-21T10:03:55.000000Z"}, {"uuid": "b27871f4-d0bf-42bc-a7ab-86ef7a0df702", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27042", "type": "seen", "source": "MISP/853ff921-86fb-463b-bc2a-2860bf336b81", "content": "", "creation_timestamp": "2025-08-21T10:03:54.000000Z"}, {"uuid": "e9b232c1-76f0-4b74-820f-a74c2abb0b85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27051", "type": "seen", "source": "MISP/853ff921-86fb-463b-bc2a-2860bf336b81", "content": "", "creation_timestamp": "2025-08-21T10:03:54.000000Z"}, {"uuid": "a5c333a8-0790-4d6c-b475-7fec0f8793aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27237", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m2ki6fv55c2b", "content": "", "creation_timestamp": "2025-10-06T20:45:42.250853Z"}, {"uuid": "a23954bb-9088-423c-ab5e-1e438ff6fce3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-6a482800-57bbc8edd5d9803c", "content": "", "creation_timestamp": "2025-11-19T07:38:11.829617Z"}, {"uuid": "c1c2095c-52e1-45d1-9fdd-5ab6bd555e3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27340", "type": "seen", "source": "MISP/8e1b6542-ae86-4729-a7a6-4e9f670b8bb7", "content": "", "creation_timestamp": "2025-08-22T17:25:06.000000Z"}, {"uuid": "57137009-1b13-429b-a783-51b39680fb08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27339", "type": "seen", "source": "MISP/8e1b6542-ae86-4729-a7a6-4e9f670b8bb7", "content": "", "creation_timestamp": "2025-08-22T17:25:06.000000Z"}, {"uuid": "d1e5c94d-d76a-40b2-9d89-21f4cd1611a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27336", "type": "seen", "source": "MISP/8e1b6542-ae86-4729-a7a6-4e9f670b8bb7", "content": "", "creation_timestamp": "2025-08-22T17:25:06.000000Z"}, {"uuid": "528f35a4-50bf-408a-b74f-f294af0817a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27335", "type": "seen", "source": "MISP/8e1b6542-ae86-4729-a7a6-4e9f670b8bb7", "content": "", "creation_timestamp": "2025-08-22T17:25:06.000000Z"}, {"uuid": "a47df126-963e-4dc7-a2c2-d17e61b0f778", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27355", "type": "seen", "source": "MISP/8e1b6542-ae86-4729-a7a6-4e9f670b8bb7", "content": "", "creation_timestamp": "2025-08-22T17:25:06.000000Z"}, {"uuid": "9ed4254c-1ca7-48b3-b6f4-b756996cc6fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27353", "type": "seen", "source": "MISP/8e1b6542-ae86-4729-a7a6-4e9f670b8bb7", "content": "", "creation_timestamp": "2025-08-22T17:25:06.000000Z"}, {"uuid": "c3ab8e92-a35a-4277-b584-a043bf3c0e01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27352", "type": "seen", "source": "MISP/8e1b6542-ae86-4729-a7a6-4e9f670b8bb7", "content": "", "creation_timestamp": "2025-08-22T17:25:06.000000Z"}, {"uuid": "c1b2dcea-351d-4c24-9a08-644996738d2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27148", "type": "seen", "source": "MISP/af1fbe07-e10c-40c4-844e-d4419bdf6f80", "content": "", "creation_timestamp": "2025-08-22T13:26:18.000000Z"}, {"uuid": "ab00e96c-a1f3-4604-a918-9ffe0c90aca9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27157", "type": "seen", "source": "MISP/24306fae-b16b-4478-9297-d2973cdb583c", "content": "", "creation_timestamp": "2025-08-22T14:52:22.000000Z"}, {"uuid": "97d85e64-0e76-4892-bfa8-a7a3c318d57a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27139", "type": "seen", "source": "MISP/24306fae-b16b-4478-9297-d2973cdb583c", "content": "", "creation_timestamp": "2025-08-22T14:52:23.000000Z"}, {"uuid": "ce03de4b-a78a-42df-8cf0-196e82be8c96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27142", "type": "seen", "source": "MISP/24306fae-b16b-4478-9297-d2973cdb583c", "content": "", "creation_timestamp": "2025-08-22T14:52:23.000000Z"}, {"uuid": "042bd747-675e-48ca-be40-690c3e87508b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27351", "type": "seen", "source": "MISP/8e1b6542-ae86-4729-a7a6-4e9f670b8bb7", "content": "", "creation_timestamp": "2025-08-22T17:25:06.000000Z"}, {"uuid": "3e14b123-5018-4189-b99b-8f5f5cba17d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27349", "type": "seen", "source": "MISP/8e1b6542-ae86-4729-a7a6-4e9f670b8bb7", "content": "", "creation_timestamp": "2025-08-22T17:25:06.000000Z"}, {"uuid": "4099e0aa-08db-4411-a462-94e43bff8307", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27348", "type": "seen", "source": "MISP/8e1b6542-ae86-4729-a7a6-4e9f670b8bb7", "content": "", "creation_timestamp": "2025-08-22T17:25:06.000000Z"}, {"uuid": "820b339f-13bc-49e2-9ddb-8f8f910f5a47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27000", "type": "seen", "source": "MISP/8e1b6542-ae86-4729-a7a6-4e9f670b8bb7", "content": "", "creation_timestamp": "2025-08-22T17:25:06.000000Z"}, {"uuid": "0e6906b4-467b-425c-bcf5-1ecb0cc18b6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27400", "type": "seen", "source": "MISP/af1fbe07-e10c-40c4-844e-d4419bdf6f80", "content": "", "creation_timestamp": "2025-08-22T13:26:18.000000Z"}, {"uuid": "1e98f5f5-254c-4d73-9489-6447d9c581e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27399", "type": "seen", "source": "MISP/24306fae-b16b-4478-9297-d2973cdb583c", "content": "", "creation_timestamp": "2025-08-22T14:52:22.000000Z"}, {"uuid": "bdcd3313-785c-403b-92a8-ac02b279ea26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27140", "type": "seen", "source": "MISP/24306fae-b16b-4478-9297-d2973cdb583c", "content": "", "creation_timestamp": "2025-08-22T14:52:23.000000Z"}, {"uuid": "599d4c52-5170-430c-90c9-922ee213eccf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-07)", "content": "", "creation_timestamp": "2025-10-07T00:00:00.000000Z"}, {"uuid": "53ac8700-6f9b-4eba-aa2f-21f7c99f440b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-10)", "content": "", "creation_timestamp": "2025-10-10T00:00:00.000000Z"}, {"uuid": "58a801e2-8277-43b5-a86b-5e302730807f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-08)", "content": "", "creation_timestamp": "2025-09-08T00:00:00.000000Z"}, {"uuid": "c96f1a66-326f-4b65-9da1-bedcb3983924", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-22)", "content": "", "creation_timestamp": "2025-08-22T00:00:00.000000Z"}, {"uuid": "278e7ee3-819c-437b-9c68-7e7d3b6ba112", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/115447015760144960", "content": "", "creation_timestamp": "2025-10-27T16:14:21.692787Z"}, {"uuid": "43ea3e43-efa2-4595-b80c-fcb7e21ba9aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27466", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lylasqe4262g", "content": "", "creation_timestamp": "2025-09-11T17:16:09.069223Z"}, {"uuid": "6f63197d-7b43-4eb7-93fd-28e796387267", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://threatintel.cc/2025/10/27/chrome-zeroday-exploitation-linked-to.html", "content": "", "creation_timestamp": "2025-10-27T15:14:27.000000Z"}, {"uuid": "aea8cd5e-bf82-4eb9-b0b9-f983d0e61ef9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27915", "type": "seen", "source": "https://bsky.app/profile/mmarcoseguridad.bsky.social/post/3m3ugectw7t2k", "content": "", "creation_timestamp": "2025-10-23T13:05:00.846352Z"}, {"uuid": "a3c278ae-a3af-4f25-abc2-b945be672eb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/matricedigitale.bsky.social/post/3m46vog2wwd24", "content": "", "creation_timestamp": "2025-10-27T17:05:43.005073Z"}, {"uuid": "42862c99-3a5f-47b7-a2c6-2bdcde5a373d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27915", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3m2gxk6icnr2x", "content": "", "creation_timestamp": "2025-10-05T11:10:02.750777Z"}, {"uuid": "db7a3155-8cb8-40d4-98cc-8b382c8b4dd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-2783", "type": "seen", "source": "https://infosec.exchange/users/defendopsdiaries/statuses/115447242022952263", "content": "", "creation_timestamp": "2025-10-27T17:11:54.937046Z"}, {"uuid": "752afc46-e1e2-474f-93a6-36f0e08acfe1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27225", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m473dhqctu2p", "content": "", "creation_timestamp": "2025-10-27T18:46:57.372151Z"}, {"uuid": "5eb752b0-59a4-4ea3-88df-b19cf161e0ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27224", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m473jc2hwf23", "content": "", "creation_timestamp": "2025-10-27T18:50:12.924171Z"}, {"uuid": "0e164323-f56c-4334-ac1c-951bd19f2526", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27314", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lzj6wmrfyc2y", "content": "", "creation_timestamp": "2025-09-23T15:02:26.930775Z"}, {"uuid": "f9b9563c-3249-471f-acdc-2b6c54cec7b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27915", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3m2kxtpxwsc2a", "content": "", "creation_timestamp": "2025-10-07T01:26:02.108338Z"}, {"uuid": "36ef4032-1444-48e5-8fcc-eb2b842d7ba7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27222", "type": "seen", "source": "https://bsky.app/profile/rcesecurity.com/post/3m22ui2mis22w", "content": "", "creation_timestamp": "2025-09-30T15:43:13.637429Z"}, {"uuid": "20e7fbbd-ca84-4a41-887e-5bfca4e47d0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27225", "type": "seen", "source": "https://bsky.app/profile/rcesecurity.com/post/3m22ui2mis22w", "content": "", "creation_timestamp": "2025-09-30T15:43:13.738077Z"}, {"uuid": "73bf92ce-5543-4214-b988-9f4b5167b43a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-24)", "content": "", "creation_timestamp": "2025-10-24T00:00:00.000000Z"}, {"uuid": "050751e7-2be7-4381-b99f-7240ea56ba06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3m47bc3ca3vl2", "content": "", "creation_timestamp": "2025-10-27T20:34:13.113362Z"}, {"uuid": "61f9d190-3ffd-4c55-8927-b1c9ff40051f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27519", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lx6f2o3fi42m", "content": "", "creation_timestamp": "2025-08-24T21:02:23.941495Z"}, {"uuid": "87f57852-a6a0-4f99-b64e-975606dfec6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27222", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m47fl2gdfg2p", "content": "", "creation_timestamp": "2025-10-27T21:50:09.436531Z"}, {"uuid": "168ca58f-1c0c-4e5f-9e05-d2a124bd801e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-27915", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3m2i27vbgev2e", "content": "", "creation_timestamp": "2025-10-05T21:30:38.239035Z"}, {"uuid": "4c29c3f0-7fa2-46d3-a1dd-751c7ffc8b77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/115424694369254779", "content": "", "creation_timestamp": "2025-10-23T17:37:45.665864Z"}, {"uuid": "9f01c1b5-d4b6-4bdf-b031-2ea2a23a66ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2778", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/115424694369254779", "content": "", "creation_timestamp": "2025-10-23T17:37:45.920382Z"}, {"uuid": "d0683f70-c483-4f8d-8041-d287bf0368e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2747", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m3qa4bjo7g2g", "content": "", "creation_timestamp": "2025-10-21T21:02:35.426985Z"}, {"uuid": "5c25ba3a-4c2d-4744-88e9-76527cc85de0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/115424694369254779", "content": "", "creation_timestamp": "2025-10-23T17:37:45.755216Z"}, {"uuid": "c9533b1e-10c7-4eb4-8bf4-dd8dd97a055a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2777", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/115424694369254779", "content": "", "creation_timestamp": "2025-10-23T17:37:45.837502Z"}, {"uuid": "cd70ceeb-2bfd-4859-a9b3-5970a997a473", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27505", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-24)", "content": "", "creation_timestamp": "2025-11-24T00:00:00.000000Z"}, {"uuid": "3aef552c-3541-4be5-b6f7-b939f4d52d22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2746", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m3qa4bhbx526", "content": "", "creation_timestamp": "2025-10-21T21:02:34.847567Z"}, {"uuid": "ff97dd2e-d692-4d16-af15-7fd43ec8276f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2790", "type": "seen", "source": "MISP/a3c5beab-b790-4171-8b4c-02c8a9678071", "content": "", "creation_timestamp": "2025-09-09T11:53:44.000000Z"}, {"uuid": "8ce835c0-426c-4489-a660-3d6be0e2a4c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27212", "type": "seen", "source": "MISP/a3c5beab-b790-4171-8b4c-02c8a9678071", "content": "", "creation_timestamp": "2025-09-09T11:53:45.000000Z"}, {"uuid": "10b44369-553a-4355-8b0d-e6c696534c46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-27915", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3m2ijwljrrg2s", "content": "", "creation_timestamp": "2025-10-06T02:11:45.695628Z"}, {"uuid": "592bee1e-29d8-4407-ab73-9fa1e4923fa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-14)", "content": "", "creation_timestamp": "2025-11-14T00:00:00.000000Z"}, {"uuid": "bcceeb06-0944-4dd3-a48f-659bfcb0e57b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-24)", "content": "", "creation_timestamp": "2025-08-24T00:00:00.000000Z"}, {"uuid": "6414ebe3-6d21-4850-a849-510e81dc1676", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27096", "type": "seen", "source": "MISP/9ca82492-7deb-4197-a6f1-191e121eef96", "content": "", "creation_timestamp": "2025-08-25T13:32:05.000000Z"}, {"uuid": "fce4ca3d-b681-49a0-b308-b335f49992b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27092", "type": "seen", "source": "MISP/9ca82492-7deb-4197-a6f1-191e121eef96", "content": "", "creation_timestamp": "2025-08-25T13:32:05.000000Z"}, {"uuid": "cbeff052-71bf-44a4-aeb0-cdff4dbe1534", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27466", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lyfqfwfcr627", "content": "", "creation_timestamp": "2025-09-09T12:39:20.191015Z"}, {"uuid": "d785a027-7ad1-4bad-8fda-0dca37ed449c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27237", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m2izeyov7l2t", "content": "", "creation_timestamp": "2025-10-06T06:48:15.252784Z"}, {"uuid": "19f2bd48-9cfa-4c2f-bad2-7f571a5b4d52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27368", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m5hfv756o52x", "content": "", "creation_timestamp": "2025-11-12T19:42:19.271051Z"}, {"uuid": "a7c83198-7f9a-4d96-937d-6a66a77e3af3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27915", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3m2j2nfi7w526", "content": "", "creation_timestamp": "2025-10-06T07:10:51.354644Z"}, {"uuid": "7b897b35-84f9-406a-8dd9-f51835e852a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27915", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3m2j2wmpo4e2u", "content": "", "creation_timestamp": "2025-10-06T07:16:01.539123Z"}, {"uuid": "eb55f042-c06e-4456-be67-334ec97fbfa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27915", "type": "seen", "source": "https://bsky.app/profile/infosecindustry.bsky.social/post/3m2j34o7nbu2k", "content": "", "creation_timestamp": "2025-10-06T07:19:23.228127Z"}, {"uuid": "5c5d2e42-69eb-4e33-952e-93f46fda51b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27505", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-27)", "content": "", "creation_timestamp": "2025-11-27T00:00:00.000000Z"}, {"uuid": "99c8f3f1-17b5-4a4c-a5af-dbacf01697d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27916", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115503931619214286", "content": "", "creation_timestamp": "2025-11-06T17:28:48.972941Z"}, {"uuid": "247b5ef9-02aa-419e-ae92-7cd0eb8acfa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27917", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115503931619214286", "content": "", "creation_timestamp": "2025-11-06T17:28:49.108273Z"}, {"uuid": "fa4b90a1-c165-48b8-be30-ac9325a6b67f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27918", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115503931619214286", "content": "", "creation_timestamp": "2025-11-06T17:28:49.197861Z"}, {"uuid": "d3e92916-417c-4f77-bfc2-ad76bdb5b066", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27919", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115503931619214286", "content": "", "creation_timestamp": "2025-11-06T17:28:49.278871Z"}, {"uuid": "d8d690c9-a7e3-488b-94af-b5df8688256e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27466", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q3/157", "content": "", "creation_timestamp": "2025-09-09T10:02:48.000000Z"}, {"uuid": "d5e9d442-d08e-462d-8255-bfecd0805749", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-26)", "content": "", "creation_timestamp": "2025-08-26T00:00:00.000000Z"}, {"uuid": "582b223d-a02a-4114-897a-1042ceea244e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-27)", "content": "", "creation_timestamp": "2025-08-27T00:00:00.000000Z"}, {"uuid": "5dadaa84-9a90-4302-9aa9-bc535f7cd8ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27505", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-01)", "content": "", "creation_timestamp": "2025-12-01T00:00:00.000000Z"}, {"uuid": "9f8e9dbb-75f8-41b8-bb1e-7102fd93432a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-30)", "content": "", "creation_timestamp": "2025-09-30T00:00:00.000000Z"}, {"uuid": "6da27368-2489-4bf1-8765-5527dc3dbdbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-28)", "content": "", "creation_timestamp": "2025-08-28T00:00:00.000000Z"}, {"uuid": "3d9d0eee-3ab0-483b-836a-2d0cf55c69a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2747", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m42bxwf4b32e", "content": "", "creation_timestamp": "2025-10-25T21:02:28.547405Z"}, {"uuid": "7b5b91d6-4756-44c6-a902-e1689ee1fdbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-2783", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3m47ztem74b2i", "content": "", "creation_timestamp": "2025-10-28T03:52:43.427561Z"}, {"uuid": "b4985f2a-331b-4a6a-b8ae-05f674d84697", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27789", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3m6mmbvm3sc2c", "content": "", "creation_timestamp": "2025-11-27T14:45:18.630116Z"}, {"uuid": "d9080457-1a2c-4bc9-a394-9477edbcd230", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27520", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/bentoml_rce_cve_2025_27520.rb", "content": "", "creation_timestamp": "2025-04-16T13:31:17.000000Z"}, {"uuid": "479c7be5-925a-4523-a137-6b2586e3c80d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27223", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m3iophmuvp26", "content": "", "creation_timestamp": "2025-10-18T21:02:32.149861Z"}, {"uuid": "20625c8c-183e-4a8b-806e-957b6eec1ccc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m4aacwxpn32h", "content": "", "creation_timestamp": "2025-10-28T05:48:48.574007Z"}, {"uuid": "ea3c82d1-3adb-4400-81ff-c271e25394e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27233", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lynjd5mnjp2x", "content": "", "creation_timestamp": "2025-09-12T14:53:48.914461Z"}, {"uuid": "25fa1a33-04fd-41a0-bba4-3ab7205cd9ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27234", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lynjhzyihw2m", "content": "", "creation_timestamp": "2025-09-12T14:56:32.897734Z"}, {"uuid": "6fda9915-8788-426c-82c5-8ee0068b3ae4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-30)", "content": "", "creation_timestamp": "2025-08-30T00:00:00.000000Z"}, {"uuid": "14ab2480-5c13-4f47-ae27-07f59391d52d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27238", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lynjtf252q2a", "content": "", "creation_timestamp": "2025-09-12T15:02:53.549421Z"}, {"uuid": "7a524262-944d-443d-ad1f-8d8379e8ec4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "MISP/e0a0042d-e47b-4875-b781-99d4428af3c2", "content": "", "creation_timestamp": "2025-09-09T20:51:35.000000Z"}, {"uuid": "1744a086-d444-4fd6-9b83-687ccf2bd8b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "seen", "source": "MISP/e0a0042d-e47b-4875-b781-99d4428af3c2", "content": "", "creation_timestamp": "2025-09-09T20:51:36.000000Z"}, {"uuid": "26feaef9-d12e-4032-b18e-23cd727368c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2777", "type": "seen", "source": "MISP/e0a0042d-e47b-4875-b781-99d4428af3c2", "content": "", "creation_timestamp": "2025-09-09T20:51:36.000000Z"}, {"uuid": "eb06d6be-8323-47dc-9862-86891697fd9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27930", "type": "seen", "source": "MISP/2bceffac-02c3-4c54-a709-6e253b38ec76", "content": "", "creation_timestamp": "2025-09-09T20:56:42.000000Z"}, {"uuid": "53f2660f-3a09-4506-8bf7-e5c3703dc2e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27410", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lxpyd4pp6i2p", "content": "", "creation_timestamp": "2025-08-31T21:02:22.733906Z"}, {"uuid": "c6cb8f80-f33b-4908-89c4-4b8038e35d24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-31)", "content": "", "creation_timestamp": "2025-08-31T00:00:00.000000Z"}, {"uuid": "73c6e429-fa0d-4531-82ca-faf54530cffa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27240", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lynlfl7ys52x", "content": "", "creation_timestamp": "2025-09-12T15:30:57.660489Z"}, {"uuid": "87543e30-d4c8-4973-9a57-7158e9cbef18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27357", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lxsnmuicl22s", "content": "", "creation_timestamp": "2025-09-01T22:29:00.226651Z"}, {"uuid": "acaaf533-5f24-4d2e-a186-7efceab68760", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27466", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lynqavxqvs2i", "content": "", "creation_timestamp": "2025-09-12T16:57:52.417948Z"}, {"uuid": "4babe085-29fd-4f27-921d-6b757412fdc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27034", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lxtjeltk4r2q", "content": "", "creation_timestamp": "2025-09-02T06:45:24.295044Z"}, {"uuid": "d5072de5-df28-48f9-9b62-7ec03af9b333", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-01)", "content": "", "creation_timestamp": "2025-09-01T00:00:00.000000Z"}, {"uuid": "aad4e6f8-2c98-4263-a1ce-9201d6bb8f3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27034", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3lxuja4d45225", "content": "", "creation_timestamp": "2025-09-02T16:15:52.118871Z"}, {"uuid": "c9ab4a5b-5609-4de5-af01-ff36849875f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lxuzbd3g4q2o", "content": "", "creation_timestamp": "2025-09-02T21:02:37.867036Z"}, {"uuid": "fbe0f681-b0c6-44db-8fbd-22c7201d7715", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-17)", "content": "", "creation_timestamp": "2025-11-17T00:00:00.000000Z"}, {"uuid": "bceb1c1f-bedd-4cda-843d-948ee5421242", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_suretriggers_auth_bypass.rb", "content": "", "creation_timestamp": "2025-05-13T16:01:34.000000Z"}, {"uuid": "b40429fb-187a-400a-95c4-a73f23bae385", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27480", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lxxjpvva6t2o", "content": "", "creation_timestamp": "2025-09-03T21:02:26.895283Z"}, {"uuid": "5d6778de-49b7-475a-8295-30312702332b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-03)", "content": "", "creation_timestamp": "2025-09-03T00:00:00.000000Z"}, {"uuid": "c3cc6074-3f83-4cca-8b0a-bc3e7d6bef3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27915", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m2pk255vjh2a", "content": "", "creation_timestamp": "2025-10-08T21:02:26.723287Z"}, {"uuid": "5ee6a663-63ef-48b6-b574-263c1abf1084", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-01)", "content": "", "creation_timestamp": "2026-03-01T00:00:00.000000Z"}, {"uuid": "ec8888ba-de75-47bd-8dc7-d97813cc7741", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27505", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-02)", "content": "", "creation_timestamp": "2025-12-02T00:00:00.000000Z"}, {"uuid": "91223763-f34c-41d2-ad8e-5386c70e55c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-23)", "content": "", "creation_timestamp": "2026-02-23T00:00:00.000000Z"}, {"uuid": "c9c9fbcf-861f-4fc3-ace7-0c780b96d17a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27935", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m775m5hmj62s", "content": "", "creation_timestamp": "2025-12-04T23:43:10.974340Z"}, {"uuid": "e8845a8a-37ce-49a6-8521-e1d442ebf33d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-31)", "content": "", "creation_timestamp": "2026-01-31T00:00:00.000000Z"}, {"uuid": "003a7a6c-ce6c-4453-84e1-b18b36c8709c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27821", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mdvrtrbvic27", "content": "", "creation_timestamp": "2026-02-02T21:24:42.261664Z"}, {"uuid": "e7d4c62b-4782-44c0-af99-c41921819ea2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27218", "type": "seen", "source": "https://gist.github.com/alon710/9849391622ca37e3297bcf77f60b5866", "content": "", "creation_timestamp": "2026-01-30T16:10:50.000000Z"}, {"uuid": "db01ef9d-6b36-477b-8de7-229f5a9ce858", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-07)", "content": "", "creation_timestamp": "2025-12-07T00:00:00.000000Z"}, {"uuid": "074faef0-bb22-4cd6-9501-0fdaa7ee089b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-15)", "content": "", "creation_timestamp": "2026-02-15T00:00:00.000000Z"}, {"uuid": "ad80f5a6-c7d3-42b7-a7c0-e88f99f12860", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-27020", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/115683378604748339", "content": "", "creation_timestamp": "2025-12-08T10:04:34.418939Z"}, {"uuid": "250fb8a1-1a16-40cf-9829-438b6459921d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-27020", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3m7hrq2ex252l", "content": "", "creation_timestamp": "2025-12-08T10:04:35.307175Z"}, {"uuid": "8cb3b827-6e42-473e-a83f-91adcce0b5a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27019", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m7husodd2t2j", "content": "", "creation_timestamp": "2025-12-08T10:59:43.862009Z"}, {"uuid": "df7428d3-870a-441f-912a-f105f32c2d27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27020", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m7hvnjnhip2j", "content": "", "creation_timestamp": "2025-12-08T11:14:44.985519Z"}, {"uuid": "aeb93826-4be0-4e08-abd7-9f150f620a6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27020", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115684281889620141", "content": "", "creation_timestamp": "2025-12-08T13:54:16.089792Z"}, {"uuid": "0b472127-61bb-4e1d-8269-e7fae48ea0f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27019", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115684281889620141", "content": "", "creation_timestamp": "2025-12-08T13:54:16.168951Z"}, {"uuid": "11b8b4d4-2b86-407b-b912-2941a4213896", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27019", "type": "seen", "source": "https://bsky.app/profile/cyber-news-fi.bsky.social/post/3m7jngzwk3v2f", "content": "", "creation_timestamp": "2025-12-09T03:53:17.390077Z"}, {"uuid": "6677b552-33e6-4199-906a-6f69ef5daac7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-08)", "content": "", "creation_timestamp": "2025-12-08T00:00:00.000000Z"}, {"uuid": "2b14da5c-79af-458e-af1c-b6bcc599d79f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-03)", "content": "", "creation_timestamp": "2026-03-03T00:00:00.000000Z"}, {"uuid": "37dd4876-c3f2-447b-be62-29d42fe22f21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-09)", "content": "", "creation_timestamp": "2025-12-09T00:00:00.000000Z"}, {"uuid": "537b456f-ff18-4997-a7f2-c4fc3260895a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27516", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3m7nkfsgyu22o", "content": "", "creation_timestamp": "2025-12-10T17:09:34.792370Z"}, {"uuid": "e4775edf-9eb4-458c-a336-b15db535c189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-27591", "type": "seen", "source": "https://bsky.app/profile/Ubuntu.activitypub.awakari.com.ap.brid.gy/post/3m7pxxuttzgs2", "content": "", "creation_timestamp": "2025-12-11T16:18:48.521206Z"}, {"uuid": "858624f8-4599-4dfd-85cc-bf31bf9e8d6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27920", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mea3gieerc2z", "content": "", "creation_timestamp": "2026-02-06T23:42:52.316050Z"}, {"uuid": "627a9743-7ca2-4c30-a95a-fb7744ffad32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2752", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116071567901694245", "content": "", "creation_timestamp": "2026-02-14T23:26:13.051753Z"}, {"uuid": "f68263c9-d665-48d7-bad4-25e7ffa6622e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27587", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-043-06", "content": "", "creation_timestamp": "2026-02-12T11:00:00.000000Z"}, {"uuid": "75e77d15-5012-41bf-bd40-be919f984fe6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-09)", "content": "", "creation_timestamp": "2026-02-09T00:00:00.000000Z"}, {"uuid": "e5cd082f-591f-48a8-9934-b6145212eefe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-043-03", "content": "", "creation_timestamp": "2026-02-12T11:00:00.000000Z"}, {"uuid": "066004e5-cb6e-4a48-9f5a-041fffd874ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27234", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3meemdib5qs2u", "content": "", "creation_timestamp": "2026-02-08T18:56:08.621532Z"}, {"uuid": "8e3d5921-405d-4ddc-a452-6cbb0a1b7fb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27555", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfmavwexlu2v", "content": "", "creation_timestamp": "2026-02-24T13:18:06.990638Z"}, {"uuid": "482c1c07-93f9-4d6f-8c26-f9339aabd80e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27505", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-13)", "content": "", "creation_timestamp": "2025-12-13T00:00:00.000000Z"}, {"uuid": "311162cf-4160-400b-a3e7-d3ddce2b9fdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-14)", "content": "", "creation_timestamp": "2025-12-14T00:00:00.000000Z"}, {"uuid": "3d6c5598-4c65-4301-a67a-75d5d93bd9a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-09)", "content": "", "creation_timestamp": "2026-03-09T00:00:00.000000Z"}, {"uuid": "ef05ffd1-3816-4ae0-9d77-947f069a39ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-21)", "content": "", "creation_timestamp": "2026-02-21T00:00:00.000000Z"}, {"uuid": "f6eb15f5-a7ac-421e-9440-2e03882c4d70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27505", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-16)", "content": "", "creation_timestamp": "2025-12-16T00:00:00.000000Z"}, {"uuid": "27752b60-383a-4553-aedd-37c0a2419403", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27506", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mg6o5jlusx2v", "content": "", "creation_timestamp": "2026-03-03T21:02:56.311939Z"}, {"uuid": "6bdc9da4-a3f0-422a-90c1-d883234f57c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-6525a1c3-c909364fda6a95df", "content": "", "creation_timestamp": "2025-12-17T12:11:21.624479Z"}, {"uuid": "db641e78-0946-4726-bebb-3ea22083e3ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3ma6ndbbvcpm2", "content": "", "creation_timestamp": "2025-12-17T12:19:40.734842Z"}, {"uuid": "a5d137de-970d-45bd-a343-700f5a67292c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27555", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mfk47clem722", "content": "", "creation_timestamp": "2026-02-23T16:48:37.095438Z"}, {"uuid": "6053ea60-e6dd-423c-b9c7-35ff262cc5dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27063", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/115739535938360152", "content": "", "creation_timestamp": "2025-12-18T08:06:05.437433Z"}, {"uuid": "79a444c1-10d4-4599-b6b9-976b5dcc6b97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-24)", "content": "", "creation_timestamp": "2026-02-24T00:00:00.000000Z"}, {"uuid": "d6d57cf9-d245-4f92-8e21-781987883b7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27505", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-17)", "content": "", "creation_timestamp": "2025-12-17T00:00:00.000000Z"}, {"uuid": "8bd86a5b-6a9f-4874-8f87-31bb795bbf58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-06)", "content": "", "creation_timestamp": "2026-03-06T00:00:00.000000Z"}, {"uuid": "e61ef9c5-d149-4b9f-92f3-0efdba1c4ae8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-01)", "content": "", "creation_timestamp": "2026-02-01T00:00:00.000000Z"}, {"uuid": "f4d606a8-0dbd-4f23-a5b7-6ccb5f4caf80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-30)", "content": "", "creation_timestamp": "2026-01-30T00:00:00.000000Z"}, {"uuid": "939bbbf2-c7c5-4df9-9642-27e9086636c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-28)", "content": "", "creation_timestamp": "2026-01-28T00:00:00.000000Z"}, {"uuid": "504ba0e4-1333-438b-9797-bda74f06b4aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27505", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-18)", "content": "", "creation_timestamp": "2025-12-18T00:00:00.000000Z"}, {"uuid": "5038d6f5-cf90-45f1-aa89-2eb378795996", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27505", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-19)", "content": "", "creation_timestamp": "2025-12-19T00:00:00.000000Z"}, {"uuid": "a0dfc5a5-b674-4723-b207-a1e9875cda15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-05)", "content": "", "creation_timestamp": "2026-03-05T00:00:00.000000Z"}, {"uuid": "5753d238-7a35-48d0-86c8-6b6c5986f0e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-29)", "content": "", "creation_timestamp": "2026-01-29T00:00:00.000000Z"}, {"uuid": "f09e84e6-b235-4910-86aa-2bec3fb0dfe2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-19)", "content": "", "creation_timestamp": "2026-02-19T00:00:00.000000Z"}, {"uuid": "07b16033-2823-4d23-b8fc-d67cebbd1d9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-20)", "content": "", "creation_timestamp": "2026-02-20T00:00:00.000000Z"}, {"uuid": "8a9603fe-2ef6-4331-805f-c6bcc2b25530", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-28)", "content": "", "creation_timestamp": "2026-02-28T00:00:00.000000Z"}, {"uuid": "1689ae3d-95a1-4180-aaf2-a09904987ad4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27789", "type": "seen", "source": "https://gist.github.com/jrvssingh-cpu/5ca4be6b05f749c6962d84fae197cdc9", "content": "", "creation_timestamp": "2026-02-25T10:55:46.000000Z"}, {"uuid": "956eb19e-e197-4620-b8bd-0eea3f0c1378", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27221", "type": "seen", "source": "https://bsky.app/profile/euvd-bot.bsky.social/post/3mbadzrajcr2e", "content": "", "creation_timestamp": "2025-12-30T22:01:13.326969Z"}, {"uuid": "24f2147e-7986-4531-8ef1-ab4c2d7b2e77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-27)", "content": "", "creation_timestamp": "2026-02-27T00:00:00.000000Z"}, {"uuid": "1b2abb7e-fd24-4367-9fa0-daf2bce2298a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27505", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-02)", "content": "", "creation_timestamp": "2026-01-02T00:00:00.000000Z"}, {"uuid": "c0cef123-3daf-492c-8243-5ad9147b38b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-25)", "content": "", "creation_timestamp": "2026-02-25T00:00:00.000000Z"}, {"uuid": "17cdb81a-797c-4ccd-90a9-fe4053733562", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-12)", "content": "", "creation_timestamp": "2026-02-12T00:00:00.000000Z"}, {"uuid": "e9ca142c-ba7b-4fcd-9ebc-25d477522b2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27807", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mbpdmbq3a32e", "content": "", "creation_timestamp": "2026-01-05T21:03:36.671934Z"}, {"uuid": "caa68029-7810-45a4-b315-ecb19be1f587", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27807", "type": "seen", "source": "https://bsky.app/profile/mdgtech.substack.com/post/3mbrjxae4qs2e", "content": "", "creation_timestamp": "2026-01-06T18:02:26.806591Z"}, {"uuid": "15bfba27-f5dc-420d-bef1-8887e981c658", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27807", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mbsjmxeuvo2u", "content": "", "creation_timestamp": "2026-01-07T03:29:22.069685Z"}, {"uuid": "f316ad28-f44e-430e-8bb1-077307355df7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-23)", "content": "", "creation_timestamp": "2026-03-23T00:00:00.000000Z"}, {"uuid": "0ac4656c-954e-4f4d-8927-1615071787d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27002", "type": "seen", "source": "https://gist.github.com/Darkcrai86/3138a900c4bfa360837cebbf4466b279", "content": "", "creation_timestamp": "2026-01-08T11:04:03.000000Z"}, {"uuid": "a69a4bd9-773f-4245-b8b9-48d9c1f0004b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27004", "type": "seen", "source": "https://gist.github.com/Darkcrai86/13ff44ddf211ecc6efa23488c8661138", "content": "", "creation_timestamp": "2026-01-08T11:03:30.000000Z"}, {"uuid": "909ba7a5-10b8-494c-b8e0-8ce694ff75f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-2787", "type": "seen", "source": "https://www.knime.com/security/advisories#CVE-2026-4649", "content": "", "creation_timestamp": "2026-03-25T03:00:10.000000Z"}, {"uuid": "cfaeab58-0e74-4944-9297-0c43a9cc9023", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-14)", "content": "", "creation_timestamp": "2026-03-14T00:00:00.000000Z"}, {"uuid": "970d91aa-40dd-4075-a1de-e3b5ada099ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-16)", "content": "", "creation_timestamp": "2026-03-16T00:00:00.000000Z"}, {"uuid": "98cdecaf-d880-4865-baaf-c8d840e1af03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-13)", "content": "", "creation_timestamp": "2026-03-13T00:00:00.000000Z"}, {"uuid": "4a87c521-f2cf-4202-b02e-aa4df4eb1e3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-11)", "content": "", "creation_timestamp": "2026-03-11T00:00:00.000000Z"}, {"uuid": "faab51ef-c505-4070-9766-84576cb41084", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1729", "content": "", "creation_timestamp": "2026-01-21T04:00:00.000000Z"}, {"uuid": "8da1d93b-bd98-4e89-9aed-63320c0b89b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1740", "content": "", "creation_timestamp": "2026-01-29T04:00:00.000000Z"}, {"uuid": "60a572c6-4517-4cfd-873f-2944a709abc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-14)", "content": "", "creation_timestamp": "2026-03-14T00:00:00.000000Z"}, {"uuid": "42ee8fe3-26fb-4da4-be90-81e5af05b68b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "e83d79b9-9123-41ed-8b51-3392868a0de8", "vulnerability": "cve-2025-27907", "type": "seen", "source": "https://vulnerability.circl.lu/comment/62e17ecb-0345-4b1c-b7d6-343410dd1084", "content": "", "creation_timestamp": "2025-04-22T15:05:24.793574Z"}, {"uuid": "47388f8b-42a5-46b8-8c95-f4fe08ec4a98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "a40346b5-0a0c-4e58-879d-7656391613e4", "vulnerability": "CVE-2025-27920", "type": "seen", "source": "https://vulnerability.circl.lu/comment/a79b754d-9252-4580-8912-42f39c854661", "content": "", "creation_timestamp": "2025-05-14T08:54:41.802843Z"}, {"uuid": "8f2b48af-7fe3-4547-9eed-8b6d30326fea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-15)", "content": "", "creation_timestamp": "2026-01-15T00:00:00.000000Z"}, {"uuid": "798f66d5-76e8-4a10-98de-10ece97a7290", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-27220", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0315/", "content": "", "creation_timestamp": "2026-03-18T00:00:00.000000Z"}, {"uuid": "3a41715a-4c90-4941-b2e1-ebf59ac3bc86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-27219", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0315/", "content": "", "creation_timestamp": "2026-03-18T00:00:00.000000Z"}, {"uuid": "216ec8ae-5f57-407d-8e9f-8cb956a6f724", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-16)", "content": "", "creation_timestamp": "2026-01-16T00:00:00.000000Z"}, {"uuid": "4724e017-423d-4ed6-b384-c501a4fd8aa4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27505", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-27)", "content": "", "creation_timestamp": "2026-03-27T00:00:00.000000Z"}, {"uuid": "7f0ca4da-7a0a-4ec1-9ca6-8f572901018b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-18)", "content": "", "creation_timestamp": "2026-01-18T00:00:00.000000Z"}, {"uuid": "51886417-76ab-44fd-8d65-5c6d26941839", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27260", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhvcxe66cv2g", "content": "", "creation_timestamp": "2026-03-25T14:39:06.271693Z"}, {"uuid": "14aceff8-9aa5-4d98-9a4a-14c6898e4ce0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-27516", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "2cd3abd5-2aff-4b1e-ba01-136410f25270", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-27558", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "858b6010-a06a-4a42-8228-1e35ca659d16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27209", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mcx3js57e62m", "content": "", "creation_timestamp": "2026-01-21T16:25:33.421867Z"}, {"uuid": "033c4b45-7e20-416d-9301-537ffc6da714", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27210", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mcx3js57e62m", "content": "", "creation_timestamp": "2026-01-21T16:25:33.500194Z"}, {"uuid": "0addbf9c-aa88-44c1-8566-105da6cbd6c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27378", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcxzpe5az52v", "content": "", "creation_timestamp": "2026-01-22T01:25:32.327359Z"}, {"uuid": "6d719809-92c2-48f5-98d8-c057a6dfc5b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27377", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcy275dade2g", "content": "", "creation_timestamp": "2026-01-22T01:34:21.642418Z"}, {"uuid": "2aa310ec-b798-4dd1-8388-de5b0a267236", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27380", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcy6zx4ubi2g", "content": "", "creation_timestamp": "2026-01-22T03:00:56.554690Z"}, {"uuid": "54c0e8f9-1b0d-47ee-a6b1-a4a4a7071485", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27378", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcydoyxvz32n", "content": "", "creation_timestamp": "2026-01-22T04:24:17.503688Z"}, {"uuid": "1f0e970f-a8e8-423d-80f5-229d4922606e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-21)", "content": "", "creation_timestamp": "2026-01-21T00:00:00.000000Z"}, {"uuid": "bc44bea0-44e2-4375-b8f3-720aaa2461e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27817", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-27817.yaml", "content": "", "creation_timestamp": "2026-01-23T04:49:05.000000Z"}, {"uuid": "845d9fbe-82c1-4847-b6b8-1415903ce574", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-22)", "content": "", "creation_timestamp": "2026-01-22T00:00:00.000000Z"}, {"uuid": "d96e093e-380e-4292-ac5f-9f9b326ba5cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27769", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-071-05", "content": "", "creation_timestamp": "2026-03-12T11:00:00.000000Z"}, {"uuid": "ffa0ea5b-9779-4666-836f-4e848b003f03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/9a5e050a-4772-4f07-b3cb-81eae488ff62", "content": "", "creation_timestamp": "2025-03-26T07:46:34.006957Z"}, {"uuid": "b3c7528c-c785-4f89-b6cb-54d0ec338891", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-27480", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/77a1b8aa-f86f-4c74-af5b-7e082c7ae3de", "content": "", "creation_timestamp": "2025-04-10T11:32:21.060085Z"}, {"uuid": "48ef5611-592d-460e-b264-93ea506be0bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-27482", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/77a1b8aa-f86f-4c74-af5b-7e082c7ae3de", "content": "", "creation_timestamp": "2025-04-10T11:32:21.060085Z"}, {"uuid": "ada247ac-a163-40b1-b189-7e34e7ff01a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-27491", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/77a1b8aa-f86f-4c74-af5b-7e082c7ae3de", "content": "", "creation_timestamp": "2025-04-10T11:32:21.060085Z"}, {"uuid": "e8a7a657-fc60-4587-b4c7-f5a0a483af9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-27748", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/77a1b8aa-f86f-4c74-af5b-7e082c7ae3de", "content": "", "creation_timestamp": "2025-04-10T11:32:21.060085Z"}, {"uuid": "9512699a-c61d-4f78-a8e6-b2e7bda7fe4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-27749", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/77a1b8aa-f86f-4c74-af5b-7e082c7ae3de", "content": "", "creation_timestamp": "2025-04-10T11:32:21.060085Z"}, {"uuid": "cbd80895-6ea4-4d37-9e1d-0996f1c42611", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-27745", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/77a1b8aa-f86f-4c74-af5b-7e082c7ae3de", "content": "", "creation_timestamp": "2025-04-10T11:32:21.060085Z"}, {"uuid": "ab619bd0-89ef-4148-9d42-8d6a0ff7e655", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-27727", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/77a1b8aa-f86f-4c74-af5b-7e082c7ae3de", "content": "", "creation_timestamp": "2025-04-10T11:32:21.060085Z"}, {"uuid": "5057b477-f55c-4d69-b9e6-f67133ca45f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-27752", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/77a1b8aa-f86f-4c74-af5b-7e082c7ae3de", "content": "", "creation_timestamp": "2025-04-10T11:32:21.060085Z"}, {"uuid": "0963d1c2-e01d-43d3-820c-bc420ccd894e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-27472", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/77a1b8aa-f86f-4c74-af5b-7e082c7ae3de", "content": "", "creation_timestamp": "2025-04-10T11:32:21.060085Z"}, {"uuid": "e8951cb9-36c0-459d-9f18-9f3ea66baa09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-27057", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/13f0850e-798e-4625-b315-667b9d13bc30", "content": "", "creation_timestamp": "2025-07-08T13:19:01.667211Z"}, {"uuid": "0aa46f77-c7ec-4113-a732-b7e041394ac7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-27056", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/13f0850e-798e-4625-b315-667b9d13bc30", "content": "", "creation_timestamp": "2025-07-08T13:19:01.667211Z"}, {"uuid": "1523fcdd-7c6f-4fa9-bb70-c8eda5559a04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-27044", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/13f0850e-798e-4625-b315-667b9d13bc30", "content": "", "creation_timestamp": "2025-07-08T13:19:01.667211Z"}, {"uuid": "fffbd5ec-d14a-4810-aa98-4489a353a7d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-27051", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/13f0850e-798e-4625-b315-667b9d13bc30", "content": "", "creation_timestamp": "2025-07-08T13:19:01.667211Z"}, {"uuid": "9f8d7a79-29a4-4834-b666-72dcc82655ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-27043", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/13f0850e-798e-4625-b315-667b9d13bc30", "content": "", "creation_timestamp": "2025-07-08T13:19:01.667211Z"}, {"uuid": "2b2addcc-79af-48c7-8d14-8da40e848b73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-27046", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/13f0850e-798e-4625-b315-667b9d13bc30", "content": "", "creation_timestamp": "2025-07-08T13:19:01.667211Z"}, {"uuid": "ed5ad0ee-f882-4ce2-b795-dd68d3540a0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-27058", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/13f0850e-798e-4625-b315-667b9d13bc30", "content": "", "creation_timestamp": "2025-07-08T13:19:01.667211Z"}, {"uuid": "98942873-5d21-480e-8f07-64c554924da0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-27050", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/13f0850e-798e-4625-b315-667b9d13bc30", "content": "", "creation_timestamp": "2025-07-08T13:19:01.667211Z"}, {"uuid": "18f9700f-0990-4b99-97f8-55e1b00c639a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-27047", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/13f0850e-798e-4625-b315-667b9d13bc30", "content": "", "creation_timestamp": "2025-07-08T13:19:01.667211Z"}, {"uuid": "6fec631e-5a7a-49d0-8d37-53d7a8e9b718", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-27052", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/13f0850e-798e-4625-b315-667b9d13bc30", "content": "", "creation_timestamp": "2025-07-08T13:19:01.667211Z"}, {"uuid": "8a7b4b79-5231-45b8-a710-782351acc02f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-27061", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/13f0850e-798e-4625-b315-667b9d13bc30", "content": "", "creation_timestamp": "2025-07-08T13:19:01.667211Z"}, {"uuid": "2ffdcc4e-a21f-4df4-b658-440709a15982", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-27042", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/13f0850e-798e-4625-b315-667b9d13bc30", "content": "", "creation_timestamp": "2025-07-08T13:19:01.667211Z"}, {"uuid": "48e89981-9cab-460a-9ceb-5f34495bbbba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-27055", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/13f0850e-798e-4625-b315-667b9d13bc30", "content": "", "creation_timestamp": "2025-07-08T13:19:01.667211Z"}, {"uuid": "ddd70998-94fc-4fe7-af11-87422f094087", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27821", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3md4k5e2rnj26", "content": "", "creation_timestamp": "2026-01-23T20:30:20.298891Z"}, {"uuid": "cbaedb47-4bcf-4082-a09a-bfbd82aac92d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27821", "type": "seen", "source": "https://seclists.org/oss-sec/2026/q1/110", "content": "", "creation_timestamp": "2026-01-23T18:57:36.000000Z"}, {"uuid": "f5015ea6-d725-4511-bfac-41b1fb0b98ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-23)", "content": "", "creation_timestamp": "2026-01-23T00:00:00.000000Z"}, {"uuid": "65fa98b7-a6f6-44b7-bb3e-0b878abeba4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-27562", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/9d7fef5d-952d-4ecc-880d-94d02304e7a3", "content": "", "creation_timestamp": "2025-07-30T07:59:24.597474Z"}, {"uuid": "3ab68e8f-5fcf-4ccd-8c5f-5a08eb3f268f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27817", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3md74gp5rgt2q", "content": "", "creation_timestamp": "2026-01-24T21:03:03.187425Z"}, {"uuid": "6f7815c6-4abb-4cf0-8086-ea1332de34f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-27428", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/43ff9e04-da8f-45fe-a06a-e8f9b84a2d14", "content": "", "creation_timestamp": "2025-09-11T13:37:23.512990Z"}, {"uuid": "c55e2322-7095-4313-ae83-d84998d5cea4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-27817", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/bbcbc485-b88d-4831-b8e9-6e37e7bd9875", "content": "", "creation_timestamp": "2026-01-21T21:18:16.771453Z"}, {"uuid": "9b407cb2-20f1-4d70-a2c2-50fb22b67063", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-27210", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/bbcbc485-b88d-4831-b8e9-6e37e7bd9875", "content": "", "creation_timestamp": "2026-01-21T21:18:16.771453Z"}, {"uuid": "d49fc923-fe31-4596-a5c4-d6aaf0c3f8f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-27152", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/bbcbc485-b88d-4831-b8e9-6e37e7bd9875", "content": "", "creation_timestamp": "2026-01-21T21:18:16.771453Z"}, {"uuid": "d1557e1b-5318-4ab8-93ad-bec43b9113dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-27533", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/bbcbc485-b88d-4831-b8e9-6e37e7bd9875", "content": "", "creation_timestamp": "2026-01-21T21:18:16.771453Z"}, {"uuid": "926d13c8-c783-46ac-8b2b-bfa8f186d76f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27407", "type": "seen", "source": "https://gist.github.com/alon710/794b044cfea500e1f5f23253a31d3cc2", "content": "", "creation_timestamp": "2026-01-24T21:25:48.000000Z"}, {"uuid": "ef1b771c-eca9-4eae-b732-98d68f4d5c06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/bbcbc485-b88d-4831-b8e9-6e37e7bd9875", "content": "", "creation_timestamp": "2026-01-21T21:18:16.771453Z"}, {"uuid": "89de96d6-49cd-461f-a5f1-883ec7ec3c7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-27818", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/bbcbc485-b88d-4831-b8e9-6e37e7bd9875", "content": "", "creation_timestamp": "2026-01-21T21:18:16.771453Z"}, {"uuid": "db250945-bf45-43c4-b0c2-f48546006726", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-27209", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/bbcbc485-b88d-4831-b8e9-6e37e7bd9875", "content": "", "creation_timestamp": "2026-01-21T21:18:16.771453Z"}, {"uuid": "72ec9bcf-8701-4205-8a2e-24fac4cf0a5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-17)", "content": "", "creation_timestamp": "2026-03-17T00:00:00.000000Z"}, {"uuid": "4e5aad10-28b8-477f-93ee-bf1fae224891", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1510", "content": "", "creation_timestamp": "2025-03-26T04:00:00.000000Z"}, {"uuid": "cf5da177-d369-48c2-a2c9-5ba719302524", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27407", "type": "seen", "source": "https://gist.github.com/alon710/11c45cdfd0d1ad3b473795f1fcfcc7b0", "content": "", "creation_timestamp": "2026-01-24T22:41:13.000000Z"}, {"uuid": "f50b95a6-9910-423b-b8b4-d76d9b72f5be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1512", "content": "", "creation_timestamp": "2025-03-27T04:00:00.000000Z"}, {"uuid": "6a636e45-74ed-43d4-9ae6-ac4f647bfc67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27221", "type": "seen", "source": "https://gist.github.com/alon710/33fe0b0b1e3c2651e23884a671bd8257", "content": "", "creation_timestamp": "2026-01-24T22:44:10.000000Z"}, {"uuid": "690f685b-36fe-4cb9-bc6a-5c249c7c79f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-24)", "content": "", "creation_timestamp": "2026-01-24T00:00:00.000000Z"}, {"uuid": "96bfe785-9429-45c5-ab14-180de231a85c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27821", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mdanqdssgv2m", "content": "", "creation_timestamp": "2026-01-25T11:45:18.305367Z"}, {"uuid": "2b3fdc5e-435b-4a95-bdb5-bcf6a6bcd344", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27821", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mdd3sz4y4u2p", "content": "", "creation_timestamp": "2026-01-26T11:02:39.458136Z"}, {"uuid": "f33b49cd-de50-4bc2-8d1c-ec89e839a38e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27821", "type": "seen", "source": "https://bsky.app/profile/cyberdudebivash.bsky.social/post/3mddf7olrrk2h", "content": "", "creation_timestamp": "2026-01-26T13:50:53.244761Z"}, {"uuid": "e3b23c06-9b4d-499b-8e17-e91e2d52f2c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27821", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mdgcex3pc52w", "content": "", "creation_timestamp": "2026-01-27T17:38:04.120230Z"}, {"uuid": "16a27f6c-0c65-4da4-8abf-1e2d0ee5634a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-27)", "content": "", "creation_timestamp": "2026-01-27T00:00:00.000000Z"}, {"uuid": "1460c6d9-c104-4d89-9714-20715400f76f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-2747", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/09cc78e6-cce2-46dc-a0f3-eabb728f91e4", "content": "", "creation_timestamp": "2026-02-02T12:25:48.740998Z"}, {"uuid": "fe10f608-f203-4d93-ba0a-1b8d6bbf21fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-27920", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1afdac08-fb5f-4d85-8fb7-8bebd7e4f42f", "content": "", "creation_timestamp": "2026-02-02T12:26:00.654117Z"}, {"uuid": "87a0d3c5-203e-4612-b0cb-ec1d11790d84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-2746", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/237aa89d-a7f6-4c3d-8d70-c72952d464d4", "content": "", "creation_timestamp": "2026-02-02T12:25:48.637244Z"}, {"uuid": "bbc1741b-d8da-43e7-b90e-74c5a5e17240", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-2775", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/425b3baa-32ce-43cb-8103-f50221a64771", "content": "", "creation_timestamp": "2026-02-02T12:25:55.979579Z"}, {"uuid": "aa8d9dfe-6e14-4f1a-a12b-1831447d2fbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-27038", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/46c61b01-bba5-40a4-8eeb-73289ca0c72b", "content": "", "creation_timestamp": "2026-02-02T12:25:59.733178Z"}, {"uuid": "04a884db-566f-4925-8a86-9215d72d0b19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-2783", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8791bec1-8b4f-46a7-a000-a10f5d4cc2b7", "content": "", "creation_timestamp": "2026-02-02T12:26:04.667341Z"}, {"uuid": "eccb8f29-4802-4d8b-b06c-5f6c06ec1a78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-27363", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ba91532c-a5c0-47e9-91d4-f0de55cfb711", "content": "", "creation_timestamp": "2026-02-02T12:26:02.223610Z"}, {"uuid": "afa9a434-e723-41f5-81cf-d7d6cdd1ebe5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-2776", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d041bbcd-43ab-4c19-a576-e2b7c165aeac", "content": "", "creation_timestamp": "2026-02-02T12:25:56.082848Z"}, {"uuid": "d289b464-bfb4-4441-bfa6-558f62a64ecc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-27915", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f0c13b0d-ff14-4e8a-94fb-cdbbd19f2678", "content": "", "creation_timestamp": "2026-02-02T12:25:49.697521Z"}, {"uuid": "e9bb8785-2cd1-4591-9247-c6b940fdeb25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27426", "type": "seen", "source": "https://t.me/cvedetector/19501", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27426 - \"Firefox for iOS URL Spoofing Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-27426 \nPublished : March 4, 2025, 2:15 p.m. | 28\u00a0minutes ago \nDescription : Malicious websites utilizing a server-side redirect to an internal error page could result in a spoofed website URL This vulnerability affects Firefox for iOS < 136. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T15:50:41.000000Z"}, {"uuid": "c746337a-731f-420c-9d32-99aa4dd7a93e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27424", "type": "seen", "source": "https://t.me/cvedetector/19500", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27424 - Firefox for iOS URL Spoofing Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27424 \nPublished : March 4, 2025, 2:15 p.m. | 28\u00a0minutes ago \nDescription : Websites redirecting to a non-HTTP scheme URL could allow a website address to be spoofed for a malicious page This vulnerability affects Firefox for iOS < 136. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T15:50:40.000000Z"}, {"uuid": "8e1e481e-7531-46dd-9e7c-9b535407dde1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27649", "type": "seen", "source": "Telegram/DlO35Mpthw2LRoFLu1ME2VLjRtcfRt4JuIY0jLCxQepaTghu", "content": "", "creation_timestamp": "2025-03-06T02:16:25.000000Z"}, {"uuid": "58d8a86c-588e-4199-8589-dd41fa6c4c04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27648", "type": "seen", "source": "Telegram/Ny94pmHLeutDxh0sf5gPgGBHz5a4ga4N_WnjBeNx2vKLtBwX", "content": "", "creation_timestamp": "2025-03-06T02:16:25.000000Z"}, {"uuid": "62e7a083-a1c4-4ea4-8166-ae9f268db11b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27820", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13216", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27820\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A bug in PSL validation logic in Apache HttpClient 5.4.x disables domain checks, affecting cookie management and host name verification. Discovered by the Apache HttpClient team. Fixed in the 5.4.3 release\n\ud83d\udccf Published: 2025-04-24T11:44:25.986Z\n\ud83d\udccf Modified: 2025-04-24T11:44:25.986Z\n\ud83d\udd17 References:\n1. https://github.com/apache/httpcomponents-client/pull/574\n2. https://github.com/apache/httpcomponents-client/pull/621\n3. https://hc.apache.org/httpcomponents-client-5.4.x/index.html\n4. https://lists.apache.org/thread/55xhs40ncqv97qvoocok44995xp5kqn8", "creation_timestamp": "2025-04-24T12:06:25.000000Z"}, {"uuid": "a325e180-f578-4d75-9eda-8364bfefc659", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27647", "type": "seen", "source": "Telegram/ECtGvmosehrcwp7zt-l2svjXGR7hB2NsthmQUXxJy4SeBTGd", "content": "", "creation_timestamp": "2025-03-06T02:16:25.000000Z"}, {"uuid": "d3be833b-74f1-492a-b674-f81959220ff2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27507", "type": "seen", "source": "https://t.me/cvedetector/19527", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27507 - Zitadel Insecure Direct Object Reference (IDOR) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27507 \nPublished : March 4, 2025, 5:15 p.m. | 1\u00a0hour, 32\u00a0minutes ago \nDescription : The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration. ZITADEL's Admin API contains Insecure Direct Object Reference (IDOR) vulnerabilities that allow authenticated users, without specific IAM roles, to modify sensitive settings. While several endpoints are affected, the most critical vulnerability lies in the ability to manipulate LDAP configurations. Customers who do not utilize LDAP for authentication are not at risk from the most severe aspects of this vulnerability. However, upgrading to the patched version to address all identified issues is strongly recommended. This vulnerability is fixed in 2.71.0, 2.70.1, ,2.69.4, 2.68.4, 2.67.8, 2.66.11, 2.65.6, 2.64.5, and 2.63.8. \nSeverity: 9.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T20:01:42.000000Z"}, {"uuid": "c5cfaf44-aab3-493b-bf6f-879fa2afb38e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27646", "type": "seen", "source": "Telegram/ld8gimESoyPTVoNxqAdkp43sLq7ZoV03kioiho87ggSdRKVt", "content": "", "creation_timestamp": "2025-03-06T02:16:25.000000Z"}, {"uuid": "11ee7f37-3fba-47c0-b2ed-31c38356b351", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27156", "type": "seen", "source": "https://t.me/cvedetector/19534", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27156 - Tuleap HTML Email Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27156 \nPublished : March 4, 2025, 5:15 p.m. | 1\u00a0hour, 32\u00a0minutes ago \nDescription : Tuleap is an Open Source Suite to improve management of software developments and collaboration. The mass emailing features do not sanitize the content of the HTML emails. A malicious user could use this issue to facilitate a phishing attempt or to indirectly exploit issues in the recipients mail clients. This vulnerability is fixed in Tuleap Community Edition 16.4.99.1740567344 and Tuleap Enterprise Edition 16.4-6 and 16.3-11. \nSeverity: 4.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T20:01:50.000000Z"}, {"uuid": "9cf05662-dea5-4dd1-b4d2-5216b48824ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27155", "type": "seen", "source": "https://t.me/cvedetector/19533", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27155 - Pinecone Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27155 \nPublished : March 4, 2025, 5:15 p.m. | 1\u00a0hour, 32\u00a0minutes ago \nDescription : Pinecone is an experimental overlay routing protocol suite which is the foundation of the current P2P Matrix demos. The Pinecone Simulator (pineconesim) included in Pinecone up to commit ea4c337 is vulnerable to stored cross-site scripting. The payload storage is not permanent and will be wiped when restarting pineconesim. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T20:01:49.000000Z"}, {"uuid": "4e7a4fe4-30a7-4717-a46e-16cecf76d4d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27150", "type": "seen", "source": "https://t.me/cvedetector/19532", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27150 - Tuleap Redis Password Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-27150 \nPublished : March 4, 2025, 5:15 p.m. | 1\u00a0hour, 32\u00a0minutes ago \nDescription : Tuleap is an Open Source Suite to improve management of software developments and collaboration. The password to connect the Redis instance is not purged from the archive generated with tuleap collect-system-data. These archives are likely to be used by support teams that should not have access to this password. The vulnerability is fixed in Tuleap Community Edition 16.4.99.1740492866 and Tuleap Enterprise Edition 16.4-6 and 16.3-11. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T20:01:49.000000Z"}, {"uuid": "a8dcc673-7882-49d8-a796-a8cd30128a68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27645", "type": "seen", "source": "Telegram/HJXkiRMjIdD6blqOzFjmpeXVwHs6GaSyLwwIpnDF2ng9SHpD", "content": "", "creation_timestamp": "2025-03-06T02:16:25.000000Z"}, {"uuid": "542a4869-0c46-45f7-afa7-d95986d8d9ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27370", "type": "seen", "source": "https://t.me/cvedetector/19402", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27370 - OpenID Connect Core through errata set 2 Audience Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27370 \nPublished : March 3, 2025, 6:15 p.m. | 2\u00a0hours, 5\u00a0minutes ago \nDescription : OpenID Connect Core through 1.0 errata set 2 allows audience injection in certain situations. When the private_key_jwt authentication mechanism is used, a malicious Authorization Server could trick a Client into writing attacker-controlled values into the audience, including token endpoints or issuer identifiers of other Authorization Servers. The malicious Authorization Server could then use these private key JWTs to impersonate the Client. \nSeverity: 6.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T21:24:44.000000Z"}, {"uuid": "ea1c7f0a-41f9-47e8-814e-d32663691f7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27644", "type": "seen", "source": "Telegram/v9UD8xqpeg-Buw_yDaZs8ARR_RZslYFoRenKHhs53PrxicYm", "content": "", "creation_timestamp": "2025-03-06T02:16:25.000000Z"}, {"uuid": "94e19b22-389f-4a50-bdb6-b73b1beb6001", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27219", "type": "seen", "source": "https://t.me/cvedetector/19433", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27219 - Apache CGI Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27219 \nPublished : March 4, 2025, 12:15 a.m. | 18\u00a0minutes ago \nDescription : In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of Service (DoS) vulnerability. The method does not impose any limit on the length of the raw cookie value it processes. This oversight can lead to excessive resource consumption when parsing extremely large cookies. \nSeverity: 5.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T01:36:54.000000Z"}, {"uuid": "e407a88b-5b8a-4cd6-9648-52da152233e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27220", "type": "seen", "source": "https://t.me/cvedetector/19431", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27220 - Apache CGI Regular Expression Denial of Service (ReDoS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27220 \nPublished : March 4, 2025, 12:15 a.m. | 18\u00a0minutes ago \nDescription : In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service (ReDoS) vulnerability exists in the Util#escapeElement method. \nSeverity: 4.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T01:36:53.000000Z"}, {"uuid": "1611d7ee-6738-4731-b1e3-dc80dd5b05c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27510", "type": "seen", "source": "https://t.me/cvedetector/19547", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27510 - Conda-Forge Metadata Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27510 \nPublished : March 4, 2025, 10:15 p.m. | 34\u00a0minutes ago \nDescription : conda-forge-metadata provides programatic access to conda-forge's metadata. conda-forge-metadata uses an optional dependency - \"conda-oci-mirror\" which was neither present on the PyPi repository nor registered by any entity. If conda-oci-mirror is taken over by a threat actor, it can result in remote code execution. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T00:12:40.000000Z"}, {"uuid": "47af8a50-208a-4cf7-a07c-e408a9dd245c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27643", "type": "seen", "source": "Telegram/Gy7CRwpi14Gh_lLv6Z6-PWSm4dMA_Q_mVAOKm3T4ctb7Cfxo", "content": "", "creation_timestamp": "2025-03-06T02:16:25.000000Z"}, {"uuid": "a2d3ead2-e074-4e2d-a481-39225696606d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27401", "type": "seen", "source": "https://t.me/cvedetector/19528", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27401 - Tuleap Report Filter Deletion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27401 \nPublished : March 4, 2025, 5:15 p.m. | 1\u00a0hour, 32\u00a0minutes ago \nDescription : Tuleap is an Open Source Suite to improve management of software developments and collaboration. In a standard usages of Tuleap, the issue has a limited impact, it will mostly leave dangling data. However, a malicious user could create and delete reports multiple times to cycle through all the filters of all reports of the instance and delete them. The malicious user only needs to have access to one tracker. This would result in the loss of all criteria filters forcing users and tracker admins to re-create them. This vulnerability is fixed in Tuleap Community Edition 16.4.99.1740498975 and Tuleap Enterprise Edition 16.4-6 and 16.3-11. \nSeverity: 4.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T20:01:42.000000Z"}, {"uuid": "26ba003c-4b1c-46fa-ab24-b2c33980086c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27402", "type": "seen", "source": "https://t.me/cvedetector/19529", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27402 - Tuleap CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27402 \nPublished : March 4, 2025, 5:15 p.m. | 1\u00a0hour, 32\u00a0minutes ago \nDescription : Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap is missing CSRF protections on tracker fields administrative operations. An attacker could use this vulnerability to trick victims into removing or updating tracker fields. This vulnerability is fixed in Tuleap Community Edition 16.4.99.1740414959 and Tuleap Enterprise Edition 16.4-6 and 16.3-11. \nSeverity: 4.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T20:01:43.000000Z"}, {"uuid": "e730d53b-1287-459b-a2f9-ba52be9958b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27425", "type": "seen", "source": "https://t.me/cvedetector/19497", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27425 - Firefox for iOS URL Autoload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27425 \nPublished : March 4, 2025, 2:15 p.m. | 28\u00a0minutes ago \nDescription : Scanning certain QR codes that included text with a website URL could allow the URL to be opened without presenting the user with a confirmation alert first This vulnerability affects Firefox for iOS < 136. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T15:50:36.000000Z"}, {"uuid": "725d78fc-ec1a-48f2-a51f-6a0e641136cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27642", "type": "seen", "source": "Telegram/Kl2ZyH1nJi-JIKYVHGMjCXNPvfozq8Ut0MOyhS5-_qlJh6xh", "content": "", "creation_timestamp": "2025-03-06T02:16:24.000000Z"}, {"uuid": "4306e668-7b98-4783-9fdc-0df53c1e100e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27521", "type": "seen", "source": "https://t.me/cvedetector/19475", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27521 - Apache Process Management Module Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-27521 \nPublished : March 4, 2025, 8:15 a.m. | 25\u00a0minutes ago \nDescription : Vulnerability of improper access permission in the process management module  \nImpact: Successful exploitation of this vulnerability may affect service confidentiality. \nSeverity: 6.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T09:58:51.000000Z"}, {"uuid": "293b7fa7-366e-4b8e-85ab-dbbc456918dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27641", "type": "seen", "source": "Telegram/AH1eD8Hrzy1sztLlacgL3D_K0pd4cuqxBT0UTsazEyOgUESD", "content": "", "creation_timestamp": "2025-03-06T02:16:24.000000Z"}, {"uuid": "e5045c17-6a09-4496-8fa1-43140d38d350", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27111", "type": "seen", "source": "https://t.me/cvedetector/19514", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27111 - Rack Log Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27111 \nPublished : March 4, 2025, 4:15 p.m. | 28\u00a0minutes ago \nDescription : Rack is a modular Ruby web server interface. The Rack::Sendfile middleware logs unsanitised header values from the X-Sendfile-Type header. An attacker can exploit this by injecting escape sequences (such as newline characters) into the header, resulting in log injection. This vulnerability is fixed in 2.2.12, 3.0.13, and 3.1.11. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T18:21:13.000000Z"}, {"uuid": "e6d33f9b-c56a-448b-af93-05515982f10b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27515", "type": "published-proof-of-concept", "source": "Telegram/ORE3MMM_vpcFU2FjMQTGySfuaiwtBaT_1pbiZmi7UZCilEk", "content": "", "creation_timestamp": "2025-12-30T09:00:05.000000Z"}, {"uuid": "16eb0770-e563-480e-a230-d295debb7245", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27407", "type": "published-proof-of-concept", "source": "Telegram/qhPRrHWn8CTwbXoQMLYYNZP_eAjB5dIioFkbQ0tlG1td8WQ", "content": "", "creation_timestamp": "2025-12-26T21:00:04.000000Z"}, {"uuid": "773304cb-25be-4d12-a756-a0e2ff6ba207", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27640", "type": "seen", "source": "Telegram/1U7UJatlqZUmbjXWeuQCngVjQ7QswDsWA_eKV9UNcCr1yrhN", "content": "", "creation_timestamp": "2025-03-06T02:16:24.000000Z"}, {"uuid": "70ec1283-0caa-4f60-b5a9-67247e1af35f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27639", "type": "seen", "source": "Telegram/rD93F_CDPfFnHGfrZHIQu0k9A4d9cVoSWgVn4vzIslJ32XHM", "content": "", "creation_timestamp": "2025-03-06T02:16:24.000000Z"}, {"uuid": "a055c1ac-a649-4366-b088-aba308360a64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27638", "type": "seen", "source": "Telegram/lN7SzkfBYbKo-j-HmIPn451J-5dmseT8ALr6QHq2HWWUOQJO", "content": "", "creation_timestamp": "2025-03-06T02:16:24.000000Z"}, {"uuid": "2da754d5-4574-456c-8d81-3a95e921f874", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27407", "type": "published-proof-of-concept", "source": "Telegram/HrTtUNq5Rdsv8dZdwNssjgzlpOtJ1umCTDCiOjgom1Z9ct0", "content": "", "creation_timestamp": "2025-12-26T19:00:09.000000Z"}, {"uuid": "c457459f-af60-43fd-afe2-e673bacd63ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27637", "type": "seen", "source": "Telegram/9jAYxxAUrRSCK8Xi8zzFaxkXBlXFnP1kHpE4xW76fBZObqDh", "content": "", "creation_timestamp": "2025-03-06T02:16:24.000000Z"}, {"uuid": "320035ec-0252-4078-bac3-68c442677503", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27221", "type": "seen", "source": "https://t.me/cvedetector/19434", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27221 - \"URI Gem Authentication Credential Leakage Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-27221 \nPublished : March 4, 2025, 12:15 a.m. | 18\u00a0minutes ago \nDescription : In the URI gem before 1.0.3 for Ruby, the URI handling methods (URI.join, URI#merge, URI#+) have an inadvertent leakage of authentication credentials because userinfo is retained even after changing the host. \nSeverity: 3.2 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T01:36:55.000000Z"}, {"uuid": "01760072-7d46-423a-b65d-27c96284eb2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27422", "type": "seen", "source": "https://t.me/cvedetector/19376", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27422 - Faction Admin Account Creation Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27422 \nPublished : March 3, 2025, 5:15 p.m. | 1\u00a0hour, 1\u00a0minute ago \nDescription : FACTION is a PenTesting Report Generation and Collaboration Framework. Authentication is bypassed when an attacker registers a new user with admin privileges. This is possible at any time without any authorization. The request must follow the validation rules (no missing information, secure password, etc) but there are no other controls stopping them. This vulnerability is fixed in 1.4.3. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T19:44:02.000000Z"}, {"uuid": "0d6cd4b2-d74e-49c5-ad40-4860612dae46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27501", "type": "seen", "source": "https://t.me/cvedetector/19394", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27501 - OpenZiti SSRF\", \n  \"Content\": \"CVE ID : CVE-2025-27501 \nPublished : March 3, 2025, 7:15 p.m. | 1\u00a0hour, 6\u00a0minutes ago \nDescription : OpenZiti is a free and open source project focused on bringing zero trust to any application. An endpoint on the admin panel can be accessed without any form of authentication. This endpoint accepts a user-supplied URL parameter to connect to an OpenZiti Controller and performs a server-side request, resulting in a potential Server-Side Request Forgery (SSRF) vulnerability. The fixed version has moved the request to the external controller from the server side to the client side, thereby eliminating the identity of the node from being used to gain any additional permissions. This vulnerability is fixed in 3.7.1. \nSeverity: 8.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T21:24:32.000000Z"}, {"uuid": "7f854527-fb5e-4caa-9f01-2abbfddcf466", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27271", "type": "seen", "source": "https://t.me/cvedetector/19368", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27271 - NotFound Database Cross-site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-27271 \nPublished : March 3, 2025, 2:15 p.m. | 1\u00a0hour, 59\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound DB Tables Import/Export allows Reflected XSS. This issue affects DB Tables Import/Export: from n/a through 1.0.1. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T18:03:49.000000Z"}, {"uuid": "48a473e5-5424-4271-ad2a-e5be5412c894", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27371", "type": "seen", "source": "https://t.me/cvedetector/19403", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27371 - OAuth 2.0 JWT Profile Audience Ambiguity in IETF Specifications (Vendor) - Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-27371 \nPublished : March 3, 2025, 6:15 p.m. | 2\u00a0hours, 5\u00a0minutes ago \nDescription : In certain IETF OAuth 2.0-related specifications, when the JSON Web Token Profile for OAuth 2.0 Client Authentication mechanism is used, there are ambiguities in the audience values of JWTs sent to authorization servers. The affected RFCs may include RFC 7523, and also RFC 7521, RFC 7522, RFC 9101 (JAR), and RFC 9126 (PAR). \nSeverity: 6.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T21:24:45.000000Z"}, {"uuid": "61d4a952-0deb-4e35-b815-0cd4a6ecc793", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27278", "type": "seen", "source": "https://t.me/cvedetector/19360", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27278 - AcuGIS Leaflet Maps Cross-site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-27278 \nPublished : March 3, 2025, 2:15 p.m. | 1\u00a0hour, 59\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound AcuGIS Leaflet Maps allows Reflected XSS. This issue affects AcuGIS Leaflet Maps: from n/a through 5.1.1.0. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T18:03:36.000000Z"}, {"uuid": "9a996a8c-8e56-4d8a-bef8-52f89ce628d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27275", "type": "seen", "source": "https://t.me/cvedetector/19359", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27275 - Andrew Fisher WOO Codice Fiscale Cross-site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27275 \nPublished : March 3, 2025, 2:15 p.m. | 1\u00a0hour, 59\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in andrew_fisher WOO Codice Fiscale allows Reflected XSS. This issue affects WOO Codice Fiscale: from n/a through 1.6.3. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T18:03:35.000000Z"}, {"uuid": "5550efb9-3574-498c-b07b-07a355aa5e20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27584", "type": "seen", "source": "https://t.me/cvedetector/19276", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27584 - Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2025-27584 \nPublished : March 3, 2025, 1:15 a.m. | 28\u00a0minutes ago \nDescription : A stored cross-site scripting (XSS) vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the First Name parameter at /rest/staffResource/update. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T02:58:36.000000Z"}, {"uuid": "444808da-9ff2-4788-b806-8ef00a8cfa03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27583", "type": "seen", "source": "https://t.me/cvedetector/19275", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27583 - Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27583 \nPublished : March 3, 2025, 1:15 a.m. | 28\u00a0minutes ago \nDescription : Incorrect access control in the component /rest/staffResource/findAllUsersAcrossOrg of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows create and modify user accounts, including an Administrator account. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T02:58:36.000000Z"}, {"uuid": "971f463b-ce59-4ec8-9d66-71fd0fa60479", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27500", "type": "seen", "source": "https://t.me/cvedetector/19393", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27500 - OpenZiti Unauthenticated Stored Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27500 \nPublished : March 3, 2025, 7:15 p.m. | 1\u00a0hour, 6\u00a0minutes ago \nDescription : OpenZiti is a free and open source project focused on bringing zero trust to any application. An endpoint(/api/upload) on the admin panel can be accessed without any form of authentication. This endpoint accepts an HTTP POST to upload a file which is then stored on the node and is available via URL. This can lead to a stored cross site scripting attack if the file uploaded contains malicious code and is then accessed and executed within the context of the user's browser. This function is no longer necessary as the ziti-console moves from a node server application to a single page application, and has been disabled. The vulnerability is fixed in 3.7.1. \nSeverity: 8.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T21:24:31.000000Z"}, {"uuid": "5e1a07e0-e5c4-48b1-bd4e-afeafb1f0784", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27499", "type": "seen", "source": "https://t.me/cvedetector/19392", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27499 - WeGIA Stored Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27499 \nPublished : March 3, 2025, 7:15 p.m. | 1\u00a0hour, 6\u00a0minutes ago \nDescription : WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A Stored Cross-Site Scripting (XSS) vulnerability was identified in the processa_edicao_socio.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts into the socio_nome parameter. The injected scripts are stored on the server and executed automatically whenever the affected page is accessed by users, posing a significant security risk. This vulnerability is fixed in 3.2.10. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T21:24:30.000000Z"}, {"uuid": "2df603b3-357c-4c38-990a-4636e0b292cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27419", "type": "seen", "source": "https://t.me/cvedetector/19391", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27419 - WeGIA DoS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27419 \nPublished : March 3, 2025, 4:15 p.m. | 2\u00a0hours ago \nDescription : WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A Denial of Service (DoS) vulnerability exists in WeGIA. This vulnerability allows any unauthenticated user to cause the server to become unresponsive by performing aggressive spidering. The vulnerability is caused by recursive crawling of dynamically generated URLs and insufficient handling of large volumes of requests. This vulnerability is fixed in 3.2.16. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T19:44:23.000000Z"}, {"uuid": "cf665f18-d58f-43a5-a981-50eeb871b61d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27498", "type": "seen", "source": "https://t.me/cvedetector/19372", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27498 - AES-GCM Exposes Decrypted Ciphertext on Incorrect Tag\", \n  \"Content\": \"CVE ID : CVE-2025-27498 \nPublished : March 3, 2025, 5:15 p.m. | 1\u00a0hour, 1\u00a0minute ago \nDescription : aes-gcm is a pure Rust implementation of the AES-GCM. In decrypt_in_place_detached, the decrypted ciphertext (which is the correct ciphertext) is exposed even if the tag is incorrect. This is because in decrypt_inplace in asconcore.rs, tag verification causes an error to be returned with the plaintext contents still in buffer. The vulnerability is fixed in 0.4.3. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T19:43:59.000000Z"}, {"uuid": "ec7bbdf9-51ff-4bc4-8df8-e77a96acdf39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27421", "type": "seen", "source": "https://t.me/cvedetector/19375", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27421 - Abacus Server-Sent Events Goroutine Leak Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27421 \nPublished : March 3, 2025, 5:15 p.m. | 1\u00a0hour, 1\u00a0minute ago \nDescription : Abacus is a highly scalable and stateless counting API. A critical goroutine leak vulnerability has been identified in the Abacus server's Server-Sent Events (SSE) implementation. The issue occurs when clients disconnect from the /stream endpoint, as the server fails to properly clean up resources and terminate associated goroutines. This leads to resource exhaustion where the server continues running but eventually stops accepting new SSE connections while maintaining high memory usage. The vulnerability specifically involves improper channel cleanup in the event handling mechanism, causing goroutines to remain blocked indefinitely. This vulnerability is fixed in 1.4.0. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T19:44:01.000000Z"}, {"uuid": "73809eb9-020e-481e-9ba9-fd5e9c15f71f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27423", "type": "seen", "source": "https://t.me/cvedetector/19373", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27423 - Vim Tar.vim Plugin Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27423 \nPublished : March 3, 2025, 5:15 p.m. | 1\u00a0hour, 1\u00a0minute ago \nDescription : Vim is an open source, command line text editor. Vim is distributed with the tar.vim plugin, that allows easy editing and viewing of (compressed or uncompressed) tar files. Starting with 9.1.0858, the tar.vim plugin uses the \":read\" ex command line to append below the cursor position, however the is not sanitized and is taken literally from the tar archive. This allows to execute shell commands via special crafted tar archives. Whether this really happens, depends on the shell being used ('shell' option, which is set using $SHELL). The issue has been fixed as of Vim patch v9.1.1164 \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T19:43:59.000000Z"}, {"uuid": "85e9671c-acb1-4097-b239-5c47852716b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27269", "type": "seen", "source": "https://t.me/cvedetector/19363", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27269 - Apache .htaccess Login Cross-site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-27269 \nPublished : March 3, 2025, 2:15 p.m. | 1\u00a0hour, 59\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound .htaccess Login block allows Reflected XSS. This issue affects .htaccess Login block: from n/a through 0.9a. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T18:03:41.000000Z"}, {"uuid": "20882378-2d91-4ac8-87d9-605c155ff98e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27268", "type": "seen", "source": "https://t.me/cvedetector/19362", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27268 - Enituretechnology Small Package Quotes SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27268 \nPublished : March 3, 2025, 2:15 p.m. | 1\u00a0hour, 59\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in enituretechnology Small Package Quotes \u2013 Worldwide Express Edition allows SQL Injection. This issue affects Small Package Quotes \u2013 Worldwide Express Edition: from n/a through 5.2.18. \nSeverity: 9.3 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T18:03:41.000000Z"}, {"uuid": "8c83c9b2-6423-4d82-9ea3-29de36071e9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27279", "type": "seen", "source": "https://t.me/cvedetector/19361", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27279 - Flashfader Cross-site Scripting\", \n  \"Content\": \"CVE ID : CVE-2025-27279 \nPublished : March 3, 2025, 2:15 p.m. | 1\u00a0hour, 59\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Flashfader allows Reflected XSS. This issue affects Flashfader: from n/a through 1.1.1. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T18:03:37.000000Z"}, {"uuid": "23c0a1e0-c214-42e8-8b1c-503978f9ef30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27264", "type": "seen", "source": "https://t.me/cvedetector/19367", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27264 - NotFound Doctor Appointment Booking PHP Local File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27264 \nPublished : March 3, 2025, 2:15 p.m. | 1\u00a0hour, 59\u00a0minutes ago \nDescription : Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in NotFound Doctor Appointment Booking allows PHP Local File Inclusion. This issue affects Doctor Appointment Booking: from n/a through 1.0.0. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T18:03:48.000000Z"}, {"uuid": "858afb35-d221-4146-a956-de8f3c774482", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27274", "type": "seen", "source": "https://t.me/cvedetector/19366", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27274 - GPX Viewer Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27274 \nPublished : March 3, 2025, 2:15 p.m. | 1\u00a0hour, 59\u00a0minutes ago \nDescription : Path Traversal vulnerability in NotFound GPX Viewer allows Path Traversal. This issue affects GPX Viewer: from n/a through 2.2.11. \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T18:03:44.000000Z"}, {"uuid": "d97a3549-8035-4173-86b1-e3b32d13947c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27273", "type": "seen", "source": "https://t.me/cvedetector/19365", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27273 - Winking Affiliate Links Manager Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-27273 \nPublished : March 3, 2025, 2:15 p.m. | 1\u00a0hour, 59\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in winking Affiliate Links Manager allows Reflected XSS. This issue affects Affiliate Links Manager: from n/a through 1.0. \nSeverity: 5.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T18:03:43.000000Z"}, {"uuid": "397dee60-fe22-4197-801f-9ca7adf8fc1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27270", "type": "seen", "source": "https://t.me/cvedetector/19364", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27270 - NotFoundError Missing Authorization Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2025-27270 \nPublished : March 3, 2025, 2:15 p.m. | 1\u00a0hour, 59\u00a0minutes ago \nDescription : Missing Authorization vulnerability in NotFound Residential Address Detection allows Privilege Escalation. This issue affects Residential Address Detection: from n/a through 2.5.4. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T18:03:42.000000Z"}, {"uuid": "5bad53c1-ed7a-432b-a35d-9af12a6824b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27585", "type": "seen", "source": "https://t.me/cvedetector/19277", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27585 - Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2025-27585 \nPublished : March 3, 2025, 1:15 a.m. | 28\u00a0minutes ago \nDescription : A stored cross-site scripting (XSS) vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Print Name parameter at /rest/staffResource/update. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T02:58:37.000000Z"}, {"uuid": "76240bf8-ad4f-402c-b2d6-23d860ea4bd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27609", "type": "seen", "source": "https://t.me/cvedetector/21214", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27609 - Icinga Web 2 Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-27609 \nPublished : March 26, 2025, 5:15 p.m. | 1\u00a0hour, 31\u00a0minutes ago \nDescription : Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 allows an attacker to craft a request that, once transmitted to a victim's Icinga Web, allows to embed arbitrary Javascript into it and to act on behalf of that user. This issue has been resolved in versions 2.11.5 and 2.12.3 of Icinga Web 2. As a workaround, those who have Icinga Web 2.12.2 may enable a content security policy in the application settings. Any modern browser with a working CORS implementation also sufficiently guards against the vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T20:35:03.000000Z"}, {"uuid": "62362b0e-1558-40ee-9a27-17b6110edf68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2787", "type": "seen", "source": "https://t.me/cvedetector/21242", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2787 - KNIME Business Hub Ingress-nginx Cluster Takeover Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2787 \nPublished : March 26, 2025, 9:15 p.m. | 1\u00a0hour, 33\u00a0minutes ago \nDescription : KNIME Business Hub is affected by the Ingress-nginx CVE-2025-1974 ( a.k.a IngressNightmare ) vulnerability which affects the ingress-nginx component. In the worst case a complete takeover of the Kubernetes cluster is possible. Since the affected component is only reachable from within the cluster, i.e. requires an authenticated user, the severity in the context of KNIME Business Hub is slightly lower.  \n  \n  \n  \nBesides applying the publicly known workarounds, we strongly recommend updating to one of the following versions of KNIME Business Hub:   \n  \n  \n  \n  *  1.13.3 or above   \n  \n  \n  \n  \n  \n  \n  *  1.12.4 or above   \n  \n  \n  \n  \n  \n  \n  *  1.11.4 or above   \n  \n  \n  \n  \n  \n  \n  *  1.10.4 or above  \n  \n  \n  \n  \n  \n  \n  \n  \n  * \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T23:56:05.000000Z"}, {"uuid": "5872bbba-0dbd-46f2-9bdf-f5bc1d3cb693", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27579", "type": "seen", "source": "https://t.me/cvedetector/19286", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27579 - Bitaxe ESP-Miner AxeOS CSRF Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2025-27579 \nPublished : March 3, 2025, 12:15 a.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : In Bitaxe ESP-Miner before 2.5.0 with AxeOS, one can use an /api/system CSRF attack to update the payout address (aka stratumUser) for a Bitaxe Bitcoin miner, or change the frequency and voltage settings. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T02:58:51.000000Z"}, {"uuid": "52159de9-490c-4a09-a44b-310a0cf9886f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27590", "type": "seen", "source": "https://t.me/cvedetector/19305", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27590 - Oxidized Web Unauthenticated Remote Command Execution\", \n  \"Content\": \"CVE ID : CVE-2025-27590 \nPublished : March 3, 2025, 4:15 a.m. | 1\u00a0hour, 44\u00a0minutes ago \nDescription : In oxidized-web (aka Oxidized Web) before 0.15.0, the RANCID migration page allows an unauthenticated user to gain control over the Linux user account that is running oxidized-web. \nSeverity: 9.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T07:10:33.000000Z"}, {"uuid": "70a68b7e-3525-44e3-b687-e2b3010663e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27038", "type": "seen", "source": "Telegram/nDhNVEhmvZIxYTtacE8UXyVpkRuXz6-IMlNNEAsJoFxRkd8", "content": "", "creation_timestamp": "2025-06-03T07:02:50.000000Z"}, {"uuid": "c49ca13e-24dd-40e0-9114-9369aa4c771c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27031", "type": "seen", "source": "Telegram/nDhNVEhmvZIxYTtacE8UXyVpkRuXz6-IMlNNEAsJoFxRkd8", "content": "", "creation_timestamp": "2025-06-03T07:02:50.000000Z"}, {"uuid": "d14dc8f0-6f6a-4eb0-8844-396ce22917a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27029", "type": "seen", "source": "Telegram/nDhNVEhmvZIxYTtacE8UXyVpkRuXz6-IMlNNEAsJoFxRkd8", "content": "", "creation_timestamp": "2025-06-03T07:02:50.000000Z"}, {"uuid": "50603972-abab-41c5-83fe-8a3a3de41d6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27709", "type": "seen", "source": "Telegram/bTJ9s_6Dm5c98HBw_nHhlVxkUI4b7kIVaieHQvre00jyC9A", "content": "", "creation_timestamp": "2025-06-09T12:01:36.000000Z"}, {"uuid": "12c005a1-298a-406e-abb6-d9cae6511391", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27179", "type": "seen", "source": "https://t.me/cvedetector/20130", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27179 - Adobe InDesign NULL Pointer Dereference Denial-of-Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27179 \nPublished : March 11, 2025, 6:15 p.m. | 2\u00a0hours, 11\u00a0minutes ago \nDescription : InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T21:48:58.000000Z"}, {"uuid": "ff07bfc7-e246-49c3-86e0-9b54e37b5595", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27178", "type": "seen", "source": "https://t.me/cvedetector/20129", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27178 - Adobe InDesign Out-of-Bounds Write Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27178 \nPublished : March 11, 2025, 6:15 p.m. | 2\u00a0hours, 11\u00a0minutes ago \nDescription : InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T21:48:57.000000Z"}, {"uuid": "9d9ff69b-b334-416a-904a-4b1711be5768", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27177", "type": "seen", "source": "https://t.me/cvedetector/20128", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27177 - Adobe InDesign Heap-based Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2025-27177 \nPublished : March 11, 2025, 6:15 p.m. | 2\u00a0hours, 11\u00a0minutes ago \nDescription : InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T21:48:56.000000Z"}, {"uuid": "995f7874-4333-4cc3-9ce4-ef8d35515887", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27817", "type": "published-proof-of-concept", "source": "Telegram/7AsMETZi1m89hMZMeIqMvOssjUzOdVxzVkyzCB2ajv6KdCg", "content": "", "creation_timestamp": "2025-06-12T09:00:05.000000Z"}, {"uuid": "88bdef27-22f1-4fce-9483-36b38cc7ef3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27817", "type": "published-proof-of-concept", "source": "Telegram/b83YqEoSamzTvIv2g9YPtkdIt3N3ryx9DhLHym4P7gSMoa8", "content": "", "creation_timestamp": "2025-06-12T21:00:05.000000Z"}, {"uuid": "6528e9a6-1983-4106-b480-7c54efc2492a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27038", "type": "exploited", "source": "https://t.me/thehackernews/6929", "content": "\ud83d\udea8 Qualcomm just patched 3 zero-days actively exploited in the wild\u2014two rated CVSS 8.6.\n\n\u25b6 CVE-2025-21479\n\u25b6 CVE-2025-21480\n\u25b6 CVE-2025-27038\n\n\ud83d\udc40 A twist? Similar bugs were used by spyware vendors like Variston and Cy4Gate.\n\nMore here: https://thehackernews.com/2025/06/qualcomm-fixes-3-zero-days-used-in.html", "creation_timestamp": "2025-06-02T16:51:03.000000Z"}, {"uuid": "d1378d23-597d-4e01-9256-963eb54f2344", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27138", "type": "seen", "source": "https://t.me/cvedetector/20238", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27138 - DataEase Unauthenticated Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27138 \nPublished : March 13, 2025, 5:15 p.m. | 43\u00a0minutes ago \nDescription : DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.6, there is a flaw in the authentication in the io.dataease.auth.filter.TokenFilter class, which may cause the risk of unauthorized access. The vulnerability has been fixed in v2.10.6. No known workarounds are available. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-13T19:48:14.000000Z"}, {"uuid": "506ff469-3a37-45a7-9132-240774c92b1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27107", "type": "seen", "source": "https://t.me/cvedetector/20237", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27107 - Minecraft Integrated Scripting Java Reflection Sandbox Escape\", \n  \"Content\": \"CVE ID : CVE-2025-27107 \nPublished : March 13, 2025, 5:15 p.m. | 43\u00a0minutes ago \nDescription : Integrated Scripting is a tool for creating scripts for handling complex operations in Integrated Dynamics. Minecraft users who use Integrated Scripting prior to versions 1.21.1-1.0.17, 1.21.4-1.0.9-254, 1.20.1-1.0.13, and 1.19.2-1.0.10 may be vulnerable to arbitrary code execution. By using Java reflection on a thrown exception object it's possible to escape the JavaScript sandbox for IntegratedScripting's Variable Cards, and leverage that to construct arbitrary Java classes and invoke arbitrary Java methods.  \nThis vulnerability allows for execution of arbitrary Java methods, and by extension arbitrary native code e.g. from `java.lang.Runtime.exec`, on the Minecraft server by any player with the ability to create and use an IntegratedScripting Variable Card. Versions 1.21.1-1.0.17, 1.21.4-1.0.9-254, 1.20.1-1.0.13, and 1.19.2-1.0.10 fix the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-13T19:48:13.000000Z"}, {"uuid": "5f8c1d25-e3e7-44b0-8b7f-63ab998f618b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27430", "type": "seen", "source": "https://t.me/cvedetector/20007", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27430 - SAP CRM and SAP S/4HANA Interaction Center SSRF\", \n  \"Content\": \"CVE ID : CVE-2025-27430 \nPublished : March 11, 2025, 1:15 a.m. | 24\u00a0minutes ago \nDescription : Under certain conditions, an SSRF vulnerability in SAP CRM and SAP S/4HANA (Interaction Center) allows an attacker with low privileges to access restricted information. This flaw enables the attacker to send requests to internal network resources, thereby compromising the application's confidentiality. There is no impact on integrity or availability \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T03:24:27.000000Z"}, {"uuid": "62a5b6b9-5a5d-43ab-af24-e27a53e4cdff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27407", "type": "seen", "source": "https://t.me/cvedetector/20168", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27407 - GraphQL-ruby Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27407 \nPublished : March 12, 2025, 7:15 p.m. | 1\u00a0hour, 49\u00a0minutes ago \nDescription : graphql-ruby is a Ruby implementation of GraphQL. Starting in version 1.11.5 and prior to versions 1.11.8, 1.12.25, 1.13.24, 2.0.32, 2.1.14, 2.2.17, and 2.3.21, loading a malicious schema definition in `GraphQL::Schema.from_introspection` (or `GraphQL::Schema::Loader.load`) can result in remote code execution. Any system which loads a schema by JSON from an untrusted source is vulnerable, including those that use GraphQL::Client to load external schemas via GraphQL introspection. Versions 1.11.8, 1.12.25, 1.13.24, 2.0.32, 2.1.14, 2.2.17, and 2.3.21 contain a patch for the issue. \nSeverity: 9.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-12T22:53:44.000000Z"}, {"uuid": "10aeb26f-e73c-4a24-a4e6-e4ee3bf83e1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27162", "type": "seen", "source": "https://t.me/cvedetector/20139", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27162 - Adobe Acrobat Reader Uninitialized Pointer Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27162 \nPublished : March 11, 2025, 6:15 p.m. | 2\u00a0hours, 11\u00a0minutes ago \nDescription : Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T21:49:11.000000Z"}, {"uuid": "c008dc5e-c9a1-4adc-a87c-ce8f7883d7ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27176", "type": "seen", "source": "https://t.me/cvedetector/20137", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27176 - Adobe InDesign NULL Pointer Dereference Denial-of-Service\", \n  \"Content\": \"CVE ID : CVE-2025-27176 \nPublished : March 11, 2025, 6:15 p.m. | 2\u00a0hours, 11\u00a0minutes ago \nDescription : InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T21:49:10.000000Z"}, {"uuid": "f417a036-97d9-4516-a9ef-5f0b4bed6b51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27175", "type": "seen", "source": "https://t.me/cvedetector/20136", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27175 - Adobe InDesign Arbitrary Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27175 \nPublished : March 11, 2025, 6:15 p.m. | 2\u00a0hours, 11\u00a0minutes ago \nDescription : InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T21:49:09.000000Z"}, {"uuid": "0fdba45c-69d2-4967-b517-4bee57bab12e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27174", "type": "seen", "source": "https://t.me/cvedetector/20135", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27174 - Adobe Acrobat Reader Use After Free Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27174 \nPublished : March 11, 2025, 6:15 p.m. | 2\u00a0hours, 11\u00a0minutes ago \nDescription : Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T21:49:05.000000Z"}, {"uuid": "15535a39-aac6-4cb8-b7f0-edb0453945f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27171", "type": "seen", "source": "https://t.me/cvedetector/20134", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27171 - Adobe InDesign Heap-based Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27171 \nPublished : March 11, 2025, 6:15 p.m. | 2\u00a0hours, 11\u00a0minutes ago \nDescription : InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T21:49:04.000000Z"}, {"uuid": "5216dab6-8892-46e4-8de3-eef16d8f5241", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27867", "type": "seen", "source": "https://t.me/cvedetector/20150", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27867 - Apache Felix HTTP Webconsole Plugin Cross-site Scripting\", \n  \"Content\": \"CVE ID : CVE-2025-27867 \nPublished : March 12, 2025, 4:15 p.m. | 2\u00a0hours, 58\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Felix HTTP Webconsole Plugin.  \n  \nThis issue affects Apache Felix HTTP Webconsole Plugin: from Version 1.X through 1.2.0.  \n  \nUsers are recommended to upgrade to version 1.2.2, which fixes the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-12T20:22:58.000000Z"}, {"uuid": "688849cc-843a-4d37-b370-4b360cf1f20e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27017", "type": "seen", "source": "https://t.me/cvedetector/20146", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27017 - Apache NiFi MongoDB Authentication Credential Exposure\", \n  \"Content\": \"CVE ID : CVE-2025-27017 \nPublished : March 12, 2025, 5:15 p.m. | 1\u00a0hour, 58\u00a0minutes ago \nDescription : Apache NiFi 1.13.0 through 2.2.0 includes the username and password used to authenticate with MongoDB in the NiFi provenance events that MongoDB components generate during processing. An authorized user with read access to the provenance events of those processors may see the credentials information. Upgrading to Apache NiFi 2.3.0 is the recommended mitigation, which removes the credentials from provenance event records. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-12T20:22:55.000000Z"}, {"uuid": "653646d6-84e5-4dbd-b716-d05277b6a97c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27169", "type": "seen", "source": "https://t.me/cvedetector/20138", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27169 - Adobe Illustrator Out-of-Bounds Write Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27169 \nPublished : March 11, 2025, 6:15 p.m. | 2\u00a0hours, 11\u00a0minutes ago \nDescription : Illustrator versions 29.2.1, 28.7.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T21:49:11.000000Z"}, {"uuid": "5e09feb4-7e73-4eb9-82e6-38ecae6de564", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/43832", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-27591\nURL\uff1ahttps://github.com/rvizx/CVE-2025-27591\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-07-12T22:52:20.000000Z"}, {"uuid": "446f9389-c451-4ff8-b622-3642e04ce89f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/43824", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-27591\nURL\uff1ahttps://github.com/obamalaolu/CVE-2025-27591\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-07-12T21:21:10.000000Z"}, {"uuid": "e05374de-4f7b-4fa5-87e6-f565d393e153", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27604", "type": "seen", "source": "https://t.me/cvedetector/19839", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27604 - XWiki Confluence Migrator Pro Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27604 \nPublished : March 7, 2025, 5:15 p.m. | 1\u00a0hour, 59\u00a0minutes ago \nDescription : XWiki Confluence Migrator Pro helps admins to import confluence packages into their XWiki instance. The homepage of the application is public which enables a guest to download the package which might contain sensitive information. This vulnerability is fixed in 1.11.7. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T20:47:51.000000Z"}, {"uuid": "ff3bebdb-b2b5-426f-996c-caf48bebb3d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "published-proof-of-concept", "source": "Telegram/ICckGE2LsEEsOmevjVsJRrFyQxm4RzWlKUmjHuRnhj-xjds", "content": "", "creation_timestamp": "2025-06-16T15:00:10.000000Z"}, {"uuid": "bfd8f136-1c27-4a94-b7f3-d82bc457dfb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27168", "type": "seen", "source": "https://t.me/cvedetector/20144", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27168 - Adobe Illustrator Stack-based Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27168 \nPublished : March 11, 2025, 6:15 p.m. | 2\u00a0hours, 11\u00a0minutes ago \nDescription : Illustrator versions 29.2.1, 28.7.4 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T21:49:18.000000Z"}, {"uuid": "c34d2b41-343e-44a2-b899-715725c1a79f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27167", "type": "seen", "source": "https://t.me/cvedetector/20143", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27167 - Adobe Illustrator Untrusted Search Path Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27167 \nPublished : March 11, 2025, 6:15 p.m. | 2\u00a0hours, 11\u00a0minutes ago \nDescription : Illustrator versions 29.2.1, 28.7.4 and earlier are affected by an Untrusted Search Path vulnerability that might allow attackers to execute their own programs, access unauthorized data files, or modify configuration in unexpected ways. If the application uses a search path to locate critical resources such as programs, then an attacker could modify that search path to point to a malicious program, which the targeted application would then execute. The problem extends to any type of critical resource that the application trusts. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T21:49:18.000000Z"}, {"uuid": "97ea2209-a93b-40a5-af69-756c65c75545", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27166", "type": "seen", "source": "https://t.me/cvedetector/20142", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27166 - Adobe InDesign Out-of-Bounds Write Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27166 \nPublished : March 11, 2025, 6:15 p.m. | 2\u00a0hours, 11\u00a0minutes ago \nDescription : InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T21:49:17.000000Z"}, {"uuid": "27ce79e2-4333-4855-b69c-4c53bb4c7145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27164", "type": "seen", "source": "https://t.me/cvedetector/20141", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27164 - Adobe Acrobat Reader Out-of-Bounds Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27164 \nPublished : March 11, 2025, 6:15 p.m. | 2\u00a0hours, 11\u00a0minutes ago \nDescription : Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T21:49:16.000000Z"}, {"uuid": "d20e614d-22a4-4377-8b71-dcf0fc7a304f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27163", "type": "seen", "source": "https://t.me/cvedetector/20140", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27163 - Adobe Acrobat Reader Out-of-Bounds Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27163 \nPublished : March 11, 2025, 6:15 p.m. | 2\u00a0hours, 11\u00a0minutes ago \nDescription : Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T21:49:12.000000Z"}, {"uuid": "52211979-116c-4054-b575-333ca35bb2f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27170", "type": "seen", "source": "https://t.me/cvedetector/20133", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27170 - Adobe Illustrator NULL Pointer Dereference Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27170 \nPublished : March 11, 2025, 6:15 p.m. | 2\u00a0hours, 11\u00a0minutes ago \nDescription : Illustrator versions 29.2.1, 28.7.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial of service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T21:49:04.000000Z"}, {"uuid": "26bd10c8-6374-415a-a35f-e9289a349f55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27440", "type": "seen", "source": "https://t.me/cvedetector/20132", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27440 - Zoom Workplace Apps Heap Overflow Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2025-27440 \nPublished : March 11, 2025, 6:15 p.m. | 2\u00a0hours, 11\u00a0minutes ago \nDescription : Heap overflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access. \nSeverity: 8.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T21:49:03.000000Z"}, {"uuid": "f55c6861-e22a-4579-b651-9954a6bb8460", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27439", "type": "seen", "source": "https://t.me/cvedetector/20131", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27439 - Zoom Workplace Apps Buffer Underflow Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27439 \nPublished : March 11, 2025, 6:15 p.m. | 2\u00a0hours, 11\u00a0minutes ago \nDescription : Buffer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access. \nSeverity: 8.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T21:49:02.000000Z"}, {"uuid": "2565fc66-99c2-4f39-903f-612daa03d111", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27172", "type": "seen", "source": "https://t.me/cvedetector/20106", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27172 - Substance3D Designer RCE via Malicious File\", \n  \"Content\": \"CVE ID : CVE-2025-27172 \nPublished : March 11, 2025, 5:16 p.m. | 1\u00a0hour, 6\u00a0minutes ago \nDescription : Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T20:08:18.000000Z"}, {"uuid": "8f36523a-7ade-4283-a43d-b1e8788516cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27152", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mj36pji3jc2f", "content": "", "creation_timestamp": "2026-04-09T16:04:15.265934Z"}, {"uuid": "0452b75a-29dc-4f8d-8559-1a1f151dbea5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-09)", "content": "", "creation_timestamp": "2026-04-09T00:00:00.000000Z"}, {"uuid": "4228eaa6-0498-4a96-a85a-e1c493d0e1c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27773", "type": "seen", "source": "https://t.me/cvedetector/20127", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27773 - SimpleSAMLphp SAML2 Signature Confusion Attack\", \n  \"Content\": \"CVE ID : CVE-2025-27773 \nPublished : March 11, 2025, 7:15 p.m. | 1\u00a0hour, 11\u00a0minutes ago \nDescription : The SimpleSAMLphp SAML2 library is a PHP library for SAML2 related functionality. Prior to versions 4.17.0 and 5.0.0-alpha.20, there is a signature confusion attack in the HTTPRedirect binding. An attacker with any signed SAMLResponse via the HTTP-Redirect binding can cause the application to accept an unsigned message. Versions 4.17.0 and 5.0.0-alpha.20 contain a fix for the issue. \nSeverity: 8.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T21:48:56.000000Z"}, {"uuid": "abb701d7-e55f-42e6-b01d-832ae5178d32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "seen", "source": "https://t.me/cvedetector/20126", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27591 - Below Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27591 \nPublished : March 11, 2025, 7:15 p.m. | 1\u00a0hour, 11\u00a0minutes ago \nDescription : A privilege escalation vulnerability existed in the Below service prior to v0.9.0 due to the creation of a world-writable directory at /var/log/below. This could have allowed local unprivileged users to escalate to root privileges through symlink attacks that manipulate files such as /etc/shadow. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T21:48:55.000000Z"}, {"uuid": "26727505-aa17-4621-98c4-1de91cca893c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27403", "type": "seen", "source": "https://t.me/cvedetector/20086", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27403 - Azure Container Registry Registry Domain Validation Bypass in Ratify\", \n  \"Content\": \"CVE ID : CVE-2025-27403 \nPublished : March 11, 2025, 3:15 p.m. | 1\u00a0hour ago \nDescription : Ratify is a verification engine as a binary executable and on Kubernetes which enables verification of artifact security metadata and admits for deployment only those that comply with policies the user creates. In a Kubernetes environment, Ratify can be configured to authenticate to a private Azure Container Registry (ACR). The Azure workload identity and Azure managed identity authentication providers are configured in this setup. Users that configure a private ACR to be used with the Azure authentication providers may be impacted by a vulnerability that exists in versions prior to 1.2.3 and 1.3.2. Both Azure authentication providers attempt to exchange an Entra ID (EID) token for an ACR refresh token. However, Ratify\u2019s Azure authentication providers did not verify that the target registry is an ACR. This could have led to the EID token being presented to a non-ACR registry during token exchange. EID tokens with ACR access can potentially be extracted and abused if a user workload contains an image reference to a malicious registry. As of versions 1.2.3 and 1.3.2, the Azure workload identity and Azure managed identity authentication providers are updated to add new validation prior to EID token exchange. Validation relies upon registry domain validation against a pre-configured list of well-known ACR endpoints. EID token exchange will be executed only if at least one of the configured well-known domain suffixes (wildcard support included) matches the registry domain of the image reference. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T17:37:30.000000Z"}, {"uuid": "300b81bd-9d1e-43f0-a0a2-3d25bbefc7dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27253", "type": "seen", "source": "https://t.me/cvedetector/19949", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27253 - \"GE Vernova UR IED Family TCP Port Forwarding Input Validation Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-27253 \nPublished : March 10, 2025, 9:15 a.m. | 1\u00a0hour, 53\u00a0minutes ago \nDescription : An improper input validation in GE Vernova UR IED family devices from version 7.0 up to 8.60 allows an attacker to provide input that enstablishes a TCP connection through a port forwarding. The lack of the IP address and port validation may allow the attacker to bypass firewall rules or to send malicious traffic in the network \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-10T12:21:00.000000Z"}, {"uuid": "c75748a1-7000-4fc9-8e4b-e8463fb93ad4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "exploited", "source": "https://t.me/TengkorakCyberCrewzz/606", "content": "Meta Warns of FreeType Vulnerability (CVE-2025-27363) With Active Exploitation Risk \u2013 thehackernews.com\n\nThu, 13 Mar 2025 15:13:00", "creation_timestamp": "2025-03-13T12:03:13.000000Z"}, {"uuid": "75d261cf-df32-43e1-833c-524b61431ac1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27423", "type": "seen", "source": "https://t.me/TengkorakCyberCrewzz/388", "content": "Vim Vulnerability (CVE-2025-27423) Allows Code Execution via Malicious TAR Archives \u2013 gbhackers.com\n\nWed, 05 Mar 2025 18:28:30", "creation_timestamp": "2025-03-05T12:03:33.000000Z"}, {"uuid": "3f9325b5-8e6f-49be-a933-e275ae6fe0b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27396", "type": "seen", "source": "https://t.me/cvedetector/20072", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27396 - Siemens SCALANCE Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27396 \nPublished : March 11, 2025, 10:15 a.m. | 1\u00a0hour, 55\u00a0minutes ago \nDescription : A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly limit the elevation of privileges required to perform certain valid functionality.  \nThis could allow an authenticated lowly-privileged remote attacker to escalate their privileges. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T13:26:50.000000Z"}, {"uuid": "ef7a74d7-396a-4594-baa0-c7a481546b73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27395", "type": "seen", "source": "https://t.me/cvedetector/20071", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27395 - Siemens SCALANCE LPE9403 SFTP Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27395 \nPublished : March 11, 2025, 10:15 a.m. | 1\u00a0hour, 55\u00a0minutes ago \nDescription : A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly limit the scope of files accessible through and the privileges of the SFTP functionality.  \nThis could allow an authenticated highly-privileged remote attacker to read and write arbitrary files. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T13:26:46.000000Z"}, {"uuid": "25ca78a0-ab06-4fc6-8770-5ab0263c1f38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27394", "type": "seen", "source": "https://t.me/cvedetector/20070", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27394 - \"Siemens SCALANCE LPE9403 Remote Code Execution Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-27394 \nPublished : March 11, 2025, 10:15 a.m. | 1\u00a0hour, 55\u00a0minutes ago \nDescription : A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly sanitize user input when creating new SNMP users.  \nThis could allow an authenticated highly-privileged remote attacker to execute arbitrary code on the device. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T13:26:45.000000Z"}, {"uuid": "6691a4d3-bd0a-409c-ba28-3c297060289b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27393", "type": "seen", "source": "https://t.me/cvedetector/20069", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27393 - Siemens SCALANCE LPE9403 Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27393 \nPublished : March 11, 2025, 10:15 a.m. | 1\u00a0hour, 55\u00a0minutes ago \nDescription : A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly sanitize user input when creating new users.  \nThis could allow an authenticated highly-privileged remote attacker to execute arbitrary code on the device. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T13:26:44.000000Z"}, {"uuid": "28a3c4d0-e16b-486f-aa58-120519bcb89a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27392", "type": "seen", "source": "https://t.me/cvedetector/20068", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27392 - Siemens SCALANCE LPE9403 Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27392 \nPublished : March 11, 2025, 10:15 a.m. | 1\u00a0hour, 55\u00a0minutes ago \nDescription : A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly sanitize user input when creating new VXLAN configurations.  \nThis could allow an authenticated highly-privileged remote attacker to execute arbitrary code on the device. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T13:26:44.000000Z"}, {"uuid": "231d574b-cdaf-44f8-a78c-4f8e8233c3dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27494", "type": "seen", "source": "https://t.me/cvedetector/20066", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27494 - SiPass Integrated Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27494 \nPublished : March 11, 2025, 10:15 a.m. | 1\u00a0hour, 55\u00a0minutes ago \nDescription : A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V6.4.9), SiPass integrated ACC-AP (All versions < V6.4.9). Affected devices improperly sanitize input for the pubkey endpoint of the REST API. This could allow an authenticated remote administrator to escalate privileges by injecting arbitrary commands that are executed with root privileges. \nSeverity: 9.1 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T13:26:39.000000Z"}, {"uuid": "0d2e836b-3838-40ff-a737-474bedd0b90b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27438", "type": "seen", "source": "https://t.me/cvedetector/20065", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27438 - \"Siemens Teamcenter Visualization and Tecnomatix Plant Simulation Out-of-Bounds Read\"\", \n  \"Content\": \"CVE ID : CVE-2025-27438 \nPublished : March 11, 2025, 10:15 a.m. | 1\u00a0hour, 55\u00a0minutes ago \nDescription : A vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.13), Teamcenter Visualization V2312 (All versions < V2312.0009), Teamcenter Visualization V2406 (All versions < V2406.0007), Teamcenter Visualization V2412 (All versions < V2412.0002), Tecnomatix Plant Simulation V2302 (All versions < V2302.0021), Tecnomatix Plant Simulation V2404 (All versions < V2404.0010). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted WRL files.  \nThis could allow an attacker to execute code in the context of the current process. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T13:26:38.000000Z"}, {"uuid": "b579ef09-9dd8-494b-a127-5250965017f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27398", "type": "seen", "source": "https://t.me/cvedetector/20064", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27398 - SCALANCE LPE9403 Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27398 \nPublished : March 11, 2025, 10:15 a.m. | 1\u00a0hour, 55\u00a0minutes ago \nDescription : A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly neutralize special characters when interpreting user controlled log paths.  \nThis could allow an authenticated highly-privileged remote attacker to execute a limited set of binaries that are already present on the filesystem. \nSeverity: 2.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T13:26:38.000000Z"}, {"uuid": "2d6e644c-6a63-49a6-8a19-da4bed63b252", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27493", "type": "seen", "source": "https://t.me/cvedetector/20063", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27493 - SiPass Telnet Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27493 \nPublished : March 11, 2025, 10:15 a.m. | 1\u00a0hour, 55\u00a0minutes ago \nDescription : A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V6.4.9), SiPass integrated ACC-AP (All versions < V6.4.9). Affected devices improperly sanitize user input for specific commands on the telnet command line interface. This could allow an authenticated local administrator to escalate privileges by injecting arbitrary commands that are executed with root privileges. \nSeverity: 8.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T13:26:37.000000Z"}, {"uuid": "012dded6-3d19-4f30-939d-2f15f9cc536b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27397", "type": "seen", "source": "https://t.me/cvedetector/20062", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27397 - Siemens SCALANCE File Log Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27397 \nPublished : March 11, 2025, 10:15 a.m. | 1\u00a0hour, 55\u00a0minutes ago \nDescription : A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly limit user controlled paths to which logs are written and from where they are read.  \nThis could allow an authenticated highly-privileged remote attacker to read and write arbitrary files in the filesystem, if and only if the malicious path ends with 'log' . \nSeverity: 3.8 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T13:26:36.000000Z"}, {"uuid": "a296d897-f2a3-4edd-bb1d-c76c8c485bb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27817", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mjaqdovznb25", "content": "", "creation_timestamp": "2026-04-11T21:03:06.742986Z"}, {"uuid": "fe7b766e-810b-4fd7-b4fb-8a45badcfbea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27912", "type": "seen", "source": "https://t.me/cvedetector/20060", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27912 - Seq CSRF Impersonation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27912 \nPublished : March 11, 2025, 8:15 a.m. | 1\u00a0hour, 50\u00a0minutes ago \nDescription : An issue was discovered in Datalust Seq before 2024.3.13545. Missing Content-Type validation can lead to CSRF when (1) Entra ID or OpenID Connect authentication is in use and a user visits a compromised/malicious site, or (2) when username/password or Active Directory authentication is in use and a user visits a compromised/malicious site under the same effective top-level domain as the Seq server. Exploitation of the vulnerability allows the attacker to conduct impersonation attacks and perform actions in Seq on behalf of the targeted user. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T11:46:27.000000Z"}, {"uuid": "07e88934-5299-4622-a4ce-29d1f21c1ea5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27911", "type": "seen", "source": "https://t.me/cvedetector/20059", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27911 - Datalust Seq Denial of Service (DoS) and Resource Exhaustion\", \n  \"Content\": \"CVE ID : CVE-2025-27911 \nPublished : March 11, 2025, 8:15 a.m. | 1\u00a0hour, 50\u00a0minutes ago \nDescription : An issue was discovered in Datalust Seq before 2024.3.13545. Expansion of identifiers in message templates can be used to bypass the system \"Event body limit bytes\" setting, leading to increased resource consumption. With sufficiently large events, there can be disk space exhaustion (if saved to disk) or a termination of the server process with an out-of-memory error. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T11:46:26.000000Z"}, {"uuid": "77f87ecb-778f-4d1b-afe1-16daeba42e5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27893", "type": "seen", "source": "https://t.me/cvedetector/20054", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27893 - Archer Platform Immutable Field Manipulation Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-27893 \nPublished : March 11, 2025, 9:15 a.m. | 50\u00a0minutes ago \nDescription : In Archer Platform 6 through 6.14.00202.10024, an authenticated user with record creation privileges can manipulate immutable fields, such as the creation date, by intercepting and modifying a Copy request via a GenericContent/Record.aspx?id= URI. This enables unauthorized modification of system-generated metadata, compromising data integrity and potentially impacting auditing, compliance, and security controls. \nSeverity: 1.8 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T11:46:20.000000Z"}, {"uuid": "94148162-d8e4-45c9-94a7-26ca082d707f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27248", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15075", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27248\n\ud83d\udd25 CVSS Score: 3.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.\n\ud83d\udccf Published: 2025-05-06T09:03:26.206Z\n\ud83d\udccf Modified: 2025-05-06T09:03:26.206Z\n\ud83d\udd17 References:\n1. https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-05.md", "creation_timestamp": "2025-05-06T09:21:16.000000Z"}, {"uuid": "c6ae0414-92e3-4588-b31b-88cf8797b0f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27241", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15074", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27241\n\ud83d\udd25 CVSS Score: 3.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.\n\ud83d\udccf Published: 2025-05-06T09:03:33.143Z\n\ud83d\udccf Modified: 2025-05-06T09:03:33.143Z\n\ud83d\udd17 References:\n1. https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-05.md", "creation_timestamp": "2025-05-06T09:21:15.000000Z"}, {"uuid": "5638b37d-b5e8-4de7-96e4-82f87e8f29d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27910", "type": "seen", "source": "https://t.me/cvedetector/20005", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27910 - Tianti CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27910 \nPublished : March 10, 2025, 10:15 p.m. | 1\u00a0hour, 23\u00a0minutes ago \nDescription : tianti v2.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /user/ajax/upd/status. This vulnerability allows attackers to execute arbitrary operations via a crafted GET or POST request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T00:54:11.000000Z"}, {"uuid": "f26fd796-32aa-462f-bba4-18c16b7cbc5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27926", "type": "seen", "source": "https://t.me/cvedetector/20003", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27926 - Nintex Automation K2 SmartForms Designer Unauthenticated Password Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-27926 \nPublished : March 10, 2025, 11:15 p.m. | 22\u00a0minutes ago \nDescription : In Nintex Automation 5.6 and 5.7 before 5.8, the K2 SmartForms Designer folder has configuration files (web.config) containing passwords that are readable by unauthorized users. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T00:54:07.000000Z"}, {"uuid": "174964ce-5223-497f-aea3-091c908d1da6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27925", "type": "seen", "source": "https://t.me/cvedetector/20002", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27925 - Nintex Automation Deserialization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27925 \nPublished : March 10, 2025, 11:15 p.m. | 22\u00a0minutes ago \nDescription : Nintex Automation 5.6 and 5.7 before 5.8 has insecure deserialization of user input. \nSeverity: 8.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T00:54:06.000000Z"}, {"uuid": "0d7507a4-5791-413d-9bbe-589f3c24d6c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27924", "type": "seen", "source": "https://t.me/cvedetector/20001", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27924 - Nintex Automation Stored Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-27924 \nPublished : March 10, 2025, 11:15 p.m. | 22\u00a0minutes ago \nDescription : Nintex Automation 5.6 and 5.7 before 5.8 has a stored XSS issue associated with the \"Navigate to a URL\" action. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T00:54:05.000000Z"}, {"uuid": "7b40a794-0cc0-4ca2-993d-f4988eda5faf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27558", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/41833", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aPatching CVE-2025-27558 vulnerability that had affected my linux image.\nURL\uff1ahttps://github.com/Atlas-ghostshell/CVE-2025-27558_Patching\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-06-25T10:26:35.000000Z"}, {"uuid": "48fe8f81-a396-4eb4-938d-1ac0af92f9d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "exploited", "source": "https://t.me/TengkorakCyberCrewzz/32074", "content": "Google Chrome Zero-Day CVE-2025-2783 Exploited by TaxOff to Deploy Trinper Backdoor \u2013 thehackernews.com\n\nWed, 18 Jun 2025 03:16:00", "creation_timestamp": "2025-06-17T20:04:23.000000Z"}, {"uuid": "b4ce7e06-69ff-4567-85b9-e9232d3c9e3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/4932", "content": "Google Chrome Zero-Day CVE-2025-2783 Exploited by TaxOff to Deploy Trinper Backdoor \u2013 thehackernews.com\n\nWed, 18 Jun 2025 03:16:00", "creation_timestamp": "2025-06-17T20:04:23.000000Z"}, {"uuid": "097a134c-4211-40b2-9196-d8a3cb45122d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27436", "type": "seen", "source": "https://t.me/cvedetector/20012", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27436 - SAP S/4HANA Access Control Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27436 \nPublished : March 11, 2025, 1:15 a.m. | 24\u00a0minutes ago \nDescription : The Manage Bank Statements in SAP S/4HANA does not perform required access control checks for an authenticated user to confirm whether a request to interact with a resource is legitimate, allowing the attacker to delete the attachment of a posted bank statement. This leads to a low impact on integrity, with no impact on the confidentiality of the data or the availability of the application. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T03:24:33.000000Z"}, {"uuid": "ba8e3075-42b7-4271-995a-6e6d645952d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27434", "type": "seen", "source": "https://t.me/cvedetector/20011", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27434 - SAP Commerce Swagger UI Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-27434 \nPublished : March 11, 2025, 1:15 a.m. | 24\u00a0minutes ago \nDescription : Due to insufficient input validation, SAP Commerce (Swagger UI) allows an unauthenticated attacker to inject the malicious code from remote sources, which can be leveraged by an attacker to execute a cross-site scripting (XSS) attack. This could lead to a high impact on the confidentiality, integrity, and availability of data in SAP Commerce. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T03:24:29.000000Z"}, {"uuid": "47e0ed1b-57f3-48de-89ac-0f3bf9bece30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27433", "type": "seen", "source": "https://t.me/cvedetector/20010", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27433 - SAP S/4HANA File Upload Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2025-27433 \nPublished : March 11, 2025, 1:15 a.m. | 24\u00a0minutes ago \nDescription : The Manage Bank Statements in SAP S/4HANA allows authenticated attacker to bypass certain functionality restrictions of the application and upload files to a reversed bank statement. This vulnerability has a low impact on the application's integrity, with no effect on confidentiality and availability of the application. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T03:24:29.000000Z"}, {"uuid": "fa8befec-110e-40e3-aa6e-2513ad65a662", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27432", "type": "seen", "source": "https://t.me/cvedetector/20009", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27432 - SAP Electronic Invoicing for Brazil Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-27432 \nPublished : March 11, 2025, 1:15 a.m. | 24\u00a0minutes ago \nDescription : The eDocument Cockpit (Inbound NF-e) in SAP Electronic Invoicing for Brazil allows an authenticated attacker with certain privileges to gain unauthorized access to each transaction. By executing the specific ABAP method within the ABAP system, an unauthorized attacker could call each transaction and view the inbound delivery details. This vulnerability has a low impact on the confidentiality with no effect on the integrity and the availability of the application. \nSeverity: 2.4 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T03:24:28.000000Z"}, {"uuid": "a89ce80a-4b11-4f6a-989a-12399d82ad9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27431", "type": "seen", "source": "https://t.me/cvedetector/20008", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27431 - SAP NetWeaver Application Server Java Stored Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-27431 \nPublished : March 11, 2025, 1:15 a.m. | 24\u00a0minutes ago \nDescription : User management functionality in SAP NetWeaver Application Server Java is vulnerable to Stored Cross-Site Scripting (XSS). This could enable an attacker to inject malicious payload that gets stored and executed when a user accesses the functionality, hence leading to information disclosure or unauthorized data modifications within the scope of victim\ufffds browser. There is no impact on availability. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T03:24:27.000000Z"}, {"uuid": "d4f6bdb1-3cd8-4afe-bfac-494b1daa75b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27505", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-12)", "content": "", "creation_timestamp": "2026-04-12T00:00:00.000000Z"}, {"uuid": "ee6b056c-d766-4ec6-84eb-604927bc3add", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27143", "type": "seen", "source": "Telegram/Ju4ikepgZXIrBR48ybMuwvZYHxZpoWOINOTmshCuddu4Jw3q", "content": "", "creation_timestamp": "2025-03-02T11:45:37.000000Z"}, {"uuid": "4487c80b-5f25-448f-b880-19d5e99a8c4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27610", "type": "seen", "source": "https://t.me/cvedetector/20000", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27610 - Rack Static Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27610 \nPublished : March 10, 2025, 11:15 p.m. | 22\u00a0minutes ago \nDescription : Rack provides an interface for developing web applications in Ruby. Prior to versions 2.2.13, 3.0.14, and 3.1.12, `Rack::Static` can serve files under the specified `root:` even if `urls:` are provided, which may expose other files under the specified `root:` unexpectedly. The vulnerability occurs because `Rack::Static` does not properly sanitize user-supplied paths before serving files. Specifically, encoded path traversal sequences are not correctly validated, allowing attackers to access files outside the designated static file directory. By exploiting this vulnerability, an attacker can gain access to all files under the specified `root:` directory, provided they are able to determine then path of the file. Versions 2.2.13, 3.0.14, and 3.1.12 contain a patch for the issue. Other mitigations include removing usage of `Rack::Static`, or ensuring that `root:` points at a directory path which only contains files which should be accessed publicly. It is likely that a CDN or similar static file server would also mitigate the issue. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T00:54:04.000000Z"}, {"uuid": "a8e21fe1-2abc-4f8f-8efc-972a34b930c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27515", "type": "published-proof-of-concept", "source": "Telegram/vpx3YKOcAueFTTlBXmAmNxsIEwTkvSUeFD5DKiDa4uIA5wkK", "content": "", "creation_timestamp": "2025-09-11T08:57:04.000000Z"}, {"uuid": "608e6890-a24d-456c-baf9-56bb9302e7e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27515", "type": "seen", "source": "Telegram/oK6YZ201yH3u36Ld86AIM6irgNnEFdkEpiqcu6eWwkf1L3w", "content": "", "creation_timestamp": "2025-09-11T08:57:05.000000Z"}, {"uuid": "809928fb-4b54-4e73-a805-69b2f82018a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27136", "type": "seen", "source": "https://t.me/cvedetector/19995", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27136 - Amazon LocalS3 XXE Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27136 \nPublished : March 10, 2025, 7:15 p.m. | 2\u00a0hours, 17\u00a0minutes ago \nDescription : LocalS3 is an Amazon S3 mock service for testing and local development. Prior to version 1.21, the LocalS3 service's bucket creation endpoint is vulnerable to XML External Entity (XXE) injection. When processing the CreateBucketConfiguration XML document during bucket creation, the service's XML parser is configured to resolve external entities. This allows an attacker to declare an external entity that references an internal URL, which the server will then attempt to fetch when parsing the XML. The vulnerability specifically occurs in the location constraint processing, where the XML parser resolves external entities without proper validation or restrictions. When the external entity is resolved, the server makes an HTTP request to the specified URL and includes the response content in the parsed XML document. This vulnerability can be exploited to perform server-side request forgery (SSRF) attacks, allowing an attacker to make requests to internal services or resources that should not be accessible from external networks. The server will include the responses from these internal requests in the resulting bucket configuration, effectively leaking sensitive information. The attacker only needs to be able to send HTTP requests to the LocalS3 service to exploit this vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-10T23:13:53.000000Z"}, {"uuid": "307165d7-6eb5-4b84-8358-b1436571949f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27615", "type": "seen", "source": "https://t.me/cvedetector/19993", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27615 - umatiGateway Exposed Configuration Interface Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27615 \nPublished : March 10, 2025, 7:15 p.m. | 2\u00a0hours, 17\u00a0minutes ago \nDescription : umatiGateway is software for connecting OPC Unified Architecture servers with an MQTT broker utilizing JSON messages. The user interface may possibly be publicly accessible with umatiGateway's provided docker-compose file. With this access, the configuration can be viewed and altered. Commit 5d81a3412bc0051754a3095d89a06d6d743f2b16 uses `127.0.0.1:8080:8080` to limit access to the local network. For those who are unable to use this proposed patch, a firewall on Port 8080 may block remote access, but the workaround may not be perfect because Docker may also bypass a firewall by its iptable based rules for port forwarding. \nSeverity: 8.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-10T23:13:49.000000Z"}, {"uuid": "1a4ad044-24e4-4fdb-b575-c0c69ffc2542", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27141", "type": "seen", "source": "Telegram/tEVz3iKe6Q4BOdDA0KUiMoHmAZLffmp5yNY42hgU3f3m2tcj", "content": "", "creation_timestamp": "2025-03-02T11:45:37.000000Z"}, {"uuid": "4c4dc1a7-a369-47de-bb51-9b322f24e518", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27616", "type": "seen", "source": "https://t.me/cvedetector/19990", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27616 - Vela Pipeline Automation Webhook Spoofing Repository Takeover Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27616 \nPublished : March 10, 2025, 7:15 p.m. | 2\u00a0hours, 17\u00a0minutes ago \nDescription : Vela is a Pipeline Automation (CI/CD) framework built on Linux container technology written in Golang. Prior to versions 0.25.3 and 0.26.3, by spoofing a webhook payload with a specific set of headers and body data, an attacker could transfer ownership of a repository and its repo level secrets to a separate repository. These secrets could be exfiltrated by follow up builds to the repository. Users with an enabled repository with access to repo level CI secrets in Vela are vulnerable to the exploit, and any user with access to the CI instance and the linked source control manager can perform the exploit. Versions 0.25.3 and 0.26.3 fix the issue. No known workarounds are available. \nSeverity: 8.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-10T23:13:46.000000Z"}, {"uuid": "71c0000e-e88e-4626-be51-d72a4d760de8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27913", "type": "seen", "source": "https://t.me/cvedetector/19987", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27913 - Passbolt Email Header Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27913 \nPublished : March 10, 2025, 8:15 p.m. | 1\u00a0hour, 17\u00a0minutes ago \nDescription : Passbolt API before 5, if the server is misconfigured (with an incorrect installation process and disregarding of Health Check results), can send email messages with a domain name taken from an attacker-controlled HTTP Host header. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-10T23:13:41.000000Z"}, {"uuid": "7e8513d7-5397-48ae-8ce8-352f030db2b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27255", "type": "seen", "source": "https://t.me/cvedetector/19946", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27255 - GE Vernova EnerVista UR Setup Hardcoded Credentials Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2025-27255 \nPublished : March 10, 2025, 9:15 a.m. | 1\u00a0hour, 53\u00a0minutes ago \nDescription : Use of Hard-coded Credentials vulnerability in GE Vernova EnerVista UR Setup allows Privilege Escalation. The local user database is encrypted using an hardcoded password retrievable by an attacker analyzing the application code. \nSeverity: 8.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-10T12:20:54.000000Z"}, {"uuid": "665d1dcc-b8f6-4f0b-b421-7ca12d02e082", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27254", "type": "seen", "source": "https://t.me/cvedetector/19945", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27254 - GE Vernova EnerVista UR Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-27254 \nPublished : March 10, 2025, 9:15 a.m. | 1\u00a0hour, 53\u00a0minutes ago \nDescription : Improper Authentication vulnerability in GE Vernova EnerVista UR Setup allows Authentication Bypass.\u00a0  \nThe software's startup authentication can be disabled by altering a Windows registry setting that any user can modify. \nSeverity: 8.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-10T12:20:53.000000Z"}, {"uuid": "84df73d8-740b-4e3a-b62a-eacb0d6e0ff5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "seen", "source": "https://t.me/cvedetector/19905", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27840 - Espressif ESP32 HCI Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27840 \nPublished : March 8, 2025, 8:15 p.m. | 1\u00a0hour, 50\u00a0minutes ago \nDescription : Espressif ESP32 chips allow 29 hidden HCI commands, such as 0xFC02 (Write memory). \nSeverity: 6.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-08T23:33:04.000000Z"}, {"uuid": "30955134-eecd-4675-b2e1-c0c13d5317bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27140", "type": "seen", "source": "Telegram/AIl_KcdXcI4iU77P42me5qozY-Iqzsv6oHtnBXCNMET09Owe", "content": "", "creation_timestamp": "2025-03-02T11:45:37.000000Z"}, {"uuid": "f379f672-f36a-4c3f-bf34-91d0de20f9c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27257", "type": "seen", "source": "https://t.me/cvedetector/19948", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27257 - GE Vernova UR IED Firmware Signing Bypass Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-27257 \nPublished : March 10, 2025, 9:15 a.m. | 1\u00a0hour, 53\u00a0minutes ago \nDescription : Insufficient Verification of Data Authenticity vulnerability in GE Vernova UR IED family devices allows an authenticated user to install a modified firmware.  \nThe firmware signature verification is enforced only on the client-side dedicated software Enervista UR Setup, allowing the integration check to be bypassed. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-10T12:20:59.000000Z"}, {"uuid": "dc91b3f1-c12e-4fdf-97c5-cf5ac018be00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27256", "type": "seen", "source": "https://t.me/cvedetector/19947", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27256 - GE Vernova Enervista UR Setup SSH Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-27256 \nPublished : March 10, 2025, 9:15 a.m. | 1\u00a0hour, 53\u00a0minutes ago \nDescription : Missing Authentication for Critical Function vulnerability in GE Vernova Enervista UR Setup application allows Authentication Bypass due to a missing SSH server authentication. Since the client connection is not authenticated, an attacker may perform a man-in-the-middle attack on the network. \nSeverity: 8.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-10T12:20:58.000000Z"}, {"uuid": "14ab1cee-f915-43ea-acc8-f0dc02a60200", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27357", "type": "seen", "source": "https://t.me/cvedetector/18800", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27357 - Musa AVCI \u00d6nceki Yaz\u0131 Link CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27357 \nPublished : Feb. 24, 2025, 3:15 p.m. | 1\u00a0hour, 36\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in Musa AVCI \u00d6nceki Yaz\u0131 Link allows Cross Site Request Forgery. This issue affects \u00d6nceki Yaz\u0131 Link: from n/a through 1.3. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-24T17:57:38.000000Z"}, {"uuid": "45ccaf6c-aa88-4a45-ba31-2b0db86a36b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27356", "type": "seen", "source": "https://t.me/cvedetector/18799", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27356 - Hardik Sticky Header On Scroll Missing Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27356 \nPublished : Feb. 24, 2025, 3:15 p.m. | 1\u00a0hour, 36\u00a0minutes ago \nDescription : Missing Authorization vulnerability in Hardik Sticky Header On Scroll allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Sticky Header On Scroll: from n/a through 1.0. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-24T17:57:38.000000Z"}, {"uuid": "7982a4c2-6b7a-4d49-8c52-5b96d4a93064", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "exploited", "source": "https://t.me/TengkorakCyberCrewzz/2012", "content": "Update ASAP: Google Fixes Android Flaw (CVE-2025-27363) Exploited by Attackers \u2013 thehackernews.com\n\nTue, 06 May 2025 13:46:00", "creation_timestamp": "2025-05-06T08:03:13.000000Z"}, {"uuid": "c350a8ab-f37f-4fc2-9925-4231c41ad1b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "exploited", "source": "Telegram/w38oJe2rJ8tWV2VSOHsbUL7Dwwt1zECkr-EPL5Ddsrfy03k", "content": "", "creation_timestamp": "2025-06-17T21:18:53.000000Z"}, {"uuid": "babc6005-3296-4e75-865c-90adbf05bc8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://t.me/cvedetector/19923", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27636 - Apache Camel Header Injection Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-27636 \nPublished : March 9, 2025, 1:15 p.m. | 1\u00a0hour, 8\u00a0minutes ago \nDescription : Bypass/Injection vulnerability in Apache Camel.  \n  \nThis issue affects Apache Camel: from 4.10.0 through <=<=<=\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-09T15:26:25.000000Z"}, {"uuid": "9732c66a-119c-4837-a25f-6103b9332099", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27400", "type": "seen", "source": "https://bsky.app/profile/adobedigest.bsky.social/post/3mjkmihxxfn27", "content": "", "creation_timestamp": "2026-04-15T19:20:48.070814Z"}, {"uuid": "cc200026-8a49-49a7-b18b-a2c4ca610570", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27598", "type": "seen", "source": "https://t.me/cvedetector/19760", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27598 - ImageSharp Gif Decoder Out-of-bounds Write Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27598 \nPublished : March 6, 2025, 11:15 p.m. | 55\u00a0minutes ago \nDescription : ImageSharp is a 2D graphics API. An Out-of-bounds Write vulnerability has been found in the ImageSharp gif decoder, allowing attackers to cause a crash using a specially crafted gif. This can potentially lead to denial of service. The problem has been patched. All users are advised to upgrade to v3.1.7 or v2.1.10. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T01:33:18.000000Z"}, {"uuid": "b0b7c6a6-8c4b-4c61-b20d-790a28c78fce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27352", "type": "seen", "source": "https://t.me/cvedetector/18803", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27352 - Wumii Team \u65e0\u89c5\u76f8\u5173\u6587\u7ae0\u63d2\u4ef6 Cross-site Scripting\", \n  \"Content\": \"CVE ID : CVE-2025-27352 \nPublished : Feb. 24, 2025, 3:15 p.m. | 1\u00a0hour, 36\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wumii team \u65e0\u89c5\u76f8\u5173\u6587\u7ae0\u63d2\u4ef6 allows Stored XSS. This issue affects \u65e0\u89c5\u76f8\u5173\u6587\u7ae0\u63d2\u4ef6: from n/a through 1.0.5.7. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-24T17:57:44.000000Z"}, {"uuid": "3721e992-df4b-4aa5-a43e-d97ac7013f5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mjmv7slkyh25", "content": "", "creation_timestamp": "2026-04-16T17:02:19.539086Z"}, {"uuid": "869e6992-bba4-472a-81b1-bef5ea0280d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2704", "type": "seen", "source": "https://t.me/cKure/14506", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 OpenVPN Vulnerability Let Attackers Crash Servers & Execute Remote Code.\n\nCVE-2025-2704, affects OpenVPN versions 2.6.1 through 2.6.13 when configured with the \u2013tls-crypt-v2 option, a feature commonly used to enhance privacy and prevent deep packet inspection (DPI).\n\nhttps://community.openvpn.net/openvpn/wiki/Downloads#OpenVPN2.6.14--Released02April2025\n\nhttps://cybersecuritynews.com/openvpn-vulnerability-let-attackers-crash-servers/", "creation_timestamp": "2025-04-11T21:11:04.000000Z"}, {"uuid": "3c5c5979-38eb-45a6-aa46-034fe7d51839", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "exploited", "source": "https://t.me/cKure/14911", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 \ud83d\udcf1 A Chrome zero-day (CVE-2025-2783) was used in a live attack to drop a stealthy backdoor.\n\nThe hacker group TaxOff tricked targets with fake forum invites\u2014one click, full compromise.\n\nHere\u2019s how the Trinper malware quietly hijacked systems: https://thehackernews.com/2025/06/google-chrome-zero-day-cve-2025-2783.html", "creation_timestamp": "2025-06-17T19:56:52.000000Z"}, {"uuid": "495eed55-e5f4-4885-9b8c-b3cf3627e131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27839", "type": "seen", "source": "https://t.me/cvedetector/19870", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27839 - Tangem SDK Offline Wallet Attestation Verification Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-27839 \nPublished : March 8, 2025, 12:15 a.m. | 1\u00a0hour, 4\u00a0minutes ago \nDescription : operations/attestation/AttestationTask.kt in the Tangem SDK before 5.18.3 for Android has a logic flow in offline wallet attestation (genuineness check) that causes verification results to be disregarded during the first scan of a card. Exploitation may not have been possible. \nSeverity: 3.2 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-08T02:39:01.000000Z"}, {"uuid": "7927d30a-9e7d-46f0-a868-7c0f47dc4427", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27822", "type": "seen", "source": "https://t.me/cvedetector/19868", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27822 - Backdrop CMS Masquerade Module Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27822 \nPublished : March 7, 2025, 10:15 p.m. | 1\u00a0hour, 1\u00a0minute ago \nDescription : An issue was discovered in the Masquerade module before 1.x-1.0.1 for Backdrop CMS. It allows people to temporarily switch to another user account. The module provides a \"Masquerade as admin\" permission to restrict people (who can masquerade) from switching to an account with administrative privileges. This permission is not always honored and may allow non-administrative users to masquerade as an administrator. This vulnerability is mitigated by the fact that an attacker must have a role with the \"Masquerade as user\" permission. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-08T00:58:49.000000Z"}, {"uuid": "b0d16542-1e88-4e50-9b7c-0345ce3ea747", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27826", "type": "seen", "source": "https://t.me/cvedetector/19865", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27826 - Backdrop CMS Bootstrap Lite XSS Injection\", \n  \"Content\": \"CVE ID : CVE-2025-27826 \nPublished : March 7, 2025, 10:15 p.m. | 1\u00a0hour, 1\u00a0minute ago \nDescription : An XSS issue was discovered in the Bootstrap Lite theme before 1.x-1.4.5 for Backdrop CMS. It doesn't sufficiently sanitize certain class names. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-08T00:58:46.000000Z"}, {"uuid": "11543512-6915-40ad-aa16-e8d3d411ec15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27825", "type": "seen", "source": "https://t.me/cvedetector/19864", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27825 - Backdrop CMS Bootstrap 5 Lite XSS Injection\", \n  \"Content\": \"CVE ID : CVE-2025-27825 \nPublished : March 7, 2025, 10:15 p.m. | 1\u00a0hour, 1\u00a0minute ago \nDescription : An XSS issue was discovered in the Bootstrap 5 Lite theme before 1.x-1.0.3 for Backdrop CMS. It doesn't sufficiently sanitize certain class names. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-08T00:58:43.000000Z"}, {"uuid": "296a7190-3389-444c-9c02-338856e16c5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27824", "type": "seen", "source": "https://t.me/cvedetector/19863", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27824 - Backdrop CMS Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-27824 \nPublished : March 7, 2025, 10:15 p.m. | 1\u00a0hour, 1\u00a0minute ago \nDescription : An XSS issue was discovered in the Link iframe formatter module before 1.x-1.1.1 for Backdrop CMS. It doesn't sufficiently sanitize input before displaying results to the screen. This vulnerability is mitigated by the fact that an attacker must have the ability to create content containing an iFrame field. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-08T00:58:42.000000Z"}, {"uuid": "9c165228-a564-46bb-987e-e505c1a8afe4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27823", "type": "seen", "source": "https://t.me/cvedetector/19862", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27823 - Backdrop CMS Mail Disguise Module XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27823 \nPublished : March 7, 2025, 10:15 p.m. | 1\u00a0hour, 1\u00a0minute ago \nDescription : An issue was discovered in the Mail Disguise module before 1.x-1.0.5 for Backdrop CMS. It enables a website to obfuscate email addresses, and should prevent spambots from collecting them. The module doesn't sufficiently validate the data attribute value on links, potentially leading to a Cross Site Scripting (XSS) vulnerability. This is mitigated by the fact an attacker must be able to insert link () HTML elements containing data attributes into the page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-08T00:58:41.000000Z"}, {"uuid": "79b0fd59-40f0-4806-971f-20eeb8476d56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "exploited", "source": "https://t.me/TengkorakCyberCrewzz/3082", "content": "Google Chrome Zero-Day CVE-2025-2783 Exploited by TaxOff to Deploy Trinper Backdoor \u2013 thehackernews.com\n\nWed, 18 Jun 2025 03:16:00", "creation_timestamp": "2025-06-17T20:04:24.000000Z"}, {"uuid": "d8807362-7591-4b94-ab49-d02cabe99e02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27152", "type": "seen", "source": "https://t.me/cvedetector/19834", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27152 - Axios SSRF and Credential Leakage Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27152 \nPublished : March 7, 2025, 4:15 p.m. | 58\u00a0minutes ago \nDescription : axios is a promise based HTTP client for the browser and node.js. The issue occurs when passing absolute URLs rather than protocol-relative URLs to axios. Even if \u2060baseURL is set, axios sends the request to the specified absolute URL, potentially causing SSRF and credential leakage. This issue impacts both server-side and client-side usage of axios. This issue is fixed in 1.8.2. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T18:17:23.000000Z"}, {"uuid": "35f1009b-711d-4cc5-a554-7eb3225e81b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27607", "type": "seen", "source": "https://t.me/cvedetector/19838", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27607 - Python JSON Logger Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27607 \nPublished : March 7, 2025, 5:15 p.m. | 1\u00a0hour, 59\u00a0minutes ago \nDescription : Python JSON Logger is a JSON Formatter for Python Logging. Between 30 December 2024 and 4 March 2025 Python JSON Logger was vulnerable to RCE through a missing dependency. This occurred because msgspec-python313-pre was deleted by the owner leaving the name open to being claimed by a third party. If the package was claimed, it would allow them RCE on any Python JSON Logger user who installed the development dependencies on Python 3.13 (e.g. pip install python-json-logger[dev]). This issue has been resolved with 3.3.0. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T20:47:50.000000Z"}, {"uuid": "71a6c5c2-8d43-4264-bb8b-d0147775c827", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27519", "type": "seen", "source": "https://t.me/cvedetector/19831", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27519 - TrueFoundry Cognita Remote Code Execution via Path Traversal\", \n  \"Content\": \"CVE ID : CVE-2025-27519 \nPublished : March 7, 2025, 4:15 p.m. | 58\u00a0minutes ago \nDescription : Cognita is a RAG (Retrieval Augmented Generation) Framework for building modular, open source applications for production by TrueFoundry. A path traversal issue exists at /v1/internal/upload-to-local-directory which is enabled when the Local env variable is set to true, such as when Cognita is setup using Docker. Because the docker environment sets up the backend uvicorn server with auto reload enabled, when an attacker overwrites the /app/backend/__init__.py file, the file will automatically be reloaded and executed. This allows an attacker to get remote code execution in the context of the Docker container. This vulnerability is fixed in commit a78bd065e05a1b30a53a3386cc02e08c317d2243. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T18:17:18.000000Z"}, {"uuid": "4edc4f47-f848-46cf-a358-6a4e71c11b43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27370", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13447", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27370\n\ud83d\udd25 CVSS Score: 6.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:N)\n\ud83d\udd39 Description: OpenID Connect Core through 1.0 errata set 2 allows audience injection in certain situations. When the private_key_jwt authentication mechanism is used, a malicious Authorization Server could trick a Client into writing attacker-controlled values into the audience, including token endpoints or issuer identifiers of other Authorization Servers. The malicious Authorization Server could then use these private key JWTs to impersonate the Client.\n\ud83d\udccf Published: 2025-03-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-25T14:43:40.581Z\n\ud83d\udd17 References:\n1. https://openid.net/wp-content/uploads/2025/01/OIDF-Responsible-Disclosure-Notice-on-Security-Vulnerability-for-private_key_jwt.pdf\n2. https://openid.net/notice-of-a-security-vulnerability/\n3. https://talks.secworkshop.events/osw2025/talk/R8D9BS/\n4. https://github.com/OWASP/ASVS/issues/2678\n5. https://eprint.iacr.org/2025/629", "creation_timestamp": "2025-04-25T15:07:47.000000Z"}, {"uuid": "b8fe9453-c163-47c3-80e5-1d75b0263799", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27518", "type": "seen", "source": "https://t.me/cvedetector/19830", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27518 - TrueFoundry Cognita CORS Misconfiguration\", \n  \"Content\": \"CVE ID : CVE-2025-27518 \nPublished : March 7, 2025, 4:15 p.m. | 58\u00a0minutes ago \nDescription : Cognita is a RAG (Retrieval Augmented Generation) Framework for building modular, open source applications for production by TrueFoundry. An insecure CORS configuration in the Cognita backend server allows arbitrary websites to send cross site requests to the application. This vulnerability is fixed in commit 75079c3d3cf376381489b9a82ee46c69024e1a15. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T18:17:17.000000Z"}, {"uuid": "4a2d41f9-18e0-4642-a401-a6c04a6ee31e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27603", "type": "seen", "source": "https://t.me/cvedetector/19829", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27603 - XWiki Confluence Migrator Pro Stored Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-27603 \nPublished : March 7, 2025, 4:15 p.m. | 58\u00a0minutes ago \nDescription : XWiki Confluence Migrator Pro helps admins to import confluence packages into their XWiki instance. A user that doesn't have programming rights can execute arbitrary code due to an unescaped translation when creating a page using the Migration Page template. This vulnerability is fixed in 1.2.0. \nSeverity: 9.1 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T18:17:16.000000Z"}, {"uuid": "da45e997-b763-4aa0-85d2-72f1a2cd5668", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27597", "type": "seen", "source": "https://t.me/cvedetector/19832", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27597 - Vue I18n Prototype Pollution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27597 \nPublished : March 7, 2025, 4:15 p.m. | 58\u00a0minutes ago \nDescription : Vue I18n is the internationalization plugin for Vue.js. @intlify/message-resolver and @intlify/vue-i18n-core are vulnerable to Prototype Pollution through the entry function: handleFlatJson. An attacker can supply a payload with Object.prototype setter to introduce or modify properties within the global prototype chain, causing denial of service (DoS) a the minimum consequence. Moreover, the consequences of this vulnerability can escalate to other injection-based attacks, depending on how the library integrates within the application. For instance, if the polluted property propagates to sensitive Node.js APIs (e.g., exec, eval), it could enable an attacker to execute arbitrary commands within the application's context. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T18:17:19.000000Z"}, {"uuid": "27a54d9e-f8c3-43be-b31e-bab99ba8a85f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mjuvzlvmp32u", "content": "", "creation_timestamp": "2026-04-19T21:38:06.436209Z"}, {"uuid": "83873eee-9d9e-439f-a3d6-5a6dba352ced", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27341", "type": "seen", "source": "https://t.me/cvedetector/18811", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27341 - Reactive Mortgage Calculator Cross-site Scripting\", \n  \"Content\": \"CVE ID : CVE-2025-27341 \nPublished : Feb. 24, 2025, 3:15 p.m. | 1\u00a0hour, 36\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in afzal_du Reactive Mortgage Calculator allows Stored XSS. This issue affects Reactive Mortgage Calculator: from n/a through 1.1. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-24T17:57:56.000000Z"}, {"uuid": "add7969b-d9b2-48b4-a83f-6018d620b299", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27816", "type": "seen", "source": "https://t.me/cvedetector/19789", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27816 - Arctera InfoScale .NET Remoting Insecure Deserialization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27816 \nPublished : March 7, 2025, 8:15 a.m. | 45\u00a0minutes ago \nDescription : A vulnerability was discovered in the Arctera InfoScale 7.0 through 8.0.2 where a .NET remoting endpoint can be exploited due to the insecure deserialization of potentially untrusted messages. The vulnerability is present in the Windows Plugin_Host service, which runs on all the servers where InfoScale is installed. The service is used only when applications are configured for Disaster Recovery (DR) using the DR wizard. Disabling the Plugin_Host service manually will eliminate the vulnerability. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T10:45:10.000000Z"}, {"uuid": "fba56615-d948-42d5-9c7d-d7b478605a0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27795", "type": "seen", "source": "https://t.me/cvedetector/19786", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27795 - GraphicsMagick JXL Image Dimension Resource Limit Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27795 \nPublished : March 7, 2025, 6:15 a.m. | 37\u00a0minutes ago \nDescription : JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T08:14:50.000000Z"}, {"uuid": "d33d28e1-9629-4736-8107-bbb22445d5df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27796", "type": "seen", "source": "https://t.me/cvedetector/19785", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27796 - GraphicsMagick Palette Buffer Allocation Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27796 \nPublished : March 7, 2025, 6:15 a.m. | 36\u00a0minutes ago \nDescription : WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation. \nSeverity: 4.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T08:14:50.000000Z"}, {"uuid": "b2fbe5f7-29f7-4c74-8eb4-319be21b205c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27349", "type": "seen", "source": "https://t.me/cvedetector/18807", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27349 - Nurelm Get Posts Cross-site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27349 \nPublished : Feb. 24, 2025, 3:15 p.m. | 1\u00a0hour, 36\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nurelm Get Posts allows Stored XSS. This issue affects Get Posts: from n/a through 0.6. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-24T17:57:50.000000Z"}, {"uuid": "d5528d6d-381c-41d4-86f5-daeabf21ba15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27347", "type": "seen", "source": "https://t.me/cvedetector/18806", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27347 - Techmix WooCommerce Direct Checkout Button Stored Cross-site Scripting\", \n  \"Content\": \"CVE ID : CVE-2025-27347 \nPublished : Feb. 24, 2025, 3:15 p.m. | 1\u00a0hour, 36\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in techmix Direct Checkout Button for WooCommerce allows Stored XSS. This issue affects Direct Checkout Button for WooCommerce: from n/a through 1.0. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-24T17:57:49.000000Z"}, {"uuid": "ca262689-0e77-40df-8bc0-dfefd78e225d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27355", "type": "seen", "source": "https://t.me/cvedetector/18805", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27355 - Woocommerce - Loi Hamon CSRF Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2025-27355 \nPublished : Feb. 24, 2025, 3:15 p.m. | 1\u00a0hour, 36\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in Nicolas GRILLET Woocommerce \u2013 Loi Hamon allows Stored XSS. This issue affects Woocommerce \u2013 Loi Hamon: from n/a through 1.1.0. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-24T17:57:45.000000Z"}, {"uuid": "2e5da773-d29c-40b3-850e-a9a5b03001a2", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-2749", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/29ff5244-6972-4cce-b522-8472d6bb1fed", "content": "", "creation_timestamp": "2026-04-20T20:00:03.214968Z"}, {"uuid": "4be309de-1ce5-4160-9010-9e06b9a97170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "seen", "source": "https://t.me/GithubRedTeam/59600", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aPath traversal tool based on CVE-2025-8088\nURL\uff1ahttps://github.com/0xDTC/Below-Logger-Symlink-Attack_CVE-2025-27591\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-11-13T17:48:19.000000Z"}, {"uuid": "be5922e3-9ed3-4fd1-8523-7499f898ac3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "published-proof-of-concept", "source": "Telegram/WmTbZAwJq4oeu1oQbw_9scJeNK9TlkQDYUtF5SwroIlUcq4", "content": "", "creation_timestamp": "2025-09-01T15:00:07.000000Z"}, {"uuid": "655adbfc-603c-4b67-bbbc-95aebaafbdb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27480", "type": "published-proof-of-concept", "source": "Telegram/WmTbZAwJq4oeu1oQbw_9scJeNK9TlkQDYUtF5SwroIlUcq4", "content": "", "creation_timestamp": "2025-09-01T15:00:07.000000Z"}, {"uuid": "68c28682-497e-4bb7-87b4-532cb1c74122", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "published-proof-of-concept", "source": "Telegram/7VaWiDiZCdClD5jKnwGdCFY3BMT4SvcYbJTGW3v_R4In6yE", "content": "", "creation_timestamp": "2025-09-03T21:00:04.000000Z"}, {"uuid": "92df6272-4ca5-42a4-93a1-d71ef45a3f20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-2746", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-multiple-critical-high-vulnerabilities-kentico-xperience-can-lead-remote-code", "content": "", "creation_timestamp": "2026-04-21T05:21:24.000000Z"}, {"uuid": "3d4f1e80-f1a2-4a4c-b81f-e4f56cd1af46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-2747", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-multiple-critical-high-vulnerabilities-kentico-xperience-can-lead-remote-code", "content": "", "creation_timestamp": "2026-04-21T05:21:24.000000Z"}, {"uuid": "c2ab7129-0c75-490c-aa16-ee74c107067d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-2749", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-multiple-critical-high-vulnerabilities-kentico-xperience-can-lead-remote-code", "content": "", "creation_timestamp": "2026-04-21T05:21:24.000000Z"}, {"uuid": "b526e161-5207-4404-9a60-5cad71280bb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1833", "content": "", "creation_timestamp": "2026-04-21T21:00:00.000000Z"}, {"uuid": "58e1880c-f989-49bb-b935-561c6da07c6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "published-proof-of-concept", "source": "Telegram/8XN8wAMSKexF4HKj61t8L1D_BdecH-IzCKOqVJJvRwF7CEY", "content": "", "creation_timestamp": "2025-08-31T21:00:04.000000Z"}, {"uuid": "b2d57657-cca0-49c1-a43f-a42eb663ef9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27336", "type": "seen", "source": "https://t.me/cvedetector/18808", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27336 - Just Variables CSRF\", \n  \"Content\": \"CVE ID : CVE-2025-27336 \nPublished : Feb. 24, 2025, 3:15 p.m. | 1\u00a0hour, 36\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in Alex Prokopenko / JustCoded Just Variables allows Cross Site Request Forgery. This issue affects Just Variables: from n/a through 1.2.3. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-24T17:57:51.000000Z"}, {"uuid": "96df1d95-0032-4c0b-a8b2-de3b3b8060e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27353", "type": "seen", "source": "https://t.me/cvedetector/18804", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27353 - Bob Namaste! LMS CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27353 \nPublished : Feb. 24, 2025, 3:15 p.m. | 1\u00a0hour, 36\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in Bob Namaste! LMS allows Cross Site Request Forgery. This issue affects Namaste! LMS: from n/a through 2.6.5. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-24T17:57:44.000000Z"}, {"uuid": "8afec2bb-86f9-41da-8251-c573528f1c5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-22)", "content": "", "creation_timestamp": "2026-04-22T00:00:00.000000Z"}, {"uuid": "0c33b974-5649-4bea-ac2b-49a711448779", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27327", "type": "seen", "source": "https://t.me/cvedetector/18815", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27327 - Winlin Live Streaming Video Player XSS\", \n  \"Content\": \"CVE ID : CVE-2025-27327 \nPublished : Feb. 24, 2025, 3:15 p.m. | 1\u00a0hour, 36\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Winlin Live Streaming Video Player \u2013 by SRS Player allows DOM-Based XSS. This issue affects Live Streaming Video Player \u2013 by SRS Player: from n/a through 1.0.18. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-24T17:57:59.000000Z"}, {"uuid": "cea9abf4-2eeb-4445-9319-2f1283f1dbe2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27344", "type": "seen", "source": "https://t.me/cvedetector/18814", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27344 - Phee's LinkPreview CSRF\", \n  \"Content\": \"CVE ID : CVE-2025-27344 \nPublished : Feb. 24, 2025, 3:15 p.m. | 1\u00a0hour, 36\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in filipstepanov Phee's LinkPreview allows Cross Site Request Forgery. This issue affects Phee's LinkPreview: from n/a through 1.6.7. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-24T17:57:58.000000Z"}, {"uuid": "ce2b85be-cb4f-47ef-beb1-c0ef84d87c66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27335", "type": "seen", "source": "https://t.me/cvedetector/18813", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27335 - SEO Roma Auto Tag Links CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27335 \nPublished : Feb. 24, 2025, 3:15 p.m. | 1\u00a0hour, 36\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in Free plug in by SEO Roma Auto Tag Links allows Cross Site Request Forgery. This issue affects Auto Tag Links: from n/a through 1.0.13. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-24T17:57:57.000000Z"}, {"uuid": "96183848-d48e-48af-8a7c-b27d7b468bec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27342", "type": "seen", "source": "https://t.me/cvedetector/18812", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27342 - WooCommerce Recargo de Equivalencia CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27342 \nPublished : Feb. 24, 2025, 3:15 p.m. | 1\u00a0hour, 36\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in josesan WooCommerce Recargo de Equivalencia allows Cross Site Request Forgery. This issue affects WooCommerce Recargo de Equivalencia: from n/a through 1.6.24. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-24T17:57:57.000000Z"}, {"uuid": "b53c3d26-e9b7-436e-9c01-8a656cfebdd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27340", "type": "seen", "source": "https://t.me/cvedetector/18810", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27340 - Marc F12-Profiler CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27340 \nPublished : Feb. 24, 2025, 3:15 p.m. | 1\u00a0hour, 36\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in Marc F12-Profiler allows Cross Site Request Forgery. This issue affects F12-Profiler: from n/a through 1.3.9. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-24T17:57:52.000000Z"}, {"uuid": "ce72f184-4c4d-447d-b1b0-481aec748b9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27339", "type": "seen", "source": "https://t.me/cvedetector/18809", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27339 - Will Anderson Minimum Password Strength CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27339 \nPublished : Feb. 24, 2025, 3:15 p.m. | 1\u00a0hour, 36\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in Will Anderson Minimum Password Strength allows Cross Site Request Forgery. This issue affects Minimum Password Strength: from n/a through 1.2.0. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-24T17:57:51.000000Z"}, {"uuid": "0e45387c-463f-422b-bd4e-1d43c9a91a08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27351", "type": "seen", "source": "https://t.me/cvedetector/18802", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27351 - ExpertBusinessSearch Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2025-27351 \nPublished : Feb. 24, 2025, 3:15 p.m. | 1\u00a0hour, 36\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ExpertBusinessSearch Local Search SEO Contact Page allows Stored XSS. This issue affects Local Search SEO Contact Page: from n/a through 4.0.1. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-24T17:57:43.000000Z"}, {"uuid": "5a8bf7e2-c3ce-48c5-9b91-8c1fdc548cfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27348", "type": "seen", "source": "https://t.me/cvedetector/18801", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27348 - Daniel WP Social SEO Booster Cross-site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-27348 \nPublished : Feb. 24, 2025, 3:15 p.m. | 1\u00a0hour, 36\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Daniel WP Social SEO Booster \u2013 Knowledge Graph Social Signals SEO allows Stored XSS. This issue affects WP Social SEO Booster \u2013 Knowledge Graph Social Signals SEO: from n/a through 1.2.0. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-24T17:57:42.000000Z"}, {"uuid": "59b4259f-fbfc-45bd-9881-af340ae2856e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27218", "type": "seen", "source": "https://t.me/cvedetector/18517", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27218 - Sitecore Experience Manager/Xperience Platform RCE via Insecure Deserialization\", \n  \"Content\": \"CVE ID : CVE-2025-27218 \nPublished : Feb. 20, 2025, 5:15 a.m. | 1\u00a0hour, 45\u00a0minutes ago \nDescription : Sitecore Experience Manager (XM) and Experience Platform (XP) 10.4 before KB1002844 allow remote code execution through insecure deserialization. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-20T08:07:57.000000Z"}, {"uuid": "8815207f-d5d1-4324-8e94-fd96c3c0aa9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27913", "type": "seen", "source": "Telegram/B6_1PRBAi5t4fWoXgA0vtOl6ym3vFyZB5N2XhmZ7VRnHo6qS", "content": "", "creation_timestamp": "2025-03-11T04:41:14.000000Z"}, {"uuid": "f7503c0a-5129-436c-bceb-02391087d42b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27109", "type": "seen", "source": "https://t.me/cvedetector/18693", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27109 - Solid-js Unescaped User Input Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27109 \nPublished : Feb. 21, 2025, 10:15 p.m. | 33\u00a0minutes ago \nDescription : solid-js is a declarative, efficient, and flexible JavaScript library for building user interfaces. In affected versions Inserts/JSX expressions inside illegal inlined JSX fragments lacked escaping, allowing user input to be rendered as HTML when put directly inside JSX fragments. This issue has been addressed in version 1.9.4 and all users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T23:57:29.000000Z"}, {"uuid": "89ab4c1e-1c2a-4ad8-92dd-a73b8f852a67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27012", "type": "seen", "source": "https://t.me/cvedetector/18724", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27012 - A1POST.BG Shipping for Woo CSRF Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2025-27012 \nPublished : Feb. 22, 2025, 4:15 p.m. | 1\u00a0hour, 16\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in a1post A1POST.BG Shipping for Woo allows Privilege Escalation. This issue affects A1POST.BG Shipping for Woo: from n/a through 1.5.1. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-22T19:10:10.000000Z"}, {"uuid": "00903b55-8572-4e1c-a9d4-2e847efb5bf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27105", "type": "seen", "source": "https://t.me/cvedetector/18696", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27105 - Vyper Smart Contract Language DynArray AugAssign Out-of-Bounds Write\", \n  \"Content\": \"CVE ID : CVE-2025-27105 \nPublished : Feb. 21, 2025, 10:15 p.m. | 33\u00a0minutes ago \nDescription : vyper is a Pythonic Smart Contract Language for the EVM. Vyper handles AugAssign statements by first caching the target location to avoid double evaluation. However, in the case when target is an access to a DynArray and the rhs modifies the array, the cached target will evaluate first, and the bounds check will not be re-evaluated during the write portion of the statement. This issue has been addressed in version 0.4.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T23:57:34.000000Z"}, {"uuid": "b91edf8d-362f-43d1-98d0-5355699ceee1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/44420", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aA Proof of Concept for CVE-2025-27591, a local privilege escalation in Below \u2264 v0.8.1\nURL\uff1ahttps://github.com/incommatose/CVE-2025-27591-PoC\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-07-18T03:31:52.000000Z"}, {"uuid": "93711cd5-e76a-49d7-91d4-ba1a09fbb2d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27210", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/44464", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-27210\nURL\uff1ahttps://github.com/B1ack4sh/Blackash-CVE-2025-27210\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-07-18T12:15:26.000000Z"}, {"uuid": "fa924cba-8721-44bc-b956-bd1f0c41a8a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/46055", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aa C exploit for CVE-2025-27591, which allow an attacker to escalate privilege to root.\nURL\uff1ahttps://github.com/Cythonic1/CVE-2025-27591\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-07-31T12:25:27.000000Z"}, {"uuid": "cb7ebe65-b4fd-48a0-85ad-4f7f2a695596", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27519", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/48659", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aPoC exploit for Below privilege escalation (CVE-2025-27591) allowing local root access via symlink manipulation in world-writable log directory.\nURL\uff1ahttps://github.com/Diabl0xE/CVE-2025-27519\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-08-22T12:34:40.000000Z"}, {"uuid": "ede8e886-a60f-4469-b865-67b6e71545a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "exploited", "source": "https://t.me/claytechsolution/220", "content": "The Hacker News\nMeta Warns of FreeType Vulnerability (CVE-2025-27363) With Active Exploitation Risk\n\nMeta has warned that a security vulnerability impacting the FreeType open-source font rendering library may have been exploited in the wild.\nThe vulnerability has been assigned the CVE identifier CVE-2025-27363, and carries a CVSS score of 8.1, indicating high severity. Described as an out-of-bounds write flaw, it could be exploited to achieve remote code execution when parsing certain font", "creation_timestamp": "2025-03-13T08:39:31.000000Z"}, {"uuid": "95421220-3c3f-458d-b94e-f69a33c83ace", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27104", "type": "seen", "source": "https://t.me/cvedetector/18695", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27104 - Vyper Smart Contract Iterator Side-Effect Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27104 \nPublished : Feb. 21, 2025, 10:15 p.m. | 33\u00a0minutes ago \nDescription : vyper is a Pythonic Smart Contract Language for the EVM. Multiple evaluation of a single expression is possible in the iterator target of a for loop. While the iterator expression cannot produce multiple writes, it can consume side effects produced in the loop body (e.g. read a storage variable updated in the loop body) and thus lead to unexpected program behavior. Specifically, reads in iterators which contain an ifexp (e.g. `for s: uint256 in ([read(), read()] if True else [])`) may interleave reads with writes in the loop body. Vyper for loops allow two kinds of iterator targets, namely the `range()` builtin and an iterable type, like SArray and DArray. During codegen, iterable lists are required to not produce any side-effects (in the following code, `range_scope` forces `iter_list` to be parsed in a constant context, which is checked against `is_constant`). However, this does not prevent the iterator from consuming side effects provided by the body of the loop. For SArrays on the other hand, `iter_list` is instantiated in the body of a `repeat` ir, so it can be evaluated several times. This issue is being addressed and is expected to be available in version 0.4.1. Users are advised to upgrade as soon as the patched release is available. There are no known workarounds for this vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T23:57:31.000000Z"}, {"uuid": "8a415b6c-44dc-420c-919a-6f4621b8891e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27108", "type": "seen", "source": "https://t.me/cvedetector/18692", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27108 - Solid-Meta DOM-Expressions XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27108 \nPublished : Feb. 21, 2025, 10:15 p.m. | 33\u00a0minutes ago \nDescription : dom-expressions is a Fine-Grained Runtime for Performant DOM Rendering. In affected versions the use of javascript's `.replace()` opens up to potential Cross-site Scripting (XSS) vulnerabilities with the special replacement patterns beginning with `$`. Particularly, when the attributes of `Meta` tag from solid-meta are user-defined, attackers can utilise the special replacement patterns, either `$'` or `$\\`` to achieve XSS. The solid-meta package has this issue since it uses `useAffect` and context providers, which injects the used assets in the html header. \"dom-expressions\" uses `.replace()` to insert the assets, which is vulnerable to the special replacement patterns listed above.  This effectively means that if the attributes of an asset tag contained user-controlled data, it would be vulnerable to XSS. For instance, there might be meta tags for the open graph protocol in a user profile page, but if attackers set the user query to some payload abusing `.replace()`, then they could execute arbitrary javascript in the victim's web browser. Moreover, it could be stored and cause more problems. This issue has been addressed in version 0.39.5 and all users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T23:57:29.000000Z"}, {"uuid": "9e6d0709-237c-4a56-a48f-8b8736885e30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27106", "type": "seen", "source": "https://t.me/cvedetector/18691", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27106 - Binance Trading Bot Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27106 \nPublished : Feb. 21, 2025, 10:15 p.m. | 33\u00a0minutes ago \nDescription : binance-trading-bot is an automated Binance trading bot with trailing buy/sell strategy. Authenticated users of binance-trading-bot can achieve Remote Code Execution on the host system due to a command injection vulnerability in the `/restore` endpoint. The restore endpoint of binance-trading-bot is vulnerable to command injection via the `/restore` endpoint. The name of the uploaded file is passed to shell.exec without sanitization other than path normalization, resulting in Remote Code Execution. This may allow any authorized user to execute code in the context of the host machine. This issue has been addressed in version 0.0.100 and all users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T23:57:28.000000Z"}, {"uuid": "e1d90890-0135-476e-80ef-90b4473f71c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27091", "type": "seen", "source": "https://t.me/cvedetector/18587", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27091 - Cisco OpenH264 Heap Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27091 \nPublished : Feb. 20, 2025, 6:15 p.m. | 1\u00a0hour, 21\u00a0minutes ago \nDescription : OpenH264 is a free license codec library which supports H.264 encoding and decoding. A vulnerability in the decoding functions of OpenH264 codec library could allow a remote, unauthenticated attacker to trigger a heap overflow. This vulnerability is due to a race condition between a Sequence Parameter Set (SPS) memory allocation and a subsequent non Instantaneous Decoder Refresh (non-IDR) Network Abstraction Layer (NAL) unit memory usage. An attacker could exploit this vulnerability by crafting a malicious bitstream and tricking a victim user into processing an arbitrary video containing the malicious bistream. An exploit could allow the attacker to cause an unexpected crash in the victim's user decoding client and, possibly, perform arbitrary commands on the victim's host by abusing the heap overflow. This vulnerability affects OpenH264 2.5.0 and earlier releases. Both Scalable Video Coding (SVC) mode and Advanced Video Coding (AVC) mode are affected by this vulnerability. OpenH264 software releases 2.6.0 and later contained the fix for this vulnerability. Users are advised to upgrade. There are no known workarounds for this vulnerability.  \n  \n### For more information  \n  \nIf you have any questions or comments about this advisory:  \n* [Open an issue in cisco/openh264]()  \n* Email Cisco Open Source Security ([oss-security@cisco.com](mailto:oss-security@cisco.com)) and Cisco PSIRT ([psirt@cisco.com](mailto:psirt@cisco.com))  \n  \n### Credits:  \n  \n* **Research:** Octavian Guzu and Andrew Calvano of Meta  \n* **Fix ideation:** Philipp Hancke and Shyam Sadhwani of Meta  \n* **Fix implementation:** Benzheng Zhang (@BenzhengZhang)  \n* **Release engineering:** Benzheng Zhang (@BenzhengZhang) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-20T20:41:22.000000Z"}, {"uuid": "e1198d0d-75e5-49fd-bab8-bc4e5a4a9670", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27210", "type": "published-proof-of-concept", "source": "Telegram/NdPZSTtIE4NWYgzkW1qGVgsu1ozTh6WtjvXjKsyPnGPQPvY", "content": "", "creation_timestamp": "2025-07-16T09:00:04.000000Z"}, {"uuid": "6d3a0a6f-6692-473c-8b0c-07944ac83b01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27210", "type": "published-proof-of-concept", "source": "Telegram/Zn-MrGH2EZw9krb9LK_B7CZ2NwqA9UnK4k-IFktRqyAhV2A", "content": "", "creation_timestamp": "2025-07-16T15:00:12.000000Z"}, {"uuid": "21a3496e-1a6c-44d4-824e-57bbbdcaf59f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27100", "type": "seen", "source": "https://t.me/cvedetector/18621", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27100 - LakeFS Server Memory Exhaustion Denial-of-Service\", \n  \"Content\": \"CVE ID : CVE-2025-27100 \nPublished : Feb. 21, 2025, 12:15 a.m. | 1\u00a0hour, 29\u00a0minutes ago \nDescription : lakeFS is an open-source tool that transforms your object storage into a Git-like repository. In affected versions an authenticated user can crash lakeFS by exhausting server memory.  This is an authenticated denial-of-service issue. This problem has been patched in version 1.50.0. Users on versions 1.49.1 and below are affected. Users are advised to upgrade. Users unable to upgrade should either set the environment variable `LAKEFS_BLOCKSTORE_S3_DISABLE_PRE_SIGNED_MULTIPART` to `true` or configure the `disable_pre_signed_multipart` key to true in their config yaml. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T03:04:08.000000Z"}, {"uuid": "614f472b-0ada-4650-8f8b-0b6525622989", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "published-proof-of-concept", "source": "Telegram/Qu1cbmejEeKAGFL3IdDZp2oTdnW34dPtOka-zLQLfx2beHc", "content": "", "creation_timestamp": "2025-07-18T09:00:04.000000Z"}, {"uuid": "5f599608-a989-4944-8339-e5721c2f6913", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27088", "type": "seen", "source": "https://t.me/cvedetector/18606", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27088 - AWS S3 Proxy - Reflected Cross-site Scripting (XSS) in oxyno-zeta\", \n  \"Content\": \"CVE ID : CVE-2025-27088 \nPublished : Feb. 20, 2025, 11:15 p.m. | 27\u00a0minutes ago \nDescription : oxyno-zeta/s3-proxy is an aws s3 proxy written in go. In affected versions a Reflected Cross-site Scripting (XSS) vulnerability enables attackers to create malicious URLs that, when visited, inject scripts into the web application. This can lead to session hijacking or phishing attacks on a trusted domain, posing a moderate risk to all users. It's possible to inject html elements, including scripts through the folder-list template. The affected template allows users to interact with the URL path provided by the `Request.URL.Path` variable, which is then rendered directly into the HTML without proper sanitization or escaping. This can be abused by attackers who craft a malicious URL containing injected HTML or JavaScript. When users visit such a URL, the malicious script will be executed in the user's context. This issue has been addressed in version 4.18.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T00:54:18.000000Z"}, {"uuid": "a0da1f5b-0951-4809-aff8-d5b27d08f9fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "published-proof-of-concept", "source": "Telegram/Si59L7B2mOOUAr8_144HFqGZOWLjbuFEGSaFRpGyejiLY0E", "content": "", "creation_timestamp": "2025-07-20T03:00:05.000000Z"}, {"uuid": "eb72e99f-e272-4cb7-82f6-6920b23e2423", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27210", "type": "published-proof-of-concept", "source": "Telegram/z_ebYnNGYsAvqPSR_ksCHYf7iQyo3Kz8im6VaWbcmMpsW68", "content": "", "creation_timestamp": "2025-07-19T15:00:07.000000Z"}, {"uuid": "bd44b4e2-b239-48af-9ed3-18061913682e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27210", "type": "published-proof-of-concept", "source": "Telegram/RoU-hws2RJUYGwxuEIA6GAu6v8gdppLqPF1UsOoU1de4VdM", "content": "", "creation_timestamp": "2025-07-19T03:00:09.000000Z"}, {"uuid": "c2deba69-610b-4678-8755-6d595c9248ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27098", "type": "seen", "source": "https://t.me/cvedetector/18598", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27098 - GraphQL Mesh File System Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27098 \nPublished : Feb. 20, 2025, 9:15 p.m. | 23\u00a0minutes ago \nDescription : GraphQL Mesh is a GraphQL Federation framework and gateway for both GraphQL Federation and non-GraphQL Federation subgraphs, non-GraphQL services, such as REST and gRPC, and also databases such as MongoDB, MySQL, and PostgreSQL. Missing check vulnerability in the static file handler allows any client to access the files in the server's file system. When `staticFiles` is set in the `serve` settings in the configuration file, the following handler doesn't check if `absolutePath` is still under the directory provided as `staticFiles`. Users have two options to fix vulnerability; 1. Update `@graphql-mesh/cli` to a version higher than `0.82.21`, and if you use `@graphql-mesh/http`, update it to a version higher than `0.3.18` 2. Remove `staticFiles` option from the configuration, and use other solutions to serve static files. \nSeverity: 5.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-20T23:12:03.000000Z"}, {"uuid": "82d9854f-cac0-4be6-bab9-5836b1339275", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27097", "type": "seen", "source": "https://t.me/cvedetector/18597", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27097 - GraphQL Mesh Token Persistence Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27097 \nPublished : Feb. 20, 2025, 9:15 p.m. | 23\u00a0minutes ago \nDescription : GraphQL Mesh is a GraphQL Federation framework and gateway for both GraphQL Federation and non-GraphQL Federation subgraphs, non-GraphQL services, such as REST and gRPC, and also databases such as MongoDB, MySQL, and PostgreSQL. When a user transforms on the root level or single source with transforms, and the client sends the same query with different variables, the initial variables are used in all following requests until the cache evicts DocumentNode. If a token is sent via variables, the following requests will act like the same token is sent even if the following requests have different tokens. This can cause a short memory leak but it won't grow per each request but per different operation until the cache evicts DocumentNode by LRU mechanism. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-20T23:12:03.000000Z"}, {"uuid": "f5c29d32-74f7-4269-a054-7d5bd66f33d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27163", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7272", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27163\n\ud83d\udd25 CVSS Score: 5.5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\ud83d\udccf Published: 2025-03-11T18:10:09.475Z\n\ud83d\udccf Modified: 2025-03-12T04:01:18.952Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/acrobat/apsb25-14.html", "creation_timestamp": "2025-03-12T04:43:01.000000Z"}, {"uuid": "87c94d60-4a24-4323-8f32-9af821a45323", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27096", "type": "seen", "source": "https://t.me/cvedetector/18577", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27096 - WeGIA Web Manager for Institutions SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27096 \nPublished : Feb. 20, 2025, 7:15 p.m. | 22\u00a0minutes ago \nDescription : WeGIA is a Web Manager for Institutions with a focus on Portuguese language. A SQL Injection vulnerability was discovered in the WeGIA application, personalizacao_upload.php endpoint. This vulnerability allow an authorized attacker to execute arbitrary SQL queries, allowing access to sensitive information. This issue has been addressed in version 3.2.14 and all users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-20T20:41:09.000000Z"}, {"uuid": "b1ca9a43-b46f-4134-81e0-76fb2b5f9fad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2777", "type": "seen", "source": "https://t.me/cKure/14634", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 Cybersecurity researchers have disclosed multiple security flaw in the on-premise version of SysAid IT support software that could be exploited to achieve pre-authenticated remote code execution with elevated privileges.\n\nThe vulnerabilities, tracked as CVE-2025-2775, CVE-2025-2776, and CVE-2025-2777, have all been described as XML External Entity (XXE) injections, which occur when an attacker is able to successfully interfere with an application's parsing of XML input.\n\nThis, in turn, could permit attackers to inject unsafe XML entities into the web application, allowing them to carry out a Server-Side Request Forgery (SSRF) attack and in worst cases, remote code execution.\n\nhttps://thehackernews.com/2025/05/sysaid-patches-4-critical-flaws.html", "creation_timestamp": "2025-05-07T15:21:03.000000Z"}, {"uuid": "b5a6ebd5-6ac2-4c28-a7fc-0452c9f3bb47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "https://t.me/cKure/14634", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 Cybersecurity researchers have disclosed multiple security flaw in the on-premise version of SysAid IT support software that could be exploited to achieve pre-authenticated remote code execution with elevated privileges.\n\nThe vulnerabilities, tracked as CVE-2025-2775, CVE-2025-2776, and CVE-2025-2777, have all been described as XML External Entity (XXE) injections, which occur when an attacker is able to successfully interfere with an application's parsing of XML input.\n\nThis, in turn, could permit attackers to inject unsafe XML entities into the web application, allowing them to carry out a Server-Side Request Forgery (SSRF) attack and in worst cases, remote code execution.\n\nhttps://thehackernews.com/2025/05/sysaid-patches-4-critical-flaws.html", "creation_timestamp": "2025-05-07T15:21:03.000000Z"}, {"uuid": "0325c0ca-f5d5-4a07-9743-5d5c474131ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27092", "type": "seen", "source": "https://t.me/cvedetector/18497", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27092 - GHOSTS Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27092 \nPublished : Feb. 19, 2025, 11:15 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : GHOSTS is an open source user simulation framework for cyber experimentation, simulation, training, and exercise. A path traversal vulnerability was discovered in GHOSTS version 8.0.0.0 that allows an attacker to access files outside of the intended directory through the photo retrieval endpoint. The vulnerability exists in the /api/npcs/{id}/photo endpoint, which is designed to serve profile photos for NPCs (Non-Player Characters) but fails to properly validate and sanitize file paths. When an NPC is created with a specially crafted photoLink value containing path traversal sequences (../, ..\\, etc.), the application processes these sequences without proper sanitization. This allows an attacker to traverse directory structures and access files outside of the intended photo directory, potentially exposing sensitive system files. The vulnerability is particularly severe because it allows reading arbitrary files from the server's filesystem with the permissions of the web application process, which could include configuration files, credentials, or other sensitive data. This issue has been addressed in version 8.2.7.90 and all users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-20T02:16:43.000000Z"}, {"uuid": "64fd2ab0-7aa6-489b-b248-943306bf419e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27132", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15077", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27132\n\ud83d\udd25 CVSS Score: 3.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L)\n\ud83d\udd39 Description: in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.\n\ud83d\udccf Published: 2025-05-06T09:03:12.027Z\n\ud83d\udccf Modified: 2025-05-06T09:03:12.027Z\n\ud83d\udd17 References:\n1. https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-05.md", "creation_timestamp": "2025-05-06T09:21:21.000000Z"}, {"uuid": "16fc4306-1fe6-4ade-885f-5cc81fd09988", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27113", "type": "seen", "source": "https://t.me/cvedetector/18386", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27113 - Libxml2 XML Pattern NULL Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27113 \nPublished : Feb. 18, 2025, 11:15 p.m. | 51\u00a0minutes ago \nDescription : libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c. \nSeverity: 2.9 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T01:11:01.000000Z"}, {"uuid": "7a96ea10-2f8f-41be-ae90-f080a0c50a2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27090", "type": "seen", "source": "https://t.me/cvedetector/18479", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27090 - Sliver Teamserver Unauthenticated Reverse Port Forwarding Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27090 \nPublished : Feb. 19, 2025, 10:15 p.m. | 27\u00a0minutes ago \nDescription : Sliver is an open source cross-platform adversary emulation/red team framework, it can be used by organizations of all sizes to perform security testing. The reverse port forwarding in sliver teamserver allows the implant to open a reverse tunnel on the sliver teamserver without verifying if the operator instructed the implant to do so. The only impact that has been shown is the exposure of the server's IP address to a third party. This issue has been addressed in version 1.5.43 and all users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T23:46:02.000000Z"}, {"uuid": "4b230c96-9926-4e6a-8fb3-11a9c2a8ea20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27089", "type": "seen", "source": "https://t.me/cvedetector/18457", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27089 - Directus Unintended Field Update Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27089 \nPublished : Feb. 19, 2025, 5:15 p.m. | 1\u00a0hour, 23\u00a0minutes ago \nDescription : Directus is a real-time API and App dashboard for managing SQL database content. In affected versions if there are two overlapping policies for the `update` action that allow access to different fields, instead of correctly checking access permissions against the item they apply for the user is allowed to update the superset of fields allowed by any of the policies. E.g. have one policy allowing update access to `field_a` if the `id == 1` and one policy allowing update access to `field_b` if the `id == 2`. The user with both these policies is allowed to update both `field_a` and `field_b` for the items with ids `1` and `2`. Before v11, if a user was allowed to update an item they were allowed to update the fields that the single permission, that applied to that item, listed. With overlapping permissions this isn't as clear cut anymore and the union of fields might not be the fields the user is allowed to update for that specific item. The solution that this PR introduces is to evaluate the permissions for each field that the user tries to update in the validateItemAccess DB query, instead of only verifying access to the item as a whole. This is done by, instead of returning the actual field value, returning a flag that indicates if the user has access to that field. This uses the same case/when mechanism that is used for stripping out non permitted field that is at the core of the permissions engine. As a result, for every item that the access is validated for, the expected result is an item that has either 1 or null for all the \"requested\" fields instead of any of the actual field values. These results are not useful for anything other than verifying the field level access permissions. The final check in validateItemAccess can either fail if the number of items does not match the number of items the access is checked for (ie. the user does not have access to the item at all) or if not all of the passed in fields have access permissions for any of the returned items. This is a vulnerability that allows update access to unintended fields, potentially impacting the password field for user accounts. This has been addressed in version 11.1.2 and all users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T20:24:59.000000Z"}, {"uuid": "68787e54-30af-465e-8d84-dac2eee1ae9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "published-proof-of-concept", "source": "Telegram/8nM03Hy1pf_JWfEIa0g2-4Thr39zfhDpEe0Vm6CK6uASuGo", "content": "", "creation_timestamp": "2025-10-19T03:00:05.000000Z"}, {"uuid": "c8d5e129-3a03-4087-90c9-f9e193600f10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "seen", "source": "https://t.me/cKure/14634", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 Cybersecurity researchers have disclosed multiple security flaw in the on-premise version of SysAid IT support software that could be exploited to achieve pre-authenticated remote code execution with elevated privileges.\n\nThe vulnerabilities, tracked as CVE-2025-2775, CVE-2025-2776, and CVE-2025-2777, have all been described as XML External Entity (XXE) injections, which occur when an attacker is able to successfully interfere with an application's parsing of XML input.\n\nThis, in turn, could permit attackers to inject unsafe XML entities into the web application, allowing them to carry out a Server-Side Request Forgery (SSRF) attack and in worst cases, remote code execution.\n\nhttps://thehackernews.com/2025/05/sysaid-patches-4-critical-flaws.html", "creation_timestamp": "2025-05-07T15:21:03.000000Z"}, {"uuid": "e6f67679-bbf2-4ceb-b667-4af9a97116f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27016", "type": "seen", "source": "https://t.me/cvedetector/18370", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27016 - Google Drive Plugin Cross-site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-27016 \nPublished : Feb. 18, 2025, 8:15 p.m. | 1\u00a0hour, 47\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in awsm.in Drivr Lite \u2013 Google Drive Plugin allows Stored XSS. This issue affects Drivr Lite \u2013 Google Drive Plugin: from n/a through 1.0.1. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T23:30:30.000000Z"}, {"uuid": "49791d67-9a82-46ec-b764-8eac28b6dd3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/56022", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-27591\nURL\uff1ahttps://github.com/krn966/CVE-2025-27591\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-10-18T21:27:30.000000Z"}, {"uuid": "5ccc7515-cbdb-4950-9a59-7f24c492cf93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "published-proof-of-concept", "source": "https://t.me/cKure/15594", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 CVE-2025-2783: Operation ForumTroll: APT attack with Google Chrome zero-day exploit chain.\n\nhttps://securelist.com/operation-forumtroll/115989/", "creation_timestamp": "2025-10-28T03:48:25.000000Z"}, {"uuid": "baf03eaf-8352-4d5f-b4d2-814bcecd9104", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27013", "type": "seen", "source": "https://t.me/cvedetector/18373", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27013 - EPC MediCenter Missing Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27013 \nPublished : Feb. 18, 2025, 8:15 p.m. | 1\u00a0hour, 47\u00a0minutes ago \nDescription : Missing Authorization vulnerability in EPC MediCenter - Health Medical Clinic WordPress Theme allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects MediCenter - Health Medical Clinic WordPress Theme: from n/a through n/a. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T23:30:35.000000Z"}, {"uuid": "f0de720c-dd5b-4ac4-bbb3-520b2445d45f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27817", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/55259", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aApache Kafka 4.1.0 (KRaft) with Keycloak OAuth2 authentication using Strimzi - bypasses CVE-2025-27817 URL allowlist restriction\nURL\uff1ahttps://github.com/oriolrius/kafka-keycloak-oauth\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-10-13T04:44:27.000000Z"}, {"uuid": "7aebc8ef-b5fd-44a5-b87e-4943345100f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27915", "type": "exploited", "source": "https://t.me/notlukatsky/6864", "content": "\u041b\u043e\u0432\u0438\u0442\u0435 \u0432\u043a\u0443\u0441\u043d\u044b\u0435 \u0431\u0430\u0433\u0438 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u0439 \u043d\u0435\u0434\u0435\u043b\u0438 + PoC\n#CVE #Redis #Oracle #\u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0430\n\n\u27a1\ufe0fRedis \u2014 RediShell (CVE-2025-49844, CVSS 10.0)\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 use-after-free \u0432 Lua-\u0434\u0432\u0438\u0436\u043a\u0435 Redis, \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u0432\u0448\u0438\u0439 \u0432 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u0435 13 \u043b\u0435\u0442. \u041f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c Lua-\u0441\u043a\u0440\u0438\u043f\u0442\u044b (EVAL/EVALSHA) \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0440\u0430\u0437\u0440\u0443\u0448\u0438\u0442\u044c \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e Lua VM \u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f RCE \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 redis-server. \u0412 \u0441\u0435\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u043f\u043e\u0440\u044f\u0434\u043a\u0430 330\u043a \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0430\u043d\u0441\u043e\u0432 Redis, \u0438\u0437 \u043d\u0438\u0445 60\u043a \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u27a1\ufe0fVMware Aria Operations / VMware Tools (CVE-2025-41244, CVSS 7.8) \n\nLPE \u0432 \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u041e\u0421. \u041f\u0440\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u043c VMware Tools \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 Aria Operations \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c Service Discovery Management Pack (SDMP) \u043c\u043e\u0436\u043d\u043e \u0434\u0430\u0436\u0435 \u0441 \u043d\u0435\u043f\u043e\u043b\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0432 \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0434\u043e root/Administrator. \u0417\u0430\u043c\u0435\u0447\u0435\u043d\u044b \u0441\u043b\u0443\u0447\u0430\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 in-the-wild.\n\n\u27a1\ufe0fOpenSSH \u2014 ProxyCommand newline injection (CVE-2025-61984, CVSS 7.8)\n\nCommand injection \u043f\u0440\u0438 \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 ProxyCommand. \u0415\u0441\u043b\u0438 \u0432 \u0438\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438/\u0438\u043b\u0438 \u0432\u043d\u0435\u0448\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043f\u0430\u0434\u0430\u044e\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u044b, \u0438\u0442\u043e\u0433\u043e\u0432\u0430\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u0434\u043b\u044f ProxyCommand \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 shell-\u043e\u043c \u0442\u0430\u043a, \u0447\u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u0422\u043e \u0435\u0441\u0442\u044c \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u0441\u0430\u043d\u0438\u0442\u0438\u0437\u0430\u0446\u0438\u044f \u0438 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0442\u043e\u043a\u0435\u043d\u043e\u0432 \u043f\u0440\u0438 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0432 \u0448\u0430\u0431\u043b\u043e\u043d\u044b.\n\n\u27a1\ufe0f Zimbra Collaboration \u2014 Classic Web Client XSS \u0447\u0435\u0440\u0435\u0437 .ICS (CVE-2025-27915, CVSS 6.1). \n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u0441\u0430\u043d\u0430\u0446\u0438\u044f HTML \u0432\u043d\u0443\u0442\u0440\u0438 iCalendar (.ICS). \u0412\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u043d\u0438\u0435 HTML/JS (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ) \u0432 \u0441\u043e\u0431\u044b\u0442\u0438\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0441\u043a\u0440\u0438\u043f\u0442\u0430 \u043f\u0440\u0438 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435 \u0432 \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0432\u0435\u0431-\u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u043a\u0440\u0430\u0441\u0442\u044c \u043a\u0443\u043a\u0438/\u0442\u043e\u043a\u0435\u043d\u044b, \u043f\u0435\u0440\u0435\u0441\u044b\u043b\u0430\u0442\u044c \u043f\u0438\u0441\u044c\u043c\u0430, \u043c\u0435\u043d\u044f\u0442\u044c \u0444\u0438\u043b\u044c\u0442\u0440\u044b, \u0447\u0438\u0442\u0430\u0442\u044c \u043f\u043e\u0447\u0442\u0443.\n\n\u27a1\ufe0f3DEXPERIENCE (CVE-2025-9976, CVSS 9.0)\n\n\u0418\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f PLM-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 \u043e\u0442 Dassault Systemes, \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u044f\u044e\u0449\u0430\u044f CAD, CAE, CAM \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0432 \u0435\u0434\u0438\u043d\u0443\u044e \u0441\u0440\u0435\u0434\u0443 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438. \u0411\u0430\u0433 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 OS command injection \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Station Launcher. \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0439 \u0432\u044b\u0437\u043e\u0432 \u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u043c\u0430\u0448\u0438\u043d\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0411\u0435\u0437 PoC, \u0437\u0430\u0442\u043e \u0441\u0432\u0435\u0436\u0430\u043a.\n\nP.s. \u043a\u0430\u043a \u0432\u0430\u043c \u0442\u0430\u043a\u043e\u0439 \u0444\u043e\u0440\u043c\u0430\u0442 \u043f\u043e\u0441\u0442\u043e\u0432? \ud83d\ude2c - \u0435\u0441\u043b\u0438 \u043a\u0430\u0439\u0444, \ud83d\udd25 - \u0435\u0441\u043b\u0438 \u043d\u0430\u0434\u043e \u0435\u0449\u0435 \u0434\u043e\u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c. \u0422\u0430\u043a\u043e\u0439 \u0444\u043e\u0440\u043c\u0430\u0442 \u0431\u0443\u0434\u0435\u0442 \u0432\u044b\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u043e \u043f\u043d\n\n\ud83c\udf1a @poxek | \ud83d\udcf2 MAX |\ud83c\udf1a \u0411\u043b\u043e\u0433 | \ud83d\udcfa YT | \ud83d\udcfa RT | \ud83d\udcfa VK | \u2764\ufe0f \u041c\u0435\u0440\u0447", "creation_timestamp": "2025-10-15T14:56:30.000000Z"}, {"uuid": "6851ce9d-596f-48a7-b585-7170cec4e554", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "published-proof-of-concept", "source": "Telegram/Q-s80O6b5uVlmhryR8-ZciI2tLabDBtdKOXSX3QDtGfzYSw", "content": "", "creation_timestamp": "2025-11-13T21:00:05.000000Z"}, {"uuid": "e9541856-051c-451c-a104-12cca74567e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27554", "type": "seen", "source": "https://t.me/cvedetector/19207", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27554 - Cursor Desktop Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27554 \nPublished : March 1, 2025, 6:15 a.m. | 28\u00a0minutes ago \nDescription : ToDesktop before 2024-10-03, as used by Cursor before 2024-10-03 and other applications, allows remote attackers to execute arbitrary commands on the build server (e.g., read secrets from the desktopify config.prod.json file), and consequently deploy updates to any app, via a postinstall script in package.json. No exploitation occurred. \nSeverity: 9.9 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T08:05:03.000000Z"}, {"uuid": "0eb604c1-35ac-4f18-997e-7ad4da40a362", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27416", "type": "seen", "source": "https://t.me/cvedetector/19198", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27416 - Coding Hut Scratch Sign-in Account Takeover Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27416 \nPublished : March 1, 2025, 1:15 a.m. | 1\u00a0hour, 26\u00a0minutes ago \nDescription : Scratch-Coding-Hut.github.io is the website for Coding Hut. The website as of 28 February 2025 contained a sign in with scratch username and password form. Any user who used the sign in page would be susceptible to any other user signing into their account. As of time of publication, a fix is not available but work on a fix is underway. As a workaround, users should avoid signing in. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T03:54:07.000000Z"}, {"uuid": "16e0b389-7a24-4e69-a0e3-5d1625da3f5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27414", "type": "seen", "source": "https://t.me/cvedetector/19192", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27414 - MinIO SSH Key Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27414 \nPublished : Feb. 28, 2025, 9:15 p.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : MinIO is a high performance object storage. Starting in RELEASE.2024-06-06T09-36-42Z and prior to   \nRELEASE.2025-02-28T09-55-16Z, a bug in evaluating the trust of the SSH key used in an SFTP connection to MinIO allows authentication bypass and unauthorized data access. On a MinIO server with SFTP access configured and using LDAP as an external identity provider, MinIO supports SSH key based authentication for SFTP connections when the user has the `sshPublicKey` attribute set in their LDAP server. The server trusts the client's key only when the public key is the same as the `sshPublicKey` attribute. Due to the bug, when the user has no `sshPublicKey` property in LDAP, the server ends up trusting the key allowing the client to perform any FTP operations allowed by the MinIO access policies associated with the LDAP user (or any of their groups). Three requirements must be met in order to exploit the vulnerability. First, the MinIO server must be configured to allow SFTP access and use LDAP as an external identity provider. Second, the attacker must have knowledge of an LDAP username that does not have the `sshPublicKey` property set. Third, such an LDAP username or one of their groups must also have some MinIO access policy configured. When this bug is successfully exploited, the attacker can perform any FTP operations (i.e. reading, writing, deleting and listing objects) allowed by the access policy associated with the LDAP user account (and their groups). Version 1.2.0 fixes the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T23:43:23.000000Z"}, {"uuid": "16f27e08-fb73-49a1-818e-6428973ecb85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27413", "type": "seen", "source": "https://t.me/cvedetector/19191", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27413 - PwnDoc Path Traversal Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2025-27413 \nPublished : Feb. 28, 2025, 9:15 p.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : PwnDoc is a penetration test reporting application. Prior to version 1.2.0, the backup restore functionality allows an administrator to import raw data into the database, including Path Traversal (`../`) sequences. This is problematic for the template update functionality as it uses the path from the database to write arbitrary content to, potentially overwriting source code to achieve Remote Code Execution. Any user with the `backups:create`, `backups:update` and `templates:update` permissions (only administrators by default) can write arbitrary content to anywhere on the filesystem. By overwriting source code, it is possible to achieve Remote Code Execution. Version 1.2.0 fixes the issue. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T23:43:23.000000Z"}, {"uuid": "dfb4d342-0ed7-4ec4-8ab6-de32016f3454", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27410", "type": "seen", "source": "https://t.me/cvedetector/19190", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27410 - PwnDoc Path Traversal Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2025-27410 \nPublished : Feb. 28, 2025, 9:15 p.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : PwnDoc is a penetration test reporting application. Prior to version 1.2.0, the backup restore functionality is vulnerable to path traversal in the TAR entry's name, allowing an attacker to overwrite any file on the system with their content. By overwriting an included `.js` file and restarting the container, this allows for Remote Code Execution as an administrator. The remote code execution occurs because any user with the `backups:create` and `backups:update` (only administrators by default) is able to overwrite any file on the system. Version 1.2.0 fixes the issue. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T23:43:22.000000Z"}, {"uuid": "9d74c4d7-ef80-4299-a974-9db689e4b9a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27408", "type": "seen", "source": "https://t.me/cvedetector/19187", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27408 - \"Manifest Weak Password Hashing Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-27408 \nPublished : Feb. 28, 2025, 6:15 p.m. | 2\u00a0hours, 13\u00a0minutes ago \nDescription : Manifest offers users a one-file micro back end. Prior to version 4.9.1, Manifest employs a weak password hashing implementation that uses SHA3 without a salt. This exposes user passwords to a higher risk of being cracked if an attacker gains access to the database. Without the use of a salt, identical passwords across multiple users will result in the same hash, making it easier for attackers to identify and exploit patterns, thereby accelerating the cracking process. Version 4.9.1 fixes the issue. \nSeverity: 4.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T22:03:12.000000Z"}, {"uuid": "47fae8d9-bf1b-4523-aa4a-568849d9cad7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27400", "type": "seen", "source": "https://t.me/cvedetector/19174", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27400 - Magento LTS Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-27400 \nPublished : Feb. 28, 2025, 4:15 p.m. | 2\u00a0hours, 7\u00a0minutes ago \nDescription : Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backward compatibility. Versions prior to 20.12.3 and 20.13.1 contain a vulnerability that allows script execution in the admin panel which could lead to cross-site scripting against authenticated admin users. The attack requires an admin user with configuration access, so in practicality it is not very likely to be useful given that a user with this level of access is probably already a full admin. Versions 20.12.3 and 20.13.1 contain a patch for the issue. \nSeverity: 2.9 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T19:32:31.000000Z"}, {"uuid": "b07e98ae-c172-487d-944c-4f0407b4606a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27399", "type": "seen", "source": "https://t.me/cvedetector/19069", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27399 - Mastodon Domain Block Visibility Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-27399 \nPublished : Feb. 27, 2025, 6:15 p.m. | 1\u00a0hour, 21\u00a0minutes ago \nDescription : Mastodon is a self-hosted, federated microblogging platform. In versions prior to 4.1.23, 4.2.16, and 4.3.4, when the visibility for domain blocks/reasons is set to \"users\" (localized English string: \"To logged-in users\"), users that are not yet approved can view the block reasons. Instance admins that do not want their domain blocks to be public are impacted. Versions 4.1.23, 4.2.16, and 4.3.4 fix the issue. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T20:56:15.000000Z"}, {"uuid": "6ed22eaa-7cee-4fdd-a589-16a613a9dffd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27137", "type": "seen", "source": "https://t.me/cvedetector/18837", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27137 - \"Dependency-Track Local File Inclusion Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-27137 \nPublished : Feb. 24, 2025, 9:15 p.m. | 1\u00a0hour, 54\u00a0minutes ago \nDescription : Dependency-Track is a component analysis platform that allows organizations to identify and reduce risk in the software supply chain. Dependency-Track allows users with the `SYSTEM_CONFIGURATION` permission to customize notification templates. Templates are evaluated using the Pebble template engine. Pebble supports an `include` tag, which allows template authors to include the content of arbitrary files upon evaluation. Prior to version 4.12.6, users of Dependency-Track with the `SYSTEM_CONFIGURATION` permission can abuse the `include` tag by crafting notification templates that `include` sensitive local files, such as `/etc/passwd` or `/proc/1/environ`. By configuring such a template for a notification rule (aka \"Alert\"), and having it send notifications to a destination controlled by the actor, sensitive information may be leaked. The issue has been fixed in Dependency-Track 4.12.6. In fixed versions, the `include` tag can no longer be used. Usage of the tag will cause template evaluation to fail. As a workaround, avoid assigning the `SYSTEM_CONFIGURATION` permission to untrusted users. The `SYSTEM_CONFIGURATION` permission per default is only granted to members of the `Administrators` team. Assigning this permission to non-administrative users or teams is a security risk in itself, and highly discouraged. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-25T00:39:13.000000Z"}, {"uuid": "ef9fd7bc-ec1b-4b40-ab56-968dd5747495", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27364", "type": "seen", "source": "https://t.me/cvedetector/18831", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27364 - Caldera Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27364 \nPublished : Feb. 24, 2025, 7:15 p.m. | 1\u00a0hour, 53\u00a0minutes ago \nDescription : In MITRE Caldera through 4.2.0 and 5.0.0 before 35bc06e, a Remote Code Execution (RCE) vulnerability was found in the dynamic agent (implant) compilation functionality of the server. This allows remote attackers to execute arbitrary code on the server that Caldera is running on via a crafted web request to the Caldera server API used for compiling and downloading of Caldera's Sandcat or Manx agent (implants). This web request can use the gcc -extldflags linker flag with sub-commands. \nSeverity: 10.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-24T22:08:42.000000Z"}, {"uuid": "1eec2051-5222-4ae9-8637-6a367712d575", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "exploited", "source": "Telegram/1nat8K93NGsCP-cZPweQ-or7a2qW_ATMeXoV5DXWXy-hIQ", "content": "", "creation_timestamp": "2025-10-28T10:41:45.000000Z"}, {"uuid": "8d03eb2c-e954-4341-b17b-3e115584784b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/60220", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aself cleaning CVE-2025-27591 Poc that grants a root reverse shell instead of modifying passwd files\nURL\uff1ahttps://github.com/0x00Jeff/CVE-2025-27591\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-11-19T20:01:14.000000Z"}, {"uuid": "55fd2b6e-05de-4020-b1c6-c4178c346c3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "published-proof-of-concept", "source": "Telegram/uEOlrUu1_l--1w6IndjXIiiKl78HQvEFFzlmBtSlWW7XloE", "content": "", "creation_timestamp": "2025-11-20T03:00:06.000000Z"}, {"uuid": "333b77d4-462b-4ac5-92c1-fe5615e6c4c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27142", "type": "seen", "source": "https://t.me/cvedetector/18925", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27142 - LocalSend Path Traversal Remote Command Execution\", \n  \"Content\": \"CVE ID : CVE-2025-27142 \nPublished : Feb. 25, 2025, 8:15 p.m. | 1\u00a0hour, 55\u00a0minutes ago \nDescription : LocalSend is a free, open-source app that allows users to securely share files and messages with nearby devices over their local network without needing an internet connection. Prior to version 1.17.0, due to the missing sanitization of the path in the `POST /api/localsend/v2/prepare-upload` and the `POST /api/localsend/v2/upload` endpoint, a malicious file transfer request can write files to the arbitrary location on the system, resulting in the remote command execution. A malicious file transfer request sent by nearby devices can write files into an arbitrary directory. This usually allows command execution via the startup folder on Windows or Bash-related files on Linux. If the user enables the `Quick Save` feature, it will silently write files without explicit user interaction. Version 1.17.0 fixes this issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-25T23:14:27.000000Z"}, {"uuid": "88ab566c-4f8d-4eb1-a5e7-8a6d90140f27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27139", "type": "seen", "source": "https://t.me/cvedetector/18924", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27139 - Combodo iTop Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27139 \nPublished : Feb. 25, 2025, 8:15 p.m. | 1\u00a0hour, 55\u00a0minutes ago \nDescription : Combodo iTop is a web based IT service management tool. Versions prior to 2.7.12, 3.1.2, and 3.2.0 are vulnerable to cross-site scripting when the preferences page is opened. Versions 2.7.12, 3.1.2, and 3.2.0 fix the issue. \nSeverity: 6.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-25T23:14:26.000000Z"}, {"uuid": "8e0ae69e-cb78-44c8-a5f4-84e4bc0c2370", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27937", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13646", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27937\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: Quick Agent V3 and Quick Agent V2 contain an issue with improper limitation of a pathname to a restricted directory ('Path Traversal'). If exploited, an arbitrary file in the affected product may be obtained by a remote attacker who can log in to the product.\n\ud83d\udccf Published: 2025-04-27T23:56:55.286Z\n\ud83d\udccf Modified: 2025-04-27T23:56:55.286Z\n\ud83d\udd17 References:\n1. https://mfp-support.sios.jp/hc/ja/articles/45853460006937\n2. https://siosapps.sios.jp/agent_info/20250425001.html\n3. https://jvn.jp/en/jp/JVN82536398/", "creation_timestamp": "2025-04-28T00:10:36.000000Z"}, {"uuid": "7348c862-65da-4aa8-808a-800f322c11dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27157", "type": "seen", "source": "https://t.me/cvedetector/19050", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27157 - Mastodon Email Address Spoofing Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27157 \nPublished : Feb. 27, 2025, 5:15 p.m. | 17\u00a0minutes ago \nDescription : Mastodon is a self-hosted, federated microblogging platform. Starting in version 4.2.0 and prior to versions 4.2.16 and 4.3.4, the rate limits are missing on `/auth/setup`. Without those rate limits, an attacker can craft requests that will send an email to an arbitrary addresses. Versions 4.2.16 and 4.3.4 fix the issue. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T19:15:38.000000Z"}, {"uuid": "de91f0d1-6d5f-498f-8fec-132b615474c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27154", "type": "seen", "source": "https://t.me/cvedetector/19039", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27154 - Spotify Cache File Permission Weakness\", \n  \"Content\": \"CVE ID : CVE-2025-27154 \nPublished : Feb. 27, 2025, 2:15 p.m. | 1\u00a0hour, 13\u00a0minutes ago \nDescription : Spotipy is a lightweight Python library for the Spotify Web API. The `CacheHandler` class creates a cache file to store the auth token. Prior to version 2.25.1, the file created has `rw-r--r--` (644) permissions by default, when it could be locked down to `rw-------` (600) permissions. This leads to overly broad exposure of the spotify auth token. If this token can be read by an attacker (another user on the machine, or a process running as another user), it can be used to perform administrative actions on the Spotify account, depending on the scope granted to the token. Version 2.25.1 tightens the cache file permissions. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T16:45:04.000000Z"}, {"uuid": "2dd52aee-022d-48d1-9ed7-8c6875f3646b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27144", "type": "seen", "source": "https://t.me/cvedetector/18842", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27144 - Go JOSE JSON Web Token Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2025-27144 \nPublished : Feb. 24, 2025, 11:15 p.m. | 1\u00a0hour, 54\u00a0minutes ago \nDescription : Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. In versions on the 4.x branch prior to version 4.0.5, when parsing compact JWS or JWE input, Go JOSE could use excessive memory. The code used strings.Split(token, \".\") to split JWT tokens, which is vulnerable to excessive memory consumption when processing maliciously crafted tokens with a large number of `.` characters.  An attacker could exploit this by sending numerous malformed tokens, leading to memory exhaustion and a Denial of Service. Version 4.0.5 fixes this issue. As a workaround, applications could pre-validate that payloads passed to Go JOSE do not contain an excessive number of `.` characters. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-25T02:19:27.000000Z"}, {"uuid": "eb1b09e4-71dd-49a9-85f4-317db877597f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "exploited", "source": "https://t.me/S_E_Reborn/6000", "content": "\u0413\u0435\u043d\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440 \u0438\u0442\u0430\u043b\u044c\u044f\u043d\u0441\u043a\u043e\u0433\u043e \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 spyware Memento Labs (Hacking Team) \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b \u0432\u044b\u0432\u043e\u0434\u044b \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u044f \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 Operation ForumTroll, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u043e\u0431\u044a\u0435\u043a\u0442\u044b \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u043c \u0438 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u043c \u0441\u0435\u043a\u0442\u043e\u0440\u0430\u0445 \u0411\u0435\u043b\u043e\u0440\u0443\u0441\u0441\u0438\u0438 \u0438 \u0420\u043e\u0441\u0441\u0438\u0438.\n\n\u041a\u0430\u043a \u043c\u044b \u0443\u0436\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u043b\u0438, \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u0430\u0442\u0430\u043a \u0432\u043a\u043b\u044e\u0447\u0430\u043b\u0430 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f Google Chrome (CVE-2025-2783), \u0430 \u0442\u0430\u043a\u0436\u0435 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u0430\u0440\u0441\u0435\u043d\u0430\u043b\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b\u00a0Dante, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443, \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0438 \u043f\u043e\u043b\u0435\u0437\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443 - \u0438\u043c\u043f\u043b\u0430\u043d\u0442/\u0430\u0433\u0435\u043d\u0442\u00a0LeetAgent.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c Memento Labs \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u043f\u043e \u0432\u0441\u0435\u0439 \u0420\u043e\u0441\u0441\u0438\u0438 \u0432 \u0442\u043e\u043c \u0438\u043b\u0438 \u0438\u043d\u043e\u043c \u043e\u0431\u044a\u0435\u043c\u0435 \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0418\u0411-\u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439.\n\nDr.Web \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043e\u0434\u043d\u0443 \u0438\u0437 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 Memento Labs\u00a0\u0432 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435 2024 \u0433\u043e\u0434\u0430.\n\nF6 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u043b\u0430 \u0430\u0442\u0430\u043a\u0438 Dante APT\u00a0\u0432 \u0441\u0432\u043e\u0435\u043c \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u043e\u0442\u0447\u0435\u0442\u0435 \u00ab\u041a\u0438\u0431\u0435\u0440\u0443\u0433\u0440\u043e\u0437\u044b \u0432\u00a0\u0420\u043e\u0441\u0441\u0438\u0438 \u0438\u00a0\u0421\u041d\u0413 2024/25\u00bb.\n\nPositive Technologies \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043b\u0430 \u0433\u0440\u0443\u043f\u043f\u0443 \u043a\u0430\u043a TaxOff \u0438 Team46, \u0430 \u0437\u0430\u0442\u0435\u043c \u0441\u0432\u044f\u0437\u0430\u043b\u0430 \u044d\u0442\u0438 \u0434\u0432\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u0445\u043e\u0434\u0430 \u043e\u0442\u0447\u0451\u0442\u0430 \u041b\u041a \u043f\u043e ForumTroll \u0432 \u043c\u0430\u0440\u0442\u0435.\n\n\u0413\u0435\u043d\u0434\u0438\u0440 \u041f\u0430\u043e\u043b\u043e \u041b\u0435\u0446\u0446\u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u0438\u0437\u0434\u0430\u043d\u0438\u044e TechCrunch,\u00a0\u0447\u0442\u043e \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0435 \u041f\u041e \u0431\u044b\u043b\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043e \u043e\u0434\u043d\u0438\u043c \u0438\u0437 \u0435\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 - \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0437\u0430\u043a\u0430\u0437\u0447\u0438\u043a\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0441\u0442\u0430\u0440\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e Dante, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e Memento \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442 \u043f\u0440\u0435\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u043a \u043a\u043e\u043d\u0446\u0443 \u0433\u043e\u0434\u0430.\n\n\u0421\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e, \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u041b\u0435\u0446\u0446\u0438 \u043d\u0435 \u043d\u0430\u0437\u0432\u0430\u043b, \u0432\u043e\u043e\u0431\u0449\u0435 \u0443\u0434\u0438\u0432\u0438\u043b\u0441\u044f, \u0447\u0442\u043e \u043a\u0442\u043e-\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u044d\u0442\u0443 \u0432\u0435\u0440\u0441\u0438\u044e Dante, \u043f\u043e\u043e\u0431\u0435\u0449\u0430\u0432 \u0432\u043e \u0432\u0441\u0435\u043c \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u0442\u044c\u0441\u044f \u0438 \u0440\u0430\u0437\u043e\u0441\u043b\u0430\u0442\u044c \u0432\u0441\u0435\u043c \u0441\u0432\u043e\u0438\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u0441 \u043f\u0440\u043e\u0441\u044c\u0431\u043e\u0439 \u043f\u0440\u0435\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e \u0434\u043b\u044f Windows.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u044f\u043a\u043e\u0431\u044b Memento \u0443\u0436\u0435 \u043e\u0431\u0440\u0430\u0449\u0430\u043b\u0430\u0441\u044c \u043a\u043e \u0432\u0441\u0435\u043c \u0441\u0432\u043e\u0438\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0441 \u043f\u0440\u043e\u0441\u044c\u0431\u043e\u0439 \u043f\u0440\u0435\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0434\u043b\u044f Windows, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044f \u0442\u0430\u043a\u0436\u0435 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 \u041b\u041a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0438\u043c \u041f\u041e Dante \u0435\u0449\u0451 \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2024 \u0433\u043e\u0434\u0430.\n\n\u0420\u0443\u043a\u043e\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c Memento \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b, \u0447\u0442\u043e \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0435 \u041f\u041e \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0434\u043b\u044f \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c. \n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u0432\u0435\u0434\u0435\u0442 \u0440\u0430\u0431\u043e\u0442\u0443 \u043f\u043e \u043f\u043e\u0438\u0441\u043a\u0443 0-day \u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u043b\u044f \u0438\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 \u0441\u0432\u043e\u0435\u0433\u043e \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u0441\u043e\u0444\u0442\u0430. \u041d\u043e, \u043a\u0430\u043a \u043e\u043d \u043f\u0440\u0438\u0437\u043d\u0430\u043b\u0441\u044f, \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u043f\u0440\u0438\u043e\u0431\u0440\u0435\u0442\u0430\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u043e\u0442 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432.\u00a0\n\n\u0411\u0435\u0437\u0443\u0441\u043b\u043e\u0432\u043d\u043e, \u043d\u0435 \u043c\u043e\u0436\u0435\u043c \u043d\u0435 \u0441\u043e\u0433\u043b\u0430\u0441\u0438\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u0441 \u041b\u0435\u0446\u0446\u0438 \u043f\u043e \u043f\u043e\u0432\u043e\u0434\u0443 \u0442\u0435\u043f\u0435\u0440\u044c \u0443\u0436\u0435 \u043e\u0434\u043d\u043e\u0437\u043d\u0430\u0447\u043d\u043e \u00ab\u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0435\u0433\u043e\u00bb \u0441\u043e\u0444\u0442\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0441\u043b\u0435 \u043e\u0442\u0447\u0435\u0442\u0430 \u041b\u041a \u0438 \u043a\u043e\u043b\u043b\u0435\u0433 \u043c\u043e\u0436\u043d\u043e \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432\u044b\u043a\u0438\u0434\u044b\u0432\u0430\u0442\u044c \u0432 \u0443\u0440\u043d\u0443.\n\n\u0421\u0443\u0434\u044f \u043f\u043e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 ForumTroll, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0439 \u043c\u043e\u0433\u043b\u043e \u0438 \u043d\u0435 \u0431\u044b\u0442\u044c (\u0434\u043e \u0432\u044b\u0445\u043e\u0434\u0430 \u043e\u0442\u0447\u0435\u0442\u0430 \u041b\u041a).\n\n\u0412\u0435\u0434\u044c \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0435 \u0438\u043d\u0432\u0435\u0441\u0442\u0438\u0446\u0438\u0438 \u0432 \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0443\u044e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0443 \u0438 \u0437\u0430\u0442\u0435\u043c \u043d\u043e\u0432\u0443\u044e \u0438\u0442\u0442\u0435\u0440\u0430\u0446\u0438\u044e \u0444\u043b\u0430\u0433\u043c\u0430\u043d\u0441\u043a\u043e\u0433\u043e \u0441\u043e\u0444\u0442\u0430 \u043d\u0443\u0436\u043d\u043e \u0436\u0435 \u043e\u0442\u0431\u0438\u0432\u0430\u0442\u044c \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u0435\u0432\u0440\u043e (\u0430 \u0435\u0449\u0435 \u0438 \u0437\u0430\u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c).", "creation_timestamp": "2025-10-31T14:53:18.000000Z"}, {"uuid": "8b582abf-747c-4eb1-80ac-454e10cb3367", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "exploited", "source": "https://t.me/S_E_Reborn/5993", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0438 \u043e\u0442\u0447\u0435\u0442 \u0441 \u043d\u043e\u0432\u044b\u043c\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u044f\u043c\u0438 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u043b\u043e\u0436\u043d\u043e\u0439 APT-\u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0441 \u0446\u0435\u043f\u043e\u0447\u043a\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0434\u043b\u044f Google Chrome, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a Operation ForumTroll.\n\n\u041b\u041a \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0441\u0432\u044f\u0437\u0430\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u043f\u0435\u0440\u0432\u043e\u0439 \u0432 2025 \u0433\u043e\u0434\u0443 0-day Chrome (CVE-2025-2783) \u0441 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u044b Hacking Team, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0435\u0439\u0441\u044f \u043d\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e.\n\n\u0421\u0443\u0434\u044f \u043f\u043e \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e, \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e Operation ForumTroll \u0431\u044b\u043b \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0430\u0436. \u0421\u0440\u0435\u0434\u0438 \u0436\u0435\u0440\u0442\u0432 - \u041d\u0418\u0418, \u0421\u041c\u0418, \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435, \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0435, \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0438 \u043f\u0440. \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0420\u043e\u0441\u0441\u0438\u0438.\n\n\u0426\u0435\u043f\u043e\u0447\u043a\u0430 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430\u0447\u0438\u043d\u0430\u043b\u0430\u0441\u044c \u0441 \u043f\u0440\u043e\u0444\u0435\u0441\u0441\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u043f\u0438\u0441\u0435\u043c, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u043f\u0435\u0440\u0441\u043e\u043d\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0430\u0439\u0442.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0438\u0445 \u043e\u0447\u0435\u043d\u044c \u043a\u043e\u0440\u043e\u0442\u043a\u0438\u0439 \u0441\u0440\u043e\u043a \u0436\u0438\u0437\u043d\u0438 \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u0430\u043c \u041b\u041a \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u043b\u043e\u0436\u043d\u044b\u0439 0-day \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442.\n\n\u041a\u043e\u0434 \u0431\u044b\u043b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0434\u043b\u044f \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b Chrome \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0448\u0435\u043b\u043b-\u043a\u043e\u0434\u0430, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043b\u043e \u043a \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u044f\u043b\u0438\u0441\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0442\u0435\u0445\u043d\u0438\u043a\u0438 Component Object Model (COM) hijacking.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u043e\u0439 \u0432\u044b\u0441\u0442\u0443\u043f\u0430\u043b\u043e LeetAgent - \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0435 \u041f\u041e, \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0435 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 leetspeak, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043c\u043e\u0433\u043b\u043e \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043f\u043e HTTPS, \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043d\u0430\u0436\u0430\u0442\u0438\u044f \u043a\u043b\u0430\u0432\u0438\u0448 \u0438 \u043a\u0440\u0430\u0441\u0442\u044c \u0444\u0430\u0439\u043b\u044b.\n\n\u041d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043a\u043e\u043c\u0430\u043d\u0434, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u043e\u0442 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u04212, \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u043e\u0433\u043e \u0432 \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 Fastly.net, \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0435 \u041f\u041e \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0435, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b, \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0448\u0435\u043b\u043b-\u043a\u043e\u0434, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0447\u0438\u0442\u0430\u0442\u044c/\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b.\n\n\u0422\u0430\u043a\u0436\u0435 \u0441 \u0435\u0435 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u043b\u0438 \u0438 \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u043b\u0438 \u0432\u0441\u043f\u043e\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a 7z, Rclone, SharpChrome \u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e, LeetAgent \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0441 2022 \u0433\u043e\u0434\u0430 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0420\u043e\u0441\u0441\u0438\u0438 \u0438 \u0411\u0435\u043b\u0430\u0440\u0443\u0441\u0438, \u0430 \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 - \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0431\u043e\u043b\u0435\u0435 \u0441\u043b\u043e\u0436\u043d\u043e\u0433\u043e \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u0430 spyware, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0433\u043e \u0438\u0442\u0430\u043b\u044c\u044f\u043d\u0441\u043a\u043e\u0439 Memento Labs (\u0440\u0430\u043d\u0435\u0435 - Hacking Team).\n\nHacking Team, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0432 2003 \u0433\u043e\u0434\u0443, \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430 \u0441\u0432\u043e\u0438\u043c \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0438\u043c \u041f\u041e Remote Control Systems (RCS), \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c\u044e \u0443 \u0441\u043f\u0435\u0446\u0441\u043b\u0443\u0436\u0431 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.\n\n\u0421\u0443\u0434\u044c\u0431\u0430 Hacking Team \u043f\u0440\u0435\u0442\u0435\u0440\u043f\u0435\u043b\u0430 \u0432\u043d\u0435\u0437\u0430\u043f\u043d\u044b\u0439 \u043f\u043e\u0432\u043e\u0440\u043e\u0442, \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e \u043a\u0430\u043a \u0432 2015 \u0433\u043e\u0434\u0443 \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0432\u0437\u043b\u043e\u043c\u0430 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u043f\u043e\u043f\u0430\u043b\u0438 400 \u0413\u0411 \u0435\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432.\n\n\u0412  2019 \u0433\u043e\u0434\u0443 \u0435\u0435 \u043f\u0440\u0438\u043e\u0431\u0440\u0435\u043b\u0430 InTheCyber Group \u0438 \u043f\u0435\u0440\u0435\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0430 \u0432 Memento Labs, \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0432 \u043f\u043e\u043b\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043b\u0438\u043d\u0435\u0439\u043a\u0438 \u0440\u0435\u0448\u0435\u043d\u0438\u0439.\n\n\u041d\u043e\u0432\u044b\u0439 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 Memento \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Dante \u0438\u043c\u0435\u0435\u0442 \u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0449\u0435\u0433\u043e \u0441 RCS, \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u043a\u0430\u043a Da Vinci.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043c\u0430\u043b\u043e, \u0447\u0442\u043e \u0431\u044b\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u0445 \u044d\u0442\u043e\u0433\u043e \u041f\u041e, \u0438 \u043d\u0438\u043a\u0442\u043e \u043d\u0435 \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u043b \u0435\u0433\u043e \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0412 \u043e\u0441\u043d\u043e\u0432\u0435 \u0435\u0433\u043e \u0440\u0430\u0431\u043e\u0442\u044b \u043b\u0435\u0436\u0438\u0442 \u043e\u0440\u043a\u0435\u0441\u0442\u0440\u0430\u0442\u043e\u0440, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0438 \u0445\u0440\u0430\u043d\u044f\u0449\u0438\u0435\u0441\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0434\u0443\u043b\u0438.\n\n\u041e\u043d \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043b\u0430\u0434\u0430\u0435\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u041f\u0440\u0438 \u0434\u043e\u043b\u0433\u043e\u043c \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0438 \u043e\u0442\u0432\u0435\u0442\u0430 \u043e\u0442 \u04212 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0430\u044f \u041f\u041e \u0443\u0434\u0430\u043b\u044f\u0435\u0442\u0441\u044f \u0438\u0437 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u041b\u041a, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0441\u0442\u043e\u044f\u0449\u0438\u0439 \u0437\u0430 Operation ForumTroll, \u043d\u0435 \u0431\u044b\u043b \u0437\u0430\u043c\u0435\u0447\u0435\u043d \u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 Dante \u0432 \u044d\u0442\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438, \u043d\u043e \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b \u0435\u0433\u043e \u0432 \u0434\u0440\u0443\u0433\u0438\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u043b \u0442\u043e\u0442 \u0436\u0435 \u043d\u0430\u0431\u043e\u0440 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0440\u044f\u0434 \u0441\u043e\u0432\u043f\u0430\u0434\u0435\u043d\u0438\u0439 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 Operation ForumTroll \u0438 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u0445 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c Dante: \u0441\u0445\u043e\u0436\u0438\u0435 \u043f\u0443\u0442\u0438 \u0432 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u043e\u0434\u0438\u043d\u0430\u043a\u043e\u0432\u044b\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u0434\u0430\u043d\u043d\u044b\u0435, \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u0432 \u0444\u0430\u0439\u043b\u0430\u0445 \u0448\u0440\u0438\u0444\u0442\u043e\u0432, \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043d\u0435\u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0434\u0435\u0442\u0430\u043b\u0438.\n\n\u0411\u043e\u043b\u0435\u0435 \u0442\u043e\u0433\u043e, \u0432 \u041b\u041a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0441\u043e\u0432\u043f\u0430\u0434\u0435\u043d\u0438\u044f \u0432 \u043a\u043e\u0434\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430, \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430 \u0438 Dante. \n\n\u0412\u0441\u0435 \u044d\u0442\u043e \u0432 \u0441\u043e\u0432\u043e\u043a\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0442\u044c, \u0447\u0442\u043e\u00a0Operation ForumTroll \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043b\u0430\u0441\u044c \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043d\u0430\u0431\u043e\u0440\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0433\u043e\u0441\u044f \u0432 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442\u0435 \u0441 Dante.\n\n\u0412\u0435\u0440\u043e\u044f\u0442\u043d\u043e \u0442\u0435\u043f\u0435\u0440\u044c, \u043a\u043e\u0433\u0434\u0430 Dante \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u043d\u043e\u0432\u043e\u043c\u0443 \u0432\u043b\u0430\u0434\u0435\u043b\u0435\u0446\u0443 Hacking Team \u0441\u043d\u043e\u0432\u0430 \u043f\u0440\u0438\u0434\u0435\u0442\u0441\u044f  \u043f\u0438\u043b\u0438\u0442\u044c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b \u0441 \u0447\u0438\u0441\u0442\u043e\u0433\u043e \u043b\u0438\u0441\u0442\u0430.", "creation_timestamp": "2025-10-29T00:48:16.000000Z"}, {"uuid": "8b37fdc5-8746-42e1-b422-d7f863440ba1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27135", "type": "seen", "source": "https://t.me/cvedetector/18902", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27135 - RAGFlow SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27135 \nPublished : Feb. 25, 2025, 7:15 p.m. | 46\u00a0minutes ago \nDescription : RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. Versions 0.15.1 and prior are vulnerable to SQL injection. The ExeSQL component extracts the SQL statement from the input and sends it directly to the database query. As of time of publication, no patched version is available. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-25T21:33:56.000000Z"}, {"uuid": "ae331c43-5c7f-4b27-9e77-70c6dba11fb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27110", "type": "seen", "source": "https://t.me/cvedetector/18923", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27110 - Libmodsecurity3 HTML Entity Decoding Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27110 \nPublished : Feb. 25, 2025, 8:15 p.m. | 1\u00a0hour, 55\u00a0minutes ago \nDescription : Libmodsecurity is one component of the ModSecurity v3 project. The library codebase serves as an interface to ModSecurity Connectors taking in web traffic and applying traditional ModSecurity processing. A bug that exists only in Libmodsecurity3 version 3.0.13 means that, in 3.0.13, Libmodsecurity3 can't decode encoded HTML entities if they contains leading zeroes. Version 3.0.14 contains a fix. No known workarounds are available. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-25T23:14:25.000000Z"}, {"uuid": "a2e39902-e074-4d54-a0a0-b28cecbe5cea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/17854", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aExpanded version of the code shown at RootedCON redone in python - CVE-2025-27840\nURL\uff1ahttps://github.com/em0gi/CVE-2025-27840\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-03-09T16:17:15.000000Z"}, {"uuid": "9b0e760f-945b-4c03-9a09-9e9be0bd701f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27146", "type": "seen", "source": "https://t.me/cvedetector/18922", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27146 - Matrix Appservice IRC Arbitrary IRC Command Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27146 \nPublished : Feb. 25, 2025, 8:15 p.m. | 1\u00a0hour, 55\u00a0minutes ago \nDescription : matrix-appservice-irc is a Node.js IRC bridge for Matrix. The matrix-appservice-irc bridge up to version 3.0.3 contains a vulnerability which can lead to arbitrary IRC command execution as the puppeted user. The attacker can only inject commands executed as their own IRC user. The vulnerability has been patched in matrix-appservice-irc version 3.0.4. \nSeverity: 2.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-25T23:14:24.000000Z"}, {"uuid": "a73937f1-bb75-4d47-874c-7394331f653e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27148", "type": "seen", "source": "https://t.me/cvedetector/18907", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27148 - Gradle Native-Platform Local Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27148 \nPublished : Feb. 25, 2025, 9:15 p.m. | 55\u00a0minutes ago \nDescription : Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. On Unix-like systems, the system temporary directory can be created with open permissions that allow multiple users to create and delete files within it. This library initialization could be vulnerable to a local privilege escalation from an attacker quickly deleting and recreating files in the system temporary directory. Gradle builds that rely on versions of net.rubygrapefruit:native-platform prior to 0.22-milestone-28 could be vulnerable to a local privilege escalation from an attacker quickly deleting and recreating files in the system temporary directory.  \n  \nIn net.rubygrapefruit:native-platform prior to version 0.22-milestone-28, if the `Native.get(Class)` method was called, without calling `Native.init(File)` first, with a non-`null` argument used as working file path, then the library would initialize itself using the system temporary directory and NativeLibraryLocator.java lines 68 through 78. Version 0.22-milestone-28 has been released with changes that fix the problem. Initialization is now mandatory and no longer uses the system temporary directory, unless such a path is passed for initialization. The only workaround for affected versions is to make sure to do a proper initialization, using a location that is safe.  \n  \nGradle 8.12, only that exact version, had codepaths where the initialization of the underlying native integration library took a default path, relying on copying the binaries to the system temporary directory. Any execution of Gradle exposed this exploit. Users of Windows or modern versions of macOS are not vulnerable, nor are users of a Unix-like operating system with the \"sticky\" bit set or `noexec` on their system temporary directory vulnerable. This problem was fixed in Gradle 8.12.1. Gradle 8.13 release also upgrades to a version of the native library that no longer has that bug. Some workarounds are available. On Unix-like operating systems, ensure that the \"sticky\" bit is set. This only allows the original user (or root) to delete a file. Mounting `/tmp` as `noexec` will prevent Gradle 8.12 from starting. Those who are are unable to change the permissions of the system temporary directory can move the Java temporary directory by setting the System Property java.io.tmpdir. The new path needs to limit permissions to the build user only. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-25T23:14:04.000000Z"}, {"uuid": "e3763286-fea6-4931-b0a1-201f4e373d7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27000", "type": "seen", "source": "https://t.me/cvedetector/18873", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27000 - George Pattichis Simple Photo Feed Missing Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27000 \nPublished : Feb. 25, 2025, 3:15 p.m. | 33\u00a0minutes ago \nDescription : Missing Authorization vulnerability in George Pattichis Simple Photo Feed allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Simple Photo Feed: from n/a through 1.4.0. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-25T17:22:46.000000Z"}, {"uuid": "c60f0b4b-7c8b-4d03-b683-fdd9d094b2a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27554", "type": "seen", "source": "Telegram/kPsX91TXrixBmzyMAQskw2JRsc8fGWyBVgYWmom08WKfh3GF", "content": "", "creation_timestamp": "2025-03-02T11:46:31.000000Z"}, {"uuid": "1da003bb-c763-4fee-a253-eb72dde9a2cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27145", "type": "seen", "source": "https://t.me/cvedetector/18848", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27145 - \"copyparty DOM-Based Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-27145 \nPublished : Feb. 25, 2025, 2:15 a.m. | 1\u00a0hour, 2\u00a0minutes ago \nDescription : copyparty, a portable file server, has a DOM-based cross-site scripting vulnerability in versions prior to 1.16.15. The vulnerability is considered low-risk. By handing someone a maliciously-named file, and then tricking them into dragging the file into copyparty's Web-UI, an attacker could execute arbitrary javascript with the same privileges as that user. For example, this could give unintended read-access to files owned by that user. The bug is triggered by the drag-drop action itself; it is not necessary to actually initiate the upload. The file must be empty (zero bytes). Note that, as a general-purpose webserver, it is intentionally possible to upload HTML-files with arbitrary javascript in `\",\n  \"Detection Date\": \"25 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-25T04:49:57.000000Z"}, {"uuid": "a1d7f2b7-bca4-4d58-96a3-ba879b50f2b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27143", "type": "seen", "source": "https://t.me/cvedetector/18841", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27143 - Better Auth Open Redirect Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27143 \nPublished : Feb. 24, 2025, 11:15 p.m. | 1\u00a0hour, 54\u00a0minutes ago \nDescription : Better Auth is an authentication and authorization library for TypeScript. Prior to version 1.1.21, the application is vulnerable to an open redirect due to improper validation of the callbackURL parameter in the email verification endpoint and any other endpoint that accepts callback url. While the server blocks fully qualified URLs, it incorrectly allows scheme-less URLs. This results in the browser interpreting the URL as a fully qualified URL, leading to unintended redirection. An attacker can exploit this flaw by crafting a malicious verification link and tricking users into clicking it. Upon successful email verification, the user will be automatically redirected to the attacker's website, which can be used for phishing, malware distribution, or stealing sensitive authentication tokens. This CVE is a bypass of the fix for GHSA-8jhw-6pjj-8723/CVE-2024-56734. Version 1.1.21 contains an updated patch. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-25T02:19:27.000000Z"}, {"uuid": "b47211dd-33a1-4b81-b54d-0c608e9fdb95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27133", "type": "seen", "source": "https://t.me/cvedetector/18830", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27133 - WeGIA SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-27133 \nPublished : Feb. 24, 2025, 7:15 p.m. | 1\u00a0hour, 53\u00a0minutes ago \nDescription : WeGIA is a Web manager for charitable institutions. A SQL Injection vulnerability was discovered in the WeGIA application prior to version 3.2.15 at the `adicionar_tipo_exame.php` endpoint. This vulnerability allows an authorized attacker to execute arbitrary SQL queries, allowing access to sensitive information. Version 3.2.15 contains a patch for the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-24T22:08:38.000000Z"}, {"uuid": "12310584-b8bc-46e3-8cc0-dff5dc2e8897", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27112", "type": "seen", "source": "https://t.me/cvedetector/18829", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27112 - Navidrome Subsonic API Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-27112 \nPublished : Feb. 24, 2025, 7:15 p.m. | 1\u00a0hour, 53\u00a0minutes ago \nDescription : Navidrome is an open source web-based music collection server and streamer. Starting in version 0.52.0 and prior to version 0.54.5, in certain Subsonic API endpoints, a flaw in the authentication check process allows an attacker to specify any arbitrary username that does not exist on the system, along with a salted hash of an empty password. Under these conditions, Navidrome treats the request as authenticated, granting access to various Subsonic endpoints without requiring valid credentials. An attacker can use any non-existent username to bypass the authentication system and gain access to various read-only data in Navidrome, such as user playlists. However, any attempt to modify data fails with a \"permission denied\" error due to insufficient permissions, limiting the impact to unauthorized viewing of information. Version 0.54.5 contains a patch for this issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-24T22:08:37.000000Z"}, {"uuid": "2ba116d9-e7d8-4b2e-b099-5adb3913866e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27140", "type": "seen", "source": "https://t.me/cvedetector/18833", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27140 - WeGIA OS Command Injection\", \n  \"Content\": \"CVE ID : CVE-2025-27140 \nPublished : Feb. 24, 2025, 10:15 p.m. | 54\u00a0minutes ago \nDescription : WeGIA is a Web manager for charitable institutions. An OS Command Injection vulnerability was discovered in versions prior to 3.2.15 of the WeGIA application, `importar_dump.php` endpoint. This vulnerability could allow an attacker to execute arbitrary code remotely. The command is basically a command to move a temporary file, so a webshell upload is also possible. Version 3.2.15 contains a patch for the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-25T00:39:07.000000Z"}, {"uuid": "beb832b1-c673-4aa0-8ae5-02ff162b2a55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27141", "type": "seen", "source": "https://t.me/cvedetector/18832", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27141 - Metabase Enterprise Edition Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27141 \nPublished : Feb. 24, 2025, 10:15 p.m. | 54\u00a0minutes ago \nDescription : Metabase Enterprise Edition is the enterprise version of Metabase business intelligence and data analytics software. Starting in version 1.47.0 and prior to versions 1.50.36, 1.51.14, 1.52.11, and 1.53.2 of Metabase Enterprise Edition, users with impersonation permissions may be able to see results of cached questions, even if their permissions don\u2019t allow them to see the data. If some user runs a question which gets cached, and then an impersonated user runs that question, then the impersonated user sees the same results as the previous user. These cached results may include data the impersonated user should not have access to. This vulnerability only impacts the Enterprise Edition of Metabase and not the Open Source Edition. Versions 1.53.2, 1.52.11, 1.51.14, and 1.50.36 contains a patch. Versions on the 1.49.X, 1.48.X, and 1.47.X branches are vulnerable but do not have a patch available, so users should upgrade to a major version with an available fix. Disabling question caching is a workaround for this issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-25T00:39:07.000000Z"}, {"uuid": "6c3f6f1d-4cfc-4165-8f88-943242b2075d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "Telegram/3Rneua8sJN4acwbkH9WJwY_A0S4fbpKs2cDcX7PKNKVaNXM", "content": "", "creation_timestamp": "2026-04-16T21:19:51.000000Z"}, {"uuid": "cbde60f7-9d88-48d1-868c-f655fffd12c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "seen", "source": "Telegram/yG0q3IpDztUHkWGWcBfSkFN1RblCcRFZP5pQldEwVfp_P8g", "content": "", "creation_timestamp": "2026-04-16T09:00:04.000000Z"}, {"uuid": "c1e56eca-becc-4795-8bc4-375663feb4bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "Telegram/GJVVgUMR-Am0a4XNXJB6qKKOPmE9Yn2h83GfAofeQ9CX9UE", "content": "", "creation_timestamp": "2026-04-13T17:54:41.000000Z"}, {"uuid": "f716c433-d0cf-4189-aa88-8f54b29d2d8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27423", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14624", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27423\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: Vim is an open source, command line text editor. Vim is distributed with the tar.vim plugin, that allows easy editing and viewing of (compressed or uncompressed) tar files. Starting with 9.1.0858, the tar.vim plugin uses the \":read\" ex command line to append below the cursor position, however the is not sanitized and is taken literally from the tar archive. This allows to execute shell commands via special crafted tar archives. Whether this really happens, depends on the shell being used ('shell' option, which is set using $SHELL). The issue has been fixed as of Vim patch v9.1.1164\n\ud83d\udccf Published: 2025-03-03T16:30:19.752Z\n\ud83d\udccf Modified: 2025-05-02T23:03:02.425Z\n\ud83d\udd17 References:\n1. https://github.com/vim/vim/security/advisories/GHSA-wfmf-8626-q3r3\n2. https://github.com/vim/vim/commit/129a8446d23cd9cb4445fcfea259cba5e0487d29\n3. https://github.com/vim/vim/commit/334a13bff78aa0ad206bc436885f63e3a0bab399", "creation_timestamp": "2025-05-02T23:17:18.000000Z"}, {"uuid": "7eee6a60-d6ef-47a0-82e7-a2338dea6bba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "published-proof-of-concept", "source": "Telegram/zA4naaWFx0e4U0xlJJSDHq9pFEUvhahsblvvUfTdqRzy1pg", "content": "", "creation_timestamp": "2026-04-01T11:00:11.000000Z"}, {"uuid": "d7824b5e-3855-4f60-9f01-4b6a9a619da0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "published-proof-of-concept", "source": "Telegram/v9uCn_dLujK0z6nWpoAPZrXvhfEaTfJKfYKQA8qCx-Erqh4", "content": "", "creation_timestamp": "2026-04-01T15:00:07.000000Z"}, {"uuid": "d47efc40-233a-4f85-adca-be4af38b5ea3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "exploited", "source": "https://t.me/itsec_news/5483", "content": "\u200b\u26a1\ufe0f\u0428\u0440\u0438\u0444\u0442\u044b-\u0442\u0440\u043e\u044f\u043d\u0446\u044b: \u0445\u0430\u043a\u0435\u0440\u044b \u0430\u0442\u0430\u043a\u0443\u044e\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e FreeType\n\n\ud83d\udcac Facebook* \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 FreeType, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0434\u043e 2.13 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430. \u0421\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0434\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\nFreeType \u2014 \u044d\u0442\u043e \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0430\u044f \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u0430\u044f \u0434\u043b\u044f \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433\u0430 \u0448\u0440\u0438\u0444\u0442\u043e\u0432. \u041e\u043d\u0430 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Linux, Android, \u0438\u0433\u0440\u043e\u0432\u044b\u0435 \u0434\u0432\u0438\u0436\u043a\u0438, \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u044b \u0438 \u0432\u0435\u0431-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b. \u0411\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u0440\u0430\u0431\u043e\u0442\u0443 \u0441 \u0444\u043e\u0440\u043c\u0430\u0442\u0430\u043c\u0438 TrueType (TTF), OpenType (OTF) \u0438 \u0434\u0440\u0443\u0433\u0438\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2025-27363 , \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u2014 8.1 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS v3. \u041e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 FreeType 2.13.0 \u043e\u0442 9 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2023 \u0433\u043e\u0434\u0430. \u041e\u0434\u043d\u0430\u043a\u043e Facebook \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e \u043d\u0435\u0439 \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u0447\u0435\u0440\u0430, \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u043d\u0443\u0432, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432\u043e \u0432\u0441\u0435\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 FreeType \u0434\u043e 2.13 \u0438 \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u041f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0438\u0437\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u0439 \u0432 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u0431\u0443\u0444\u0435\u0440\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u043f\u043e\u0434\u0433\u043b\u0438\u0444\u043e\u0432 \u0432 TrueType GX \u0438 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0448\u0440\u0438\u0444\u0442\u0430\u0445. \u041e\u0448\u0438\u0431\u043a\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043f\u0440\u0438\u0441\u0432\u0430\u0438\u0432\u0430\u043d\u0438\u044f \u0437\u043d\u0430\u043a\u043e\u0432\u043e\u0433\u043e \u043a\u043e\u0440\u043e\u0442\u043a\u043e\u0433\u043e \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u0437\u043d\u0430\u043a\u043e\u0432\u043e\u043c\u0443 \u0434\u043b\u0438\u043d\u043d\u043e\u043c\u0443 \u0438\u0437-\u0437\u0430 \u0447\u0435\u0433\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u0438\u0435 \u0441\u043b\u0438\u0448\u043a\u043e\u043c \u043c\u0430\u043b\u0435\u043d\u044c\u043a\u043e\u0433\u043e \u0431\u0443\u0444\u0435\u0440\u0430 \u0438, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435, \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438. \u041a\u0430\u043a \u0438\u0442\u043e\u0433, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0434\u043e \u0448\u0435\u0441\u0442\u0438 \u0434\u043b\u0438\u043d\u043d\u044b\u0445 \u0437\u043d\u0430\u043a\u043e\u0432\u044b\u0445 \u0447\u0438\u0441\u0435\u043b \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0431\u0443\u0444\u0435\u0440\u0430, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0412 Facebook \u043d\u0435 \u0443\u0442\u043e\u0447\u043d\u0438\u043b\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u043b\u0438 \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u0440\u043e\u0442\u0438\u0432 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0438\u043b\u0438 \u043e\u043d\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u0434\u0440\u0443\u0433\u0438\u0445 \u043c\u0435\u0441\u0442\u0430\u0445. \u041e\u0434\u043d\u0430\u043a\u043e \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u0448\u0438\u0440\u043e\u043a\u043e\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 FreeType, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.13.3.\n\n* \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Meta \u0438 \u0435\u0451 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u044b \u044d\u043a\u0441\u0442\u0440\u0435\u043c\u0438\u0441\u0442\u0441\u043a\u0438\u043c\u0438, \u0438\u0445 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0440\u0435\u0449\u0435\u043d\u0430 \u043d\u0430 \u0442\u0435\u0440\u0440\u0438\u0442\u043e\u0440\u0438\u0438 \u0420\u0424.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-03-13T06:01:45.000000Z"}, {"uuid": "4cad8b46-3c4e-41b6-9d16-7018b7f8bb03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27796", "type": "seen", "source": "Telegram/qf2fKY3-HsheiipsK3GkCM4CPdhWkatPX9-miBSGjDO4eKrY", "content": "", "creation_timestamp": "2025-03-08T04:34:56.000000Z"}, {"uuid": "18b739db-f891-44b3-9391-917caa4b488b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27795", "type": "seen", "source": "Telegram/NYLTm9MkO-28O4EJXTpSMpPZObttpomqvJCUH9w4rA9_uJCL", "content": "", "creation_timestamp": "2025-03-08T04:34:56.000000Z"}, {"uuid": "c4a9bcc1-44d2-4b05-9b91-522f1a745e8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27940", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/7898", "content": "Intel \u0432 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u0447\u0435\u0441\u0442\u0432\u0435 \u0441 Google \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043b\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0432\u043e\u0435\u0439 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 Trust Domain Extensions (TDX), \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u043e\u0448\u0438\u0431\u043e\u043a.\u00a0\n\nTDX - \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u0430\u044f \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044f \u0432\u044b\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u0439, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u0430\u044f \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u043d\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0438 \u043c\u043d\u043e\u0433\u043e\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0441\u0440\u0435\u0434\u0430\u0445, \u0434\u0430\u0436\u0435 \u043e\u0442 \u0432\u0437\u043b\u043e\u043c\u0430 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 \u0438\u043b\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0438\u043d\u0441\u0430\u0439\u0434\u0435\u0440\u043e\u0432.\n\nIntel TDX \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043c\u0430\u0448\u0438\u043d\u044b (\u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u043c\u044b\u0435 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c\u0438 \u0434\u043e\u043c\u0435\u043d\u0430\u043c\u0438 \u0438\u043b\u0438 TD), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043c\u0430\u0448\u0438\u043d\u044b, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u043d\u0430\u0434\u0435\u0436\u043d\u0443\u044e \u0437\u0430\u0449\u0438\u0442\u0443 \u043a\u0430\u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0442\u0430\u043a \u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\nGoogle Cloud Security \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043f\u044f\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u0447\u0430\u043b\u0430 \u0441 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Intel INT31, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0440\u0443\u0447\u043d\u043e\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u043a\u043e\u0434\u0430, \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0438 \u0433\u043e\u0442\u043e\u0432\u044b\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0418\u0418 \u0434\u043b\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043a\u043e\u0434\u0430 \u043c\u043e\u0434\u0443\u043b\u044f TDX 1.5, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0432\u044b\u0441\u043e\u043a\u043e\u0443\u0440\u043e\u0432\u043d\u0435\u0432\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 TDX.\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0431\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u043f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 35 \u043e\u0448\u0438\u0431\u043e\u043a, \u0441\u043b\u0430\u0431\u044b\u0445 \u043c\u0435\u0441\u0442 \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c  \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0443\u0440\u043e\u0432\u043d\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\nIntel \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0432\u0441\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0435 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0432\u00a0\u0432\u0435\u0440\u0441\u0438\u044e 1.5 TDX, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0430\u043a\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0434\u0432\u0435 \u043d\u043e\u0432\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438: Live Migration \u0438 Trust Domain Partitioning.\n\n\u0412\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-32007, CVE-2025-27940, CVE-2025-30513, CVE-2025-27572 \u0438 CVE-2025-32467 \u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f EoP \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, Google\u00a0\u043e\u0431\u0440\u0430\u0449\u0430\u0435\u0442 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 CVE-2025-30513, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u043d\u0430\u0434\u0451\u0436\u043d\u043e\u043c\u0443 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0443 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 TDX.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, CVE-2025-30513 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u0430 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u044b\u0432\u0430\u0442\u044c \u043c\u0438\u0433\u0440\u0438\u0440\u0443\u0435\u043c\u044b\u0439 TD \u0432 \u043e\u0442\u043b\u0430\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0439 TD \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u043c\u0438\u0433\u0440\u0430\u0446\u0438\u0438 \u043f\u0440\u0438 \u0438\u043c\u043f\u043e\u0440\u0442\u0435 \u0435\u0433\u043e \u043d\u0435\u0438\u0437\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f.\n\n\u041f\u043e\u0441\u043b\u0435 \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0432\u0441\u0435 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 TD \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0441 \u0445\u043e\u0441\u0442\u0430. \u041d\u0430 \u044d\u0442\u043e\u043c \u044d\u0442\u0430\u043f\u0435 \u0437\u043b\u043e\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u044b\u0439 \u0445\u043e\u0441\u0442 \u043c\u043e\u0436\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0434\u0440\u0443\u0433\u043e\u0439 TD \u0441 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c \u0438\u043b\u0438 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043c\u0438\u0433\u0440\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u043e\u0438\u0437\u043e\u0439\u0442\u0438 \u0432 \u043b\u044e\u0431\u043e\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0436\u0438\u0437\u043d\u0435\u043d\u043d\u043e\u0433\u043e \u0446\u0438\u043a\u043b\u0430 TD, \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0430 \u043f\u043e\u0441\u043b\u0435 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0442\u0435\u0441\u0442\u0430\u0446\u0438\u0438 TD, \u0447\u0442\u043e \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0440\u0443\u0435\u0442 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 \u0432 \u0435\u0433\u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0438.\n\n\u041f\u043e \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c \u0441\u0432\u043e\u0438\u0445 \u0438\u0437\u044b\u0441\u043a\u0430\u043d\u0438\u0439 Google \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u043f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043e\u0442\u0447\u0435\u0442, \u0430 Intel \u0443 \u0441\u0435\u0431\u044f \u0432 \u0431\u043b\u043e\u0433\u0435 \u043e\u0442\u0440\u0430\u0437\u0438\u043b\u0430 \u043e\u0431\u0449\u0435\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430.", "creation_timestamp": "2026-02-11T13:17:13.000000Z"}, {"uuid": "5a4c4ebc-791e-4fc5-a754-82b92b126cd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27572", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/7898", "content": "Intel \u0432 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u0447\u0435\u0441\u0442\u0432\u0435 \u0441 Google \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043b\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0432\u043e\u0435\u0439 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 Trust Domain Extensions (TDX), \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u043e\u0448\u0438\u0431\u043e\u043a.\u00a0\n\nTDX - \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u0430\u044f \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044f \u0432\u044b\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u0439, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u0430\u044f \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u043d\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0438 \u043c\u043d\u043e\u0433\u043e\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0441\u0440\u0435\u0434\u0430\u0445, \u0434\u0430\u0436\u0435 \u043e\u0442 \u0432\u0437\u043b\u043e\u043c\u0430 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 \u0438\u043b\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0438\u043d\u0441\u0430\u0439\u0434\u0435\u0440\u043e\u0432.\n\nIntel TDX \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043c\u0430\u0448\u0438\u043d\u044b (\u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u043c\u044b\u0435 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c\u0438 \u0434\u043e\u043c\u0435\u043d\u0430\u043c\u0438 \u0438\u043b\u0438 TD), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043c\u0430\u0448\u0438\u043d\u044b, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u043d\u0430\u0434\u0435\u0436\u043d\u0443\u044e \u0437\u0430\u0449\u0438\u0442\u0443 \u043a\u0430\u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0442\u0430\u043a \u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\nGoogle Cloud Security \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043f\u044f\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u0447\u0430\u043b\u0430 \u0441 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Intel INT31, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0440\u0443\u0447\u043d\u043e\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u043a\u043e\u0434\u0430, \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0438 \u0433\u043e\u0442\u043e\u0432\u044b\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0418\u0418 \u0434\u043b\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043a\u043e\u0434\u0430 \u043c\u043e\u0434\u0443\u043b\u044f TDX 1.5, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0432\u044b\u0441\u043e\u043a\u043e\u0443\u0440\u043e\u0432\u043d\u0435\u0432\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 TDX.\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0431\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u043f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 35 \u043e\u0448\u0438\u0431\u043e\u043a, \u0441\u043b\u0430\u0431\u044b\u0445 \u043c\u0435\u0441\u0442 \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c  \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0443\u0440\u043e\u0432\u043d\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\nIntel \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0432\u0441\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0435 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0432\u00a0\u0432\u0435\u0440\u0441\u0438\u044e 1.5 TDX, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0430\u043a\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0434\u0432\u0435 \u043d\u043e\u0432\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438: Live Migration \u0438 Trust Domain Partitioning.\n\n\u0412\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-32007, CVE-2025-27940, CVE-2025-30513, CVE-2025-27572 \u0438 CVE-2025-32467 \u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f EoP \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, Google\u00a0\u043e\u0431\u0440\u0430\u0449\u0430\u0435\u0442 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 CVE-2025-30513, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u043d\u0430\u0434\u0451\u0436\u043d\u043e\u043c\u0443 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0443 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 TDX.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, CVE-2025-30513 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u0430 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u044b\u0432\u0430\u0442\u044c \u043c\u0438\u0433\u0440\u0438\u0440\u0443\u0435\u043c\u044b\u0439 TD \u0432 \u043e\u0442\u043b\u0430\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0439 TD \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u043c\u0438\u0433\u0440\u0430\u0446\u0438\u0438 \u043f\u0440\u0438 \u0438\u043c\u043f\u043e\u0440\u0442\u0435 \u0435\u0433\u043e \u043d\u0435\u0438\u0437\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f.\n\n\u041f\u043e\u0441\u043b\u0435 \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0432\u0441\u0435 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 TD \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0441 \u0445\u043e\u0441\u0442\u0430. \u041d\u0430 \u044d\u0442\u043e\u043c \u044d\u0442\u0430\u043f\u0435 \u0437\u043b\u043e\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u044b\u0439 \u0445\u043e\u0441\u0442 \u043c\u043e\u0436\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0434\u0440\u0443\u0433\u043e\u0439 TD \u0441 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c \u0438\u043b\u0438 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043c\u0438\u0433\u0440\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u043e\u0438\u0437\u043e\u0439\u0442\u0438 \u0432 \u043b\u044e\u0431\u043e\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0436\u0438\u0437\u043d\u0435\u043d\u043d\u043e\u0433\u043e \u0446\u0438\u043a\u043b\u0430 TD, \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0430 \u043f\u043e\u0441\u043b\u0435 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0442\u0435\u0441\u0442\u0430\u0446\u0438\u0438 TD, \u0447\u0442\u043e \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0440\u0443\u0435\u0442 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 \u0432 \u0435\u0433\u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0438.\n\n\u041f\u043e \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c \u0441\u0432\u043e\u0438\u0445 \u0438\u0437\u044b\u0441\u043a\u0430\u043d\u0438\u0439 Google \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u043f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043e\u0442\u0447\u0435\u0442, \u0430 Intel \u0443 \u0441\u0435\u0431\u044f \u0432 \u0431\u043b\u043e\u0433\u0435 \u043e\u0442\u0440\u0430\u0437\u0438\u043b\u0430 \u043e\u0431\u0449\u0435\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430.", "creation_timestamp": "2026-02-11T13:17:13.000000Z"}, {"uuid": "51ec3d48-c8dc-4fa9-8aa7-b00687d9a08b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27598", "type": "seen", "source": "Telegram/W1c6rhM3x5JoMp7pyxjQtTZLuZUXjCImewW8QRUo9NcuEYrw", "content": "", "creation_timestamp": "2025-03-08T04:34:55.000000Z"}, {"uuid": "94c5923c-ecdd-449c-93d9-f22e7e8adee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/44128", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-27591\nURL\uff1ahttps://github.com/sanjay70023/AutoVAPT-AI-Based-Vulnerability-Scanner-Pentest-Tool\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-07-15T13:46:29.000000Z"}, {"uuid": "0107e889-a4e9-45af-8009-3bbbc5454018", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27085", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10937", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27085\n\ud83d\udd25 CVSS Score: 4.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: Multiple vulnerabilities exist in the web-based management interface of AOS-10 GW and AOS-8 Controller/Mobility Conductor. Successful exploitation of these vulnerabilities could allow an authenticated, remote attacker to download arbitrary files from the filesystem of an affected device.\n\ud83d\udccf Published: 2025-04-08T16:29:25.829Z\n\ud83d\udccf Modified: 2025-04-08T16:29:25.829Z\n\ud83d\udd17 References:\n1. https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04845en_us&docLocale=en_US", "creation_timestamp": "2025-04-08T16:46:23.000000Z"}, {"uuid": "007afd89-c2d2-4b51-9227-9f658cf486eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27532", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14009", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27532\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: A vulnerability in the \u201cBackup & Restore\u201d functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to access secret information via multiple crafted HTTP requests.\n\ud83d\udccf Published: 2025-04-30T11:49:02.687Z\n\ud83d\udccf Modified: 2025-04-30T11:49:02.687Z\n\ud83d\udd17 References:\n1. https://psirt.bosch.com/security-advisories/BOSCH-SA-640452.html", "creation_timestamp": "2025-04-30T12:12:42.000000Z"}, {"uuid": "7c3252ec-2f6b-4943-b8d7-180dc5a201c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27677", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6494", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27677\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Symbolic Links For Unprivileged File Interaction V-2022-002.\n\ud83d\udccf Published: 2025-03-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-05T05:25:45.214Z\n\ud83d\udd17 References:\n1. https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm", "creation_timestamp": "2025-03-05T05:33:08.000000Z"}, {"uuid": "1b930817-d7f6-4a1f-9d9c-71d8acd5c9a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27146", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5373", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27146\n\ud83d\udd25 CVSS Score: 2.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: matrix-appservice-irc is a Node.js IRC bridge for Matrix. The matrix-appservice-irc bridge up to version 3.0.3 contains a vulnerability which can lead to arbitrary IRC command execution as the puppeted user. The attacker can only inject commands executed as their own IRC user. The vulnerability has been patched in matrix-appservice-irc version 3.0.4.\n\ud83d\udccf Published: 2025-02-25T20:04:40.400Z\n\ud83d\udccf Modified: 2025-02-25T20:04:40.400Z\n\ud83d\udd17 References:\n1. https://github.com/matrix-org/matrix-appservice-irc/security/advisories/GHSA-5mvm-89c9-9gm5\n2. https://github.com/matrix-org/matrix-appservice-irc/commit/74f02c8e11f16ed1b355700092c1aa9c036a11bd", "creation_timestamp": "2025-02-25T20:22:59.000000Z"}, {"uuid": "4106b177-d148-40f6-98d0-02ed71c10c43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27666", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6505", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27666\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Insufficient Authorization Checks OVE-20230524-0010.\n\ud83d\udccf Published: 2025-03-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-05T05:25:35.929Z\n\ud83d\udd17 References:\n1. https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm", "creation_timestamp": "2025-03-05T05:33:22.000000Z"}, {"uuid": "3a7b3651-c626-42f8-841a-c816b6f759f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27501", "type": "seen", "source": "Telegram/1NUNqe8iHVZcstgI4Bq16oJWlsNmjorUT_egN58ZTv-9pU5s", "content": "", "creation_timestamp": "2025-03-06T02:17:23.000000Z"}, {"uuid": "ecf5eaf7-2b95-4937-8c33-f56016d9d4a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27624", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6713", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27624\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A cross-site request forgery (CSRF) vulnerability in Jenkins 2.499 and earlier, LTS 2.492.1 and earlier allows attackers to have users toggle their collapsed/expanded status of sidepanel widgets (e.g., Build Queue and Build Executor Status widgets).\n\ud83d\udccf Published: 2025-03-05T22:33:36.141Z\n\ud83d\udccf Modified: 2025-03-06T16:15:59.954Z\n\ud83d\udd17 References:\n1. https://www.jenkins.io/security/advisory/2025-03-05/#SECURITY-3498", "creation_timestamp": "2025-03-06T16:34:15.000000Z"}, {"uuid": "4e71d56c-db94-4b50-b302-0185bbd484e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27500", "type": "seen", "source": "Telegram/EME7AmmlemJIAsxowp-8JDy-sBeDJ56pHelrEfJutMhJTEON", "content": "", "creation_timestamp": "2025-03-06T02:17:23.000000Z"}, {"uuid": "8c60c7e5-b5bd-4780-9b10-ca2257a1c4d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27672", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6499", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27672\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows OAUTH Security Bypass OVE-20230524-0016.\n\ud83d\udccf Published: 2025-03-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-05T05:25:40.948Z\n\ud83d\udd17 References:\n1. https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm", "creation_timestamp": "2025-03-05T05:33:15.000000Z"}, {"uuid": "5bfbe1c7-77f3-4f37-a0cb-e41e35760ae7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27110", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5376", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27110\n\ud83d\udd25 CVSS Score: 7.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: Libmodsecurity is one component of the ModSecurity v3 project. The library codebase serves as an interface to ModSecurity Connectors taking in web traffic and applying traditional ModSecurity processing. A bug that exists only in Libmodsecurity3 version 3.0.13 means that, in 3.0.13, Libmodsecurity3 can't decode encoded HTML entities if they contains leading zeroes. Version 3.0.14 contains a fix. No known workarounds are available.\n\ud83d\udccf Published: 2025-02-25T20:00:44.211Z\n\ud83d\udccf Modified: 2025-02-25T20:00:44.211Z\n\ud83d\udd17 References:\n1. https://github.com/owasp-modsecurity/ModSecurity/security/advisories/GHSA-42w7-rmv5-4x2j\n2. https://github.com/owasp-modsecurity/ModSecurity/issues/3340", "creation_timestamp": "2025-02-25T20:23:05.000000Z"}, {"uuid": "cbf7c0c8-9cf4-41d1-9e3f-26478f158279", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27097", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4814", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27097\n\ud83d\udd25 CVSS Score: 5.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: GraphQL Mesh is a GraphQL Federation framework and gateway for both GraphQL Federation and non-GraphQL Federation subgraphs, non-GraphQL services, such as REST and gRPC, and also databases such as MongoDB, MySQL, and PostgreSQL. When a user transforms on the root level or single source with transforms, and the client sends the same query with different variables, the initial variables are used in all following requests until the cache evicts DocumentNode. If a token is sent via variables, the following requests will act like the same token is sent even if the following requests have different tokens. This can cause a short memory leak but it won't grow per each request but per different operation until the cache evicts DocumentNode by LRU mechanism.\n\ud83d\udccf Published: 2025-02-20T20:15:53.648Z\n\ud83d\udccf Modified: 2025-02-20T21:01:18.158Z\n\ud83d\udd17 References:\n1. https://github.com/ardatan/graphql-mesh/security/advisories/GHSA-rr4x-crhf-8886", "creation_timestamp": "2025-02-20T21:17:47.000000Z"}, {"uuid": "a4ee1b2d-3d2d-48ac-acbc-e089f157d640", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27100", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4840", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27100\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: lakeFS is an open-source tool that transforms your object storage into a Git-like repository. In affected versions an authenticated user can crash lakeFS by exhausting server memory.  This is an authenticated denial-of-service issue. This problem has been patched in version 1.50.0. Users on versions 1.49.1 and below are affected. Users are advised to upgrade. Users unable to upgrade should either set the environment variable `LAKEFS_BLOCKSTORE_S3_DISABLE_PRE_SIGNED_MULTIPART` to `true` or configure the `disable_pre_signed_multipart` key to true in their config yaml.\n\ud83d\udccf Published: 2025-02-21T00:03:01.411Z\n\ud83d\udccf Modified: 2025-02-21T00:03:01.411Z\n\ud83d\udd17 References:\n1. https://github.com/treeverse/lakeFS/security/advisories/GHSA-j7jw-28jm-whr6\n2. https://github.com/treeverse/lakeFS/commit/3a625752acdf3f8e137bec20451e71d0f9fa82f2", "creation_timestamp": "2025-02-21T00:17:47.000000Z"}, {"uuid": "65e870ed-e4e7-44b1-9be8-eec059188954", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27096", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4798", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27096\n\ud83d\udd25 CVSS Score: 9.4 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: WeGIA is a Web Manager for Institutions with a focus on Portuguese language. A SQL Injection vulnerability was discovered in the WeGIA application, personalizacao_upload.php endpoint. This vulnerability allow an authorized attacker to execute arbitrary SQL queries, allowing access to sensitive information. This issue has been addressed in version 3.2.14 and all users are advised to upgrade. There are no known workarounds for this vulnerability.\n\ud83d\udccf Published: 2025-02-20T19:07:43.031Z\n\ud83d\udccf Modified: 2025-02-20T19:07:43.031Z\n\ud83d\udd17 References:\n1. https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-j856-wh9m-9vpm", "creation_timestamp": "2025-02-20T19:49:27.000000Z"}, {"uuid": "6b4b7fd9-6731-4ff4-8316-4e6487e48942", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27091", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4804", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27091\n\ud83d\udd25 CVSS Score: 8.6 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: OpenH264 is a free license codec library which supports H.264 encoding and decoding. A vulnerability in the decoding functions of OpenH264 codec library could allow a remote, unauthenticated attacker to trigger a heap overflow. This vulnerability is due to a race condition between a Sequence Parameter Set (SPS) memory allocation and a subsequent non Instantaneous Decoder Refresh (non-IDR) Network Abstraction Layer (NAL) unit memory usage. An attacker could exploit this vulnerability by crafting a malicious bitstream and tricking a victim user into processing an arbitrary video containing the malicious bistream. An exploit could allow the attacker to cause an unexpected crash in the victim's user decoding client and, possibly, perform arbitrary commands on the victim's host by abusing the heap overflow. This vulnerability affects OpenH264 2.5.0 and earlier releases. Both Scalable Video Coding (SVC) mode and Advanced Video Coding (AVC) mode are affected by this vulnerability. OpenH264 software releases 2.6.0 and later contained the fix for this vulnerability. Users are advised to upgrade. There are no known workarounds for this vulnerability.\n\n### For more information\n\nIf you have any questions or comments about this advisory:\n* [Open an issue in cisco/openh264](https://github.com/cisco/openh264/issues)\n* Email Cisco Open Source Security ([oss-security@cisco.com](mailto:oss-security@cisco.com)) and Cisco PSIRT ([psirt@cisco.com](mailto:psirt@cisco.com))\n\n### Credits:\n\n* **Research:** Octavian Guzu and Andrew Calvano of Meta\n* **Fix ideation:** Philipp Hancke and Shyam Sadhwani of Meta\n* **Fix implementation:** Benzheng Zhang (@BenzhengZhang)\n* **Release engineering:** Benzheng Zhang (@BenzhengZhang)\n\ud83d\udccf Published: 2025-02-20T17:50:03.191Z\n\ud83d\udccf Modified: 2025-02-20T18:40:39.421Z\n\ud83d\udd17 References:\n1. https://github.com/cisco/openh264/security/advisories/GHSA-m99q-5j7x-7m9x\n2. https://github.com/cisco/openh264/releases/tag/v2.6.0", "creation_timestamp": "2025-02-20T19:49:35.000000Z"}, {"uuid": "921d35e1-c970-498a-8d4a-f9cd859a29a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27098", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4811", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27098\n\ud83d\udd25 CVSS Score: 5.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: GraphQL Mesh is a GraphQL Federation framework and gateway for both GraphQL Federation and non-GraphQL Federation subgraphs, non-GraphQL services, such as REST and gRPC, and also databases such as MongoDB, MySQL, and PostgreSQL. Missing check vulnerability in the static file handler allows any client to access the files in the server's file system. When `staticFiles` is set in the `serve` settings in the configuration file, the following handler doesn't check if `absolutePath` is still under the directory provided as `staticFiles`. Users have two options to fix vulnerability; 1. Update `@graphql-mesh/cli` to a version higher than `0.82.21`, and if you use `@graphql-mesh/http`, update it to a version higher than `0.3.18` 2. Remove `staticFiles` option from the configuration, and use other solutions to serve static files.\n\ud83d\udccf Published: 2025-02-20T20:13:01.242Z\n\ud83d\udccf Modified: 2025-02-20T21:04:05.183Z\n\ud83d\udd17 References:\n1. https://github.com/ardatan/graphql-mesh/security/advisories/GHSA-j2wh-wrv3-4x4g", "creation_timestamp": "2025-02-20T21:17:42.000000Z"}, {"uuid": "e6d3f8c6-fc37-4792-9b87-bf290c23e7a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27105", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5044", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27105\n\ud83d\udd25 CVSS Score: 2.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: vyper is a Pythonic Smart Contract Language for the EVM. Vyper handles AugAssign statements by first caching the target location to avoid double evaluation. However, in the case when target is an access to a DynArray and the rhs modifies the array, the cached target will evaluate first, and the bounds check will not be re-evaluated during the write portion of the statement. This issue has been addressed in version 0.4.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability.\n\ud83d\udccf Published: 2025-02-21T21:27:28.056Z\n\ud83d\udccf Modified: 2025-02-22T15:37:28.734Z\n\ud83d\udd17 References:\n1. https://github.com/vyperlang/vyper/security/advisories/GHSA-4w26-8p97-f4jp", "creation_timestamp": "2025-02-22T16:25:15.000000Z"}, {"uuid": "bc9645f3-7522-4b79-971f-32b371b07e02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27088", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4824", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27088\n\ud83d\udd25 CVSS Score: 8.4 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:H/SA:N)\n\ud83d\udd39 Description: oxyno-zeta/s3-proxy is an aws s3 proxy written in go. In affected versions a Reflected Cross-site Scripting (XSS) vulnerability enables attackers to create malicious URLs that, when visited, inject scripts into the web application. This can lead to session hijacking or phishing attacks on a trusted domain, posing a moderate risk to all users. It's possible to inject html elements, including scripts through the folder-list template. The affected template allows users to interact with the URL path provided by the `Request.URL.Path` variable, which is then rendered directly into the HTML without proper sanitization or escaping. This can be abused by attackers who craft a malicious URL containing injected HTML or JavaScript. When users visit such a URL, the malicious script will be executed in the user's context. This issue has been addressed in version 4.18.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability.\n\ud83d\udccf Published: 2025-02-20T22:33:50.646Z\n\ud83d\udccf Modified: 2025-02-20T22:33:50.646Z\n\ud83d\udd17 References:\n1. https://github.com/oxyno-zeta/s3-proxy/security/advisories/GHSA-pp9m-qf39-hxjc\n2. https://github.com/oxyno-zeta/s3-proxy/commit/c611c741ed4872ea3f46232be23bb830f96f9564\n3. https://github.com/oxyno-zeta/s3-proxy/blob/master/templates/folder-list.tpl#L19C21-L19C38", "creation_timestamp": "2025-02-20T23:16:57.000000Z"}, {"uuid": "36efd052-6896-478d-b864-fbae3c203cae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27352", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5151", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27352\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wumii team \u65e0\u89c5\u76f8\u5173\u6587\u7ae0\u63d2\u4ef6 allows Stored XSS. This issue affects \u65e0\u89c5\u76f8\u5173\u6587\u7ae0\u63d2\u4ef6: from n/a through 1.0.5.7.\n\ud83d\udccf Published: 2025-02-24T14:49:24.425Z\n\ud83d\udccf Modified: 2025-02-24T14:49:24.425Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/wumii-related-posts/vulnerability/wordpress-plugin-1-0-5-7-csrf-to-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-02-24T15:28:12.000000Z"}, {"uuid": "88ee1379-b3df-4e73-995d-0660f666e497", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27497", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6558", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27497\n\ud83d\udd25 CVSS Score: 8.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: OpenDJ is an LDAPv3 compliant directory service. OpenDJ prior to 4.9.3 contains a denial-of-service (DoS) vulnerability that causes the server to become unresponsive to all LDAP requests without crashing or restarting. This issue occurs when an alias loop exists in the LDAP database. If an ldapsearch request is executed with alias dereferencing set to \"always\" on this alias entry, the server stops responding to all future requests. Fortunately, the server can be restarted without data corruption. This vulnerability is fixed in 4.9.3.\n\ud83d\udccf Published: 2025-03-05T15:59:01.702Z\n\ud83d\udccf Modified: 2025-03-05T16:16:49.762Z\n\ud83d\udd17 References:\n1. https://github.com/OpenIdentityPlatform/OpenDJ/security/advisories/GHSA-93qr-h8pr-4593\n2. https://github.com/OpenIdentityPlatform/OpenDJ/commit/08aee4724608e4a32baa3c7d7499ec913a275aaf", "creation_timestamp": "2025-03-05T16:32:22.000000Z"}, {"uuid": "24993d42-4e67-4834-ba33-1debf2ff1a92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27104", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4998", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27104\n\ud83d\udd25 CVSS Score: 2.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: vyper is a Pythonic Smart Contract Language for the EVM. Multiple evaluation of a single expression is possible in the iterator target of a for loop. While the iterator expression cannot produce multiple writes, it can consume side effects produced in the loop body (e.g. read a storage variable updated in the loop body) and thus lead to unexpected program behavior. Specifically, reads in iterators which contain an ifexp (e.g. `for s: uint256 in ([read(), read()] if True else [])`) may interleave reads with writes in the loop body. Vyper for loops allow two kinds of iterator targets, namely the `range()` builtin and an iterable type, like SArray and DArray. During codegen, iterable lists are required to not produce any side-effects (in the following code, `range_scope` forces `iter_list` to be parsed in a constant context, which is checked against `is_constant`). However, this does not prevent the iterator from consuming side effects provided by the body of the loop. For SArrays on the other hand, `iter_list` is instantiated in the body of a `repeat` ir, so it can be evaluated several times. This issue is being addressed and is expected to be available in version 0.4.1. Users are advised to upgrade as soon as the patched release is available. There are no known workarounds for this vulnerability.\n\ud83d\udccf Published: 2025-02-21T21:32:24.621Z\n\ud83d\udccf Modified: 2025-02-21T21:32:24.621Z\n\ud83d\udd17 References:\n1. https://github.com/vyperlang/vyper/security/advisories/GHSA-h33q-mhmp-8p67\n2. https://github.com/vyperlang/vyper/pull/4488", "creation_timestamp": "2025-02-21T22:18:56.000000Z"}, {"uuid": "7bacb81a-778e-4411-8a57-ed9c5102105f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27348", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5154", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27348\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Daniel WP Social SEO Booster \u2013 Knowledge Graph Social Signals SEO allows Stored XSS. This issue affects WP Social SEO Booster \u2013 Knowledge Graph Social Signals SEO: from n/a through 1.2.0.\n\ud83d\udccf Published: 2025-02-24T14:49:22.178Z\n\ud83d\udccf Modified: 2025-02-24T14:49:22.178Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/wp-social-seo-booster/vulnerability/wordpress-wp-social-seo-booster-plugin-1-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-02-24T15:28:15.000000Z"}, {"uuid": "153ebc05-ced2-4e60-9bb3-0810d2347a35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27349", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5153", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27349\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nurelm Get Posts allows Stored XSS. This issue affects Get Posts: from n/a through 0.6.\n\ud83d\udccf Published: 2025-02-24T14:49:22.943Z\n\ud83d\udccf Modified: 2025-02-24T14:49:22.943Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/nurelm-get-posts/vulnerability/wordpress-get-posts-plugin-0-6-stored-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-02-24T15:28:14.000000Z"}, {"uuid": "274a1def-cde6-4f30-afc6-86fbf0fc023e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27351", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5152", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27351\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ExpertBusinessSearch Local Search SEO Contact Page allows Stored XSS. This issue affects Local Search SEO Contact Page: from n/a through 4.0.1.\n\ud83d\udccf Published: 2025-02-24T14:49:23.663Z\n\ud83d\udccf Modified: 2025-02-24T14:49:23.663Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/local-search-seo-contact-page/vulnerability/wordpress-local-search-seo-contact-page-plugin-4-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-02-24T15:28:13.000000Z"}, {"uuid": "967ddebd-5bd8-45fb-9a0b-728cf02f1ca9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27112", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5207", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27112\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Navidrome is an open source web-based music collection server and streamer. Starting in version 0.52.0 and prior to version 0.54.5, in certain Subsonic API endpoints, a flaw in the authentication check process allows an attacker to specify any arbitrary username that does not exist on the system, along with a salted hash of an empty password. Under these conditions, Navidrome treats the request as authenticated, granting access to various Subsonic endpoints without requiring valid credentials. An attacker can use any non-existent username to bypass the authentication system and gain access to various read-only data in Navidrome, such as user playlists. However, any attempt to modify data fails with a \"permission denied\" error due to insufficient permissions, limiting the impact to unauthorized viewing of information. Version 0.54.5 contains a patch for this issue.\n\ud83d\udccf Published: 2025-02-24T18:37:14.221Z\n\ud83d\udccf Modified: 2025-02-24T19:00:44.866Z\n\ud83d\udd17 References:\n1. https://github.com/navidrome/navidrome/security/advisories/GHSA-c3p4-vm8f-386p\n2. https://github.com/navidrome/navidrome/commit/287079a9e409fb6b9708ca384d7daa7b5185c1a0", "creation_timestamp": "2025-02-24T19:22:21.000000Z"}, {"uuid": "5deed7bf-a442-41f2-82b1-924690559bac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27353", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5150", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27353\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) vulnerability in Bob Namaste! LMS allows Cross Site Request Forgery. This issue affects Namaste! LMS: from n/a through 2.6.5.\n\ud83d\udccf Published: 2025-02-24T14:49:25.170Z\n\ud83d\udccf Modified: 2025-02-24T14:49:25.170Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/namaste-lms/vulnerability/wordpress-namaste-lms-plugin-2-6-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve", "creation_timestamp": "2025-02-24T15:28:08.000000Z"}, {"uuid": "afc7d730-9158-41d3-b142-6d0dd2c6e069", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27012", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5038", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27012\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) vulnerability in a1post A1POST.BG Shipping for Woo allows Privilege Escalation. This issue affects A1POST.BG Shipping for Woo: from n/a through 1.5.1.\n\ud83d\udccf Published: 2025-02-22T15:52:12.071Z\n\ud83d\udccf Modified: 2025-02-22T15:52:12.071Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/a1post-bg-shipping-for-woocommerce/vulnerability/wordpress-a1post-bg-shipping-for-woo-plugin-1-5-1-csrf-to-privilege-escalation-vulnerability?_s_id=cve", "creation_timestamp": "2025-02-22T16:25:09.000000Z"}, {"uuid": "66fc7881-db6e-41ae-afcc-1e239fd12e83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27106", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5043", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27106\n\ud83d\udd25 CVSS Score: 7.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: binance-trading-bot is an automated Binance trading bot with trailing buy/sell strategy. Authenticated users of binance-trading-bot can achieve Remote Code Execution on the host system due to a command injection vulnerability in the `/restore` endpoint. The restore endpoint of binance-trading-bot is vulnerable to command injection via the `/restore` endpoint. The name of the uploaded file is passed to shell.exec without sanitization other than path normalization, resulting in Remote Code Execution. This may allow any authorized user to execute code in the context of the host machine. This issue has been addressed in version 0.0.100 and all users are advised to upgrade. There are no known workarounds for this vulnerability.\n\ud83d\udccf Published: 2025-02-21T21:18:18.284Z\n\ud83d\udccf Modified: 2025-02-22T15:40:06.071Z\n\ud83d\udd17 References:\n1. https://github.com/chrisleekr/binance-trading-bot/security/advisories/GHSA-wq6j-4388-4gg5\n2. https://github.com/chrisleekr/binance-trading-bot/commit/99d464cf8ef858d441189993054ec5f5f86e6213\n3. https://github.com/chrisleekr/binance-trading-bot/blob/dd8e1a91b872a48aec47bbe1280c1c6ea96784d9/app/frontend/webserver/handlers/restore-post.js#L14", "creation_timestamp": "2025-02-22T16:25:15.000000Z"}, {"uuid": "b5a2c706-27ab-4e11-b8e3-772c66f2102e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27297", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5158", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27297\n\ud83d\udd25 CVSS Score: 7.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in guelben Bravo Search & Replace allows Blind SQL Injection. This issue affects Bravo Search & Replace: from n/a through 1.0.\n\ud83d\udccf Published: 2025-02-24T14:48:51.363Z\n\ud83d\udccf Modified: 2025-02-24T16:14:26.056Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/bravo-search-and-replace/vulnerability/wordpress-bravo-search-replace-plugin-1-0-sql-injection-vulnerability?_s_id=cve", "creation_timestamp": "2025-02-24T16:24:40.000000Z"}, {"uuid": "78f2f996-9363-4242-ba70-99359ba90f20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27412", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6557", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27412\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: REDAXO is a PHP-based CMS. In Redaxo from 5.0.0 through 5.18.2, the rex-api-result parameter is vulnerable to Reflected cross-site scripting (XSS) on the page of AddOns. This vulnerability is fixed in 5.18.3.\n\ud83d\udccf Published: 2025-03-05T15:53:08.813Z\n\ud83d\udccf Modified: 2025-03-05T16:18:31.199Z\n\ud83d\udd17 References:\n1. https://github.com/redaxo/redaxo/security/advisories/GHSA-8366-xmgf-334f", "creation_timestamp": "2025-03-05T16:32:21.000000Z"}, {"uuid": "0a3b2c58-bbec-4417-9009-5bf91ff7f41a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27307", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5190", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27307\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in oooorgle Quotes llama allows Reflected XSS. This issue affects Quotes llama: from n/a through 3.0.1.\n\ud83d\udccf Published: 2025-02-24T14:48:57.101Z\n\ud83d\udccf Modified: 2025-02-24T16:56:34.009Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/quotes-llama/vulnerability/wordpress-quotes-llama-plugin-3-0-1-stored-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-02-24T17:21:57.000000Z"}, {"uuid": "a8ebe618-56df-4d1d-ba7f-ac1936240110", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27355", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5149", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27355\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) vulnerability in Nicolas GRILLET Woocommerce \u2013 Loi Hamon allows Stored XSS. This issue affects Woocommerce \u2013 Loi Hamon: from n/a through 1.1.0.\n\ud83d\udccf Published: 2025-02-24T14:49:25.894Z\n\ud83d\udccf Modified: 2025-02-24T14:49:25.894Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/loi-hamon/vulnerability/wordpress-woocommerce-loi-hamon-plugin-1-1-0-csrf-to-stored-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-02-24T15:28:07.000000Z"}, {"uuid": "f8622ca1-5363-493f-87c3-7b16884dcf99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27356", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5148", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27356\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L)\n\ud83d\udd39 Description: Missing Authorization vulnerability in Hardik Sticky Header On Scroll allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Sticky Header On Scroll: from n/a through 1.0.\n\ud83d\udccf Published: 2025-02-24T14:49:26.583Z\n\ud83d\udccf Modified: 2025-02-24T14:49:26.583Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/sticky-header-on-scroll/vulnerability/wordpress-sticky-header-on-scroll-plugin-1-0-broken-access-control-vulnerability?_s_id=cve", "creation_timestamp": "2025-02-24T15:28:06.000000Z"}, {"uuid": "402b4500-f290-40af-b531-5e12bdf35bf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27357", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5147", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27357\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) vulnerability in Musa AVCI \u00d6nceki Yaz\u0131 Link allows Cross Site Request Forgery. This issue affects \u00d6nceki Yaz\u0131 Link: from n/a through 1.3.\n\ud83d\udccf Published: 2025-02-24T14:49:27.292Z\n\ud83d\udccf Modified: 2025-02-24T14:49:27.292Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/onceki-yazi-linki/vulnerability/wordpress-oenceki-yazi-link-plugin-1-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve", "creation_timestamp": "2025-02-24T15:28:05.000000Z"}, {"uuid": "3e74fa77-7b0d-4b18-9696-f8b90a5707ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27364", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5206", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27364\n\ud83d\udd25 CVSS Score: 10 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: In MITRE Caldera through 4.2.0 and 5.0.0 before 35bc06e, a Remote Code Execution (RCE) vulnerability was found in the dynamic agent (implant) compilation functionality of the server. This allows remote attackers to execute arbitrary code on the server that Caldera is running on via a crafted web request to the Caldera server API used for compiling and downloading of Caldera's Sandcat or Manx agent (implants). This web request can use the gcc -extldflags linker flag with sub-commands.\n\ud83d\udccf Published: 2025-02-24T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-24T19:08:07.220Z\n\ud83d\udd17 References:\n1. https://github.com/mitre/caldera/releases\n2. https://github.com/mitre/caldera/security\n3. https://medium.com/@mitrecaldera/mitre-caldera-security-advisory-remote-code-execution-cve-2025-27364-5f679e2e2a0e\n4. https://github.com/mitre/caldera/commit/35bc06e42e19fe7efbc008999b9f993b1b7109c0\n5. https://github.com/mitre/caldera/pull/3131/commits/61de40f92a595bed462372a5e676c2e5a32d1050\n6. https://github.com/mitre/caldera/pull/3129", "creation_timestamp": "2025-02-24T19:22:20.000000Z"}, {"uuid": "f1e5e480-0720-4ed5-bd60-0f95b2ed932b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27342", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5157", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27342\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) vulnerability in josesan WooCommerce Recargo de Equivalencia allows Cross Site Request Forgery. This issue affects WooCommerce Recargo de Equivalencia: from n/a through 1.6.24.\n\ud83d\udccf Published: 2025-02-24T14:49:19.981Z\n\ud83d\udccf Modified: 2025-02-24T14:49:19.981Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/woo-recargo-de-equivalencia/vulnerability/wordpress-woocommerce-recargo-de-equivalencia-plugin-1-6-24-cross-site-request-forgery-csrf-vulnerability?_s_id=cve", "creation_timestamp": "2025-02-24T15:28:21.000000Z"}, {"uuid": "deaf71a4-bcd3-4860-8fed-c8006147bec4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27344", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5156", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27344\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) vulnerability in filipstepanov Phee's LinkPreview allows Cross Site Request Forgery. This issue affects Phee's LinkPreview: from n/a through 1.6.7.\n\ud83d\udccf Published: 2025-02-24T14:49:20.742Z\n\ud83d\udccf Modified: 2025-02-24T14:49:20.742Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/linkpreview/vulnerability/wordpress-phee-s-linkpreview-plugin-1-6-7-cross-site-request-forgery-csrf-vulnerability?_s_id=cve", "creation_timestamp": "2025-02-24T15:28:20.000000Z"}, {"uuid": "233a0726-0692-4b2b-8cba-ff7a776923f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27347", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5155", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27347\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in techmix Direct Checkout Button for WooCommerce allows Stored XSS. This issue affects Direct Checkout Button for WooCommerce: from n/a through 1.0.\n\ud83d\udccf Published: 2025-02-24T14:49:21.465Z\n\ud83d\udccf Modified: 2025-02-24T14:49:21.465Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/woo-direct-checkout-button/vulnerability/wordpress-direct-checkout-button-for-woocommerce-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-02-24T15:28:16.000000Z"}, {"uuid": "dba7b932-ead6-4a1f-9026-42c4949116b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27315", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5164", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27315\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) vulnerability in wptom All-In-One Cufon allows Cross Site Request Forgery. This issue affects All-In-One Cufon: from n/a through 1.3.0.\n\ud83d\udccf Published: 2025-02-24T14:48:59.366Z\n\ud83d\udccf Modified: 2025-02-24T15:52:38.765Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/all-in-one-cufon/vulnerability/wordpress-all-in-one-cufon-plugin-1-3-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve", "creation_timestamp": "2025-02-24T16:24:48.000000Z"}, {"uuid": "61869fc5-9282-49e1-8c31-6433331002dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27301", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5163", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27301\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Deserialization of Untrusted Data vulnerability in Nazmul Hasan Robin NHR Options Table Manager allows Object Injection. This issue affects NHR Options Table Manager: from n/a through 1.1.2.\n\ud83d\udccf Published: 2025-02-24T14:48:53.529Z\n\ud83d\udccf Modified: 2025-02-24T15:55:32.091Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/nhrrob-options-table-manager/vulnerability/wordpress-nhr-options-table-manager-plugin-1-1-2-deserialization-of-untrusted-data-vulnerability?_s_id=cve", "creation_timestamp": "2025-02-24T16:24:47.000000Z"}, {"uuid": "cd101352-6aa6-4e98-9fe3-462cb5a65f1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27300", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5162", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27300\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Deserialization of Untrusted Data vulnerability in giuliopanda ADFO allows Object Injection. This issue affects ADFO: from n/a through 1.9.1.\n\ud83d\udccf Published: 2025-02-24T14:48:52.771Z\n\ud83d\udccf Modified: 2025-02-24T15:56:16.371Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/admin-form/vulnerability/wordpress-adfo-plugin-1-9-1-deserialization-of-untrusted-data-vulnerability?_s_id=cve", "creation_timestamp": "2025-02-24T16:24:44.000000Z"}, {"uuid": "382c57d7-93f9-4d41-a832-7733e8604ed9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27341", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5168", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27341\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in afzal_du Reactive Mortgage Calculator allows Stored XSS. This issue affects Reactive Mortgage Calculator: from n/a through 1.1.\n\ud83d\udccf Published: 2025-02-24T14:49:19.252Z\n\ud83d\udccf Modified: 2025-02-24T15:46:13.235Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/reactive-mortgage-calculator/vulnerability/wordpress-reactive-mortgage-calculator-plugin-1-1-stored-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-02-24T16:24:54.000000Z"}, {"uuid": "69c6be07-2a81-4528-ba49-e3bc027d1e1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27321", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5167", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27321\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) vulnerability in Blighty Blightly Explorer allows Stored XSS. This issue affects Blightly Explorer: from n/a through 2.3.0.\n\ud83d\udccf Published: 2025-02-24T14:49:03.293Z\n\ud83d\udccf Modified: 2025-02-24T15:47:52.291Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/blighty-explorer/vulnerability/wordpress-blightly-explorer-plugin-2-3-0-csrf-to-stored-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-02-24T16:24:50.000000Z"}, {"uuid": "287d2784-0676-4fa3-b9da-a6aec929f129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27318", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5166", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27318\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) vulnerability in ixiter Simple Google Sitemap allows Cross Site Request Forgery. This issue affects Simple Google Sitemap: from n/a through 1.6.\n\ud83d\udccf Published: 2025-02-24T14:49:01.752Z\n\ud83d\udccf Modified: 2025-02-24T15:48:54.060Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/simple-google-sitemap/vulnerability/wordpress-simple-google-sitemap-plugin-1-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve", "creation_timestamp": "2025-02-24T16:24:50.000000Z"}, {"uuid": "72592689-e897-449e-be56-25f59784a3a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27316", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5165", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27316\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) vulnerability in hosting.io JPG, PNG Compression and Optimization allows Cross Site Request Forgery. This issue affects JPG, PNG Compression and Optimization: from n/a through 1.7.35.\n\ud83d\udccf Published: 2025-02-24T14:49:00.274Z\n\ud83d\udccf Modified: 2025-02-24T15:50:05.569Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/wp-image-compression/vulnerability/wordpress-jpg-png-compression-and-optimization-plugin-1-7-35-cross-site-request-forgery-csrf-vulnerability?_s_id=cve", "creation_timestamp": "2025-02-24T16:24:49.000000Z"}, {"uuid": "58a2e2c4-2e12-47e5-b352-239c885de435", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27109", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5179", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27109\n\ud83d\udd25 CVSS Score: 7.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: solid-js is a declarative, efficient, and flexible JavaScript library for building user interfaces. In affected versions Inserts/JSX expressions inside illegal inlined JSX fragments lacked escaping, allowing user input to be rendered as HTML when put directly inside JSX fragments. This issue has been addressed in version 1.9.4 and all users are advised to upgrade. There are no known workarounds for this vulnerability.\n\ud83d\udccf Published: 2025-02-21T21:12:58.218Z\n\ud83d\udccf Modified: 2025-02-24T17:05:00.409Z\n\ud83d\udd17 References:\n1. https://github.com/solidjs/solid/security/advisories/GHSA-3qxh-p7jc-5xh6\n2. https://github.com/solidjs/solid/commit/b93956f28ed75469af6976a98728e313d0edd236", "creation_timestamp": "2025-02-24T17:21:42.000000Z"}, {"uuid": "11f8b258-c889-4a13-ae8c-6ceabda23e43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27304", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5187", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27304\n\ud83d\udd25 CVSS Score: 5.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themelogger Contact Form 7 Star Rating with font Awesome allows Stored XSS. This issue affects Contact Form 7 Star Rating with font Awesome: from n/a through 1.3.\n\ud83d\udccf Published: 2025-02-24T14:48:54.974Z\n\ud83d\udccf Modified: 2025-02-24T16:58:01.148Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/contact-form-7-star-rating-with-font-awersome/vulnerability/wordpress-contact-form-7-star-rating-with-font-awesome-plugin-1-3-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-02-24T17:21:54.000000Z"}, {"uuid": "5960e607-ffef-4b37-ae5c-64e90e749dde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27135", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5362", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27135\n\ud83d\udd25 CVSS Score: 8.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P)\n\ud83d\udd39 Description: RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. Versions 0.15.1 and prior are vulnerable to SQL injection. The ExeSQL component extracts the SQL statement from the input and sends it directly to the database query. As of time of publication, no patched version is available.\n\ud83d\udccf Published: 2025-02-25T18:16:58.667Z\n\ud83d\udccf Modified: 2025-02-25T18:57:33.672Z\n\ud83d\udd17 References:\n1. https://github.com/infiniflow/ragflow/security/advisories/GHSA-3gqj-66qm-25jq\n2. https://github.com/infiniflow/ragflow/blob/v0.15.1/agent/component/exesql.py\n3. https://swizzky.notion.site/ragflow-exesql-150ca6df7c03806989cefde915cf8e42?pvs=4", "creation_timestamp": "2025-02-25T19:23:55.000000Z"}, {"uuid": "c30953d9-bd0b-4543-89ae-4fa0947672cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27277", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5183", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27277\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) vulnerability in tiefpunkt Add Linked Images To Gallery allows Cross Site Request Forgery. This issue affects Add Linked Images To Gallery: from n/a through 1.4.\n\ud83d\udccf Published: 2025-02-24T14:48:47.667Z\n\ud83d\udccf Modified: 2025-02-24T17:01:43.297Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/add-linked-images-to-gallery-v01/vulnerability/wordpress-add-linked-images-to-gallery-plugin-1-4-csrf-to-stored-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-02-24T17:21:48.000000Z"}, {"uuid": "3728493d-fa82-45c1-b70d-0d8a6ae78625", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27303", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5185", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27303\n\ud83d\udd25 CVSS Score: 5.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themelogger Contact Form 7 Star Rating allows Stored XSS. This issue affects Contact Form 7 Star Rating: from n/a through 1.10.\n\ud83d\udccf Published: 2025-02-24T14:48:54.283Z\n\ud83d\udccf Modified: 2025-02-24T16:58:29.987Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/contact-form-7-star-rating/vulnerability/wordpress-contact-form-7-star-rating-plugin-1-10-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-02-24T17:21:50.000000Z"}, {"uuid": "5ddfbc2e-edff-439c-a7be-b05b0ea0fd35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27133", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5208", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27133\n\ud83d\udd25 CVSS Score: 9.4 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: WeGIA is a Web manager for charitable institutions. A SQL Injection vulnerability was discovered in the WeGIA application prior to version 3.2.15 at the `adicionar_tipo_exame.php` endpoint. This vulnerability allows an authorized attacker to execute arbitrary SQL queries, allowing access to sensitive information. Version 3.2.15 contains a patch for the issue.\n\ud83d\udccf Published: 2025-02-24T18:43:16.403Z\n\ud83d\udccf Modified: 2025-02-24T18:58:30.181Z\n\ud83d\udd17 References:\n1. https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-xj79-w799-qjcp\n2. https://github.com/LabRedesCefetRJ/WeGIA/commit/619ead748e18e685459c6dc3c226e621b9ff5403", "creation_timestamp": "2025-02-24T19:22:25.000000Z"}, {"uuid": "7877a838-d56f-461f-9489-a2e51732354f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27137", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5227", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27137\n\ud83d\udd25 CVSS Score: 4.4 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: Dependency-Track is a component analysis platform that allows organizations to identify and reduce risk in the software supply chain. Dependency-Track allows users with the `SYSTEM_CONFIGURATION` permission to customize notification templates. Templates are evaluated using the Pebble template engine. Pebble supports an `include` tag, which allows template authors to include the content of arbitrary files upon evaluation. Prior to version 4.12.6, users of Dependency-Track with the `SYSTEM_CONFIGURATION` permission can abuse the `include` tag by crafting notification templates that `include` sensitive local files, such as `/etc/passwd` or `/proc/1/environ`. By configuring such a template for a notification rule (aka \"Alert\"), and having it send notifications to a destination controlled by the actor, sensitive information may be leaked. The issue has been fixed in Dependency-Track 4.12.6. In fixed versions, the `include` tag can no longer be used. Usage of the tag will cause template evaluation to fail. As a workaround, avoid assigning the `SYSTEM_CONFIGURATION` permission to untrusted users. The `SYSTEM_CONFIGURATION` permission per default is only granted to members of the `Administrators` team. Assigning this permission to non-administrative users or teams is a security risk in itself, and highly discouraged.\n\ud83d\udccf Published: 2025-02-24T20:59:50.974Z\n\ud83d\udccf Modified: 2025-02-24T20:59:50.974Z\n\ud83d\udd17 References:\n1. https://github.com/DependencyTrack/dependency-track/security/advisories/GHSA-9582-88hr-54w3\n2. https://github.com/JLLeitschuh/security-research/security/advisories/GHSA-p75g-cxfj-7wrx\n3. https://github.com/PebbleTemplates/pebble/issues/680\n4. https://github.com/DependencyTrack/dependency-track/pull/4684\n5. https://github.com/DependencyTrack/dependency-track/pull/4685\n6. https://pebbletemplates.io/wiki/tag/include", "creation_timestamp": "2025-02-24T21:25:44.000000Z"}, {"uuid": "88194517-ce29-492a-b4ae-c75c8c961e99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27140", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5231", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27140\n\ud83d\udd25 CVSS Score: 10 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: WeGIA is a Web manager for charitable institutions. An OS Command Injection vulnerability was discovered in versions prior to 3.2.15 of the WeGIA application, `importar_dump.php` endpoint. This vulnerability could allow an attacker to execute arbitrary code remotely. The command is basically a command to move a temporary file, so a webshell upload is also possible. Version 3.2.15 contains a patch for the issue.\n\ud83d\udccf Published: 2025-02-24T21:21:24.013Z\n\ud83d\udccf Modified: 2025-02-24T21:21:24.013Z\n\ud83d\udd17 References:\n1. https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-xw6w-x28r-2p5c\n2. https://github.com/LabRedesCefetRJ/WeGIA/commit/7d0df8c9a0b8b7d6862bbc23dc729d73e39672a1", "creation_timestamp": "2025-02-24T22:22:23.000000Z"}, {"uuid": "a7c3f3ef-41d6-4fe2-ba52-23109bb076e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27141", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5230", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27141\n\ud83d\udd25 CVSS Score: 4.8 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N)\n\ud83d\udd39 Description: Metabase Enterprise Edition is the enterprise version of Metabase business intelligence and data analytics software. Starting in version 1.47.0 and prior to versions 1.50.36, 1.51.14, 1.52.11, and 1.53.2 of Metabase Enterprise Edition, users with impersonation permissions may be able to see results of cached questions, even if their permissions don\u2019t allow them to see the data. If some user runs a question which gets cached, and then an impersonated user runs that question, then the impersonated user sees the same results as the previous user. These cached results may include data the impersonated user should not have access to. This vulnerability only impacts the Enterprise Edition of Metabase and not the Open Source Edition. Versions 1.53.2, 1.52.11, 1.51.14, and 1.50.36 contains a patch. Versions on the 1.49.X, 1.48.X, and 1.47.X branches are vulnerable but do not have a patch available, so users should upgrade to a major version with an available fix. Disabling question caching is a workaround for this issue.\n\ud83d\udccf Published: 2025-02-24T22:05:14.188Z\n\ud83d\udccf Modified: 2025-02-24T22:05:14.188Z\n\ud83d\udd17 References:\n1. https://github.com/metabase/metabase/security/advisories/GHSA-6cc4-h534-xh5p\n2. https://www.metabase.com/docs/latest/configuring-metabase/caching\n3. https://www.metabase.com/docs/latest/permissions/impersonation", "creation_timestamp": "2025-02-24T22:22:23.000000Z"}, {"uuid": "92eaeab5-09e1-451c-8fc5-74302bcc83d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7296", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27591\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A privilege escalation vulnerability existed in the Below service prior to v0.9.0 due to the creation of a world-writable directory at /var/log/below. This could have allowed local unprivileged users to escalate to root privileges through symlink attacks that manipulate files such as /etc/shadow.\n\ud83d\udccf Published: 2025-03-11T18:29:21.569Z\n\ud83d\udccf Modified: 2025-03-12T13:08:26.252Z\n\ud83d\udd17 References:\n1. https://www.facebook.com/security/advisories/cve-2025-27591\n2. https://github.com/facebookincubator/below/commit/da9382e6e3e332fd2c3195e22f34977f83f0f1f3", "creation_timestamp": "2025-03-12T13:41:39.000000Z"}, {"uuid": "0079d907-0f26-4e17-9528-f0ab84cccf49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27139", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5370", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27139\n\ud83d\udd25 CVSS Score: 6.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N)\n\ud83d\udd39 Description: Combodo iTop is a web based IT service management tool. Versions prior to 2.7.12, 3.1.2, and 3.2.0 are vulnerable to cross-site scripting when the preferences page is opened. Versions 2.7.12, 3.1.2, and 3.2.0 fix the issue.\n\ud83d\udccf Published: 2025-02-25T19:52:15.589Z\n\ud83d\udccf Modified: 2025-02-25T20:07:39.635Z\n\ud83d\udd17 References:\n1. https://github.com/Combodo/iTop/security/advisories/GHSA-c6mg-9537-c8cf", "creation_timestamp": "2025-02-25T20:22:57.000000Z"}, {"uuid": "c1559f5d-2f76-4325-80d3-d82a62faeff8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27142", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5375", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27142\n\ud83d\udd25 CVSS Score: 6.3 (cvssV4_0, Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U)\n\ud83d\udd39 Description: LocalSend is a free, open-source app that allows users to securely share files and messages with nearby devices over their local network without needing an internet connection. Prior to version 1.17.0, due to the missing sanitization of the path in the `POST /api/localsend/v2/prepare-upload` and the `POST /api/localsend/v2/upload` endpoint, a malicious file transfer request can write files to the arbitrary location on the system, resulting in the remote command execution. A malicious file transfer request sent by nearby devices can write files into an arbitrary directory. This usually allows command execution via the startup folder on Windows or Bash-related files on Linux. If the user enables the `Quick Save` feature, it will silently write files without explicit user interaction. Version 1.17.0 fixes this issue.\n\ud83d\udccf Published: 2025-02-25T20:03:23.204Z\n\ud83d\udccf Modified: 2025-02-25T20:03:23.204Z\n\ud83d\udd17 References:\n1. https://github.com/localsend/localsend/security/advisories/GHSA-f7jp-p6j4-3522\n2. https://github.com/localsend/localsend/commit/e8635204ec782ded45bc7d698deb60f3c4105687", "creation_timestamp": "2025-02-25T20:23:04.000000Z"}, {"uuid": "1627c940-a631-49e8-b376-e5301ae9bb08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27583", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6121", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27583\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Incorrect access control in the component /rest/staffResource/findAllUsersAcrossOrg of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows create and modify user accounts, including an Administrator account.\n\ud83d\udccf Published: 2025-03-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-03T01:00:43.026Z\n\ud83d\udd17 References:\n1. https://github.com/VvV1per/Vulnerability-Research-CVEs/tree/main/CVE-2024-53637", "creation_timestamp": "2025-03-03T01:29:03.000000Z"}, {"uuid": "62d7cae8-9252-4035-ac08-1828cc3b4cdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27156", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6392", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27156\n\ud83d\udd25 CVSS Score: 4.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N)\n\ud83d\udd39 Description: Tuleap is an Open Source Suite to improve management of software developments and collaboration. The mass emailing features do not sanitize the content of the HTML emails. A malicious user could use this issue to facilitate a phishing attempt or to indirectly exploit issues in the recipients mail clients. This vulnerability is fixed in Tuleap Community Edition 16.4.99.1740567344 and Tuleap Enterprise Edition 16.4-6 and 16.3-11.\n\ud83d\udccf Published: 2025-03-04T16:53:49.741Z\n\ud83d\udccf Modified: 2025-03-04T17:22:15.113Z\n\ud83d\udd17 References:\n1. https://github.com/Enalean/tuleap/security/advisories/GHSA-x2v2-xr59-c9cf\n2. https://github.com/Enalean/tuleap/commit/a0bc657297b405debce1f5bcbbb30c733f3f09bd\n3. https://tuleap.net/plugins/tracker/?aid=42177", "creation_timestamp": "2025-03-04T17:34:03.000000Z"}, {"uuid": "5bbfe369-3198-4f8a-9c76-088151d1bede", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27681", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6490", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27681\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735 Application 20.0.1330 mishandles Client Inter-process Security V-2022-004.\n\ud83d\udccf Published: 2025-03-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-05T05:25:48.638Z\n\ud83d\udd17 References:\n1. https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm", "creation_timestamp": "2025-03-05T05:33:02.000000Z"}, {"uuid": "f7efa9fc-0be8-4173-93df-b1132779b6e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27680", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6491", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27680\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.750 Application 20.0.1442 allows Insecure Firmware Image with Insufficient Verification of Data Authenticity V-2024-004.\n\ud83d\udccf Published: 2025-03-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-05T05:25:47.861Z\n\ud83d\udd17 References:\n1. https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm", "creation_timestamp": "2025-03-05T05:33:06.000000Z"}, {"uuid": "179f45ff-c628-4acb-8839-4274c0b3fb8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27157", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5720", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27157\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: Mastodon is a self-hosted, federated microblogging platform. Starting in version 4.2.0 and prior to versions 4.2.16 and 4.3.4, the rate limits are missing on `/auth/setup`. Without those rate limits, an attacker can craft requests that will send an email to an arbitrary addresses. Versions 4.2.16 and 4.3.4 fix the issue.\n\ud83d\udccf Published: 2025-02-27T17:12:39.043Z\n\ud83d\udccf Modified: 2025-02-27T17:12:39.043Z\n\ud83d\udd17 References:\n1. https://github.com/mastodon/mastodon/security/advisories/GHSA-v39f-c9jj-8w7h\n2. https://github.com/mastodon/mastodon/commit/06f879ce9bea195344ac9f71e6799eea500628ec", "creation_timestamp": "2025-02-27T17:25:14.000000Z"}, {"uuid": "c9993dc1-19e5-41d0-ab8c-7fe7b84b254e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27678", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6493", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27678\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Client Remote Code Execution V-2023-001.\n\ud83d\udccf Published: 2025-03-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-05T05:25:46.046Z\n\ud83d\udd17 References:\n1. https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm", "creation_timestamp": "2025-03-05T05:33:07.000000Z"}, {"uuid": "1ffbc9c0-bbcc-4ac8-ad63-aba4bab74699", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27419", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6228", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27419\n\ud83d\udd25 CVSS Score: 9.2 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H)\n\ud83d\udd39 Description: WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A Denial of Service (DoS) vulnerability exists in WeGIA. This vulnerability allows any unauthenticated user to cause the server to become unresponsive by performing aggressive spidering. The vulnerability is caused by recursive crawling of dynamically generated URLs and insufficient handling of large volumes of requests. This vulnerability is fixed in 3.2.16.\n\ud83d\udccf Published: 2025-03-03T16:07:00.445Z\n\ud83d\udccf Modified: 2025-03-03T16:07:00.445Z\n\ud83d\udd17 References:\n1. https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-9rp6-4mqp-g4p8\n2. https://github.com/LabRedesCefetRJ/WeGIA/commit/624ddfadb3fd8f8b30ad4f601b032a9bacc86a39", "creation_timestamp": "2025-03-03T16:30:32.000000Z"}, {"uuid": "a6c66542-6f24-4370-bb1f-016c8c560407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27400", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5917", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27400\n\ud83d\udd25 CVSS Score: 2.9 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:L)\n\ud83d\udd39 Description: Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backward compatibility. Versions prior to 20.12.3 and 20.13.1 contain a vulnerability that allows script execution in the admin panel which could lead to cross-site scripting against authenticated admin users. The attack requires an admin user with configuration access, so in practicality it is not very likely to be useful given that a user with this level of access is probably already a full admin. Versions 20.12.3 and 20.13.1 contain a patch for the issue.\n\ud83d\udccf Published: 2025-02-28T15:26:14.265Z\n\ud83d\udccf Modified: 2025-02-28T15:43:37.220Z\n\ud83d\udd17 References:\n1. https://github.com/OpenMage/magento-lts/security/advisories/GHSA-5pxh-89cx-4668\n2. https://github.com/OpenMage/magento-lts/commit/d307e5bf75729a2347dde0952fe9fd9fcd9c6aea\n3. https://github.com/OpenMage/magento-lts/releases/tag/v20.12.3\n4. https://github.com/OpenMage/magento-lts/releases/tag/v20.13.0", "creation_timestamp": "2025-02-28T16:27:02.000000Z"}, {"uuid": "581faebf-5f5c-42ab-91c3-a338e826df8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27554", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6052", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27554\n\ud83d\udd25 CVSS Score: 9.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: ToDesktop before 2024-10-03, as used by Cursor before 2024-10-03 and other applications, allows remote attackers to execute arbitrary commands on the build server (e.g., read secrets from the desktopify config.prod.json file), and consequently deploy updates to any app, via a postinstall script in package.json. No exploitation occurred.\n\ud83d\udccf Published: 2025-03-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-01T06:00:59.388Z\n\ud83d\udd17 References:\n1. https://kibty.town/blog/todesktop\n2. https://www.todesktop.com/blog/posts/security-incident-at-todesktop\n3. https://news.ycombinator.com/item?id=43210858", "creation_timestamp": "2025-03-01T06:27:17.000000Z"}, {"uuid": "23251414-88b3-4581-9725-227600a390da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27408", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5941", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27408\n\ud83d\udd25 CVSS Score: 4.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: Manifest offers users a one-file micro back end. Prior to version 4.9.1, Manifest employs a weak password hashing implementation that uses SHA3 without a salt. This exposes user passwords to a higher risk of being cracked if an attacker gains access to the database. Without the use of a salt, identical passwords across multiple users will result in the same hash, making it easier for attackers to identify and exploit patterns, thereby accelerating the cracking process. Version 4.9.1 fixes the issue.\n\ud83d\udccf Published: 2025-02-28T17:26:15.196Z\n\ud83d\udccf Modified: 2025-02-28T18:11:49.988Z\n\ud83d\udd17 References:\n1. https://github.com/mnfst/manifest/security/advisories/GHSA-h8h6-7752-g28c\n2. https://github.com/mnfst/manifest/commit/3ed6f1324e96ad469ad929d470dcd0cc386c6c69", "creation_timestamp": "2025-02-28T18:26:23.000000Z"}, {"uuid": "6ac71a61-34c5-47fd-95d5-a5225b5d4562", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27416", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6026", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27416\n\ud83d\udd25 CVSS Score: 5.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:U)\n\ud83d\udd39 Description: Scratch-Coding-Hut.github.io is the website for Coding Hut. The website as of 28 February 2025 contained a sign in with scratch username and password form. Any user who used the sign in page would be susceptible to any other user signing into their account. As of time of publication, a fix is not available but work on a fix is underway. As a workaround, users should avoid signing in.\n\ud83d\udccf Published: 2025-03-01T00:10:29.184Z\n\ud83d\udccf Modified: 2025-03-01T00:10:29.184Z\n\ud83d\udd17 References:\n1. https://github.com/Scratch-Coding-Hut/Scratch-Coding-Hut.github.io/security/advisories/GHSA-xx32-r9wr-whff\n2. https://github.com/Scratch-Coding-Hut/Scratch-Coding-Hut.github.io/issues/3", "creation_timestamp": "2025-03-01T00:27:23.000000Z"}, {"uuid": "e4d6ed2a-2fe0-4225-8bb0-0834d05b6d44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27682", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6489", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27682\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735 Application 20.0.1330 allows Insecure Log Permissions V-2022-005.\n\ud83d\udccf Published: 2025-03-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-05T05:25:49.455Z\n\ud83d\udd17 References:\n1. https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm", "creation_timestamp": "2025-03-05T05:33:01.000000Z"}, {"uuid": "07dee797-68b8-4701-a401-e61eae30ffae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27421", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6226", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27421\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: Abacus is a highly scalable and stateless counting API. A critical goroutine leak vulnerability has been identified in the Abacus server's Server-Sent Events (SSE) implementation. The issue occurs when clients disconnect from the /stream endpoint, as the server fails to properly clean up resources and terminate associated goroutines. This leads to resource exhaustion where the server continues running but eventually stops accepting new SSE connections while maintaining high memory usage. The vulnerability specifically involves improper channel cleanup in the event handling mechanism, causing goroutines to remain blocked indefinitely. This vulnerability is fixed in 1.4.0.\n\ud83d\udccf Published: 2025-03-03T16:19:23.914Z\n\ud83d\udccf Modified: 2025-03-03T16:19:23.914Z\n\ud83d\udd17 References:\n1. https://github.com/JasonLovesDoggo/abacus/security/advisories/GHSA-vh64-54px-qgf8\n2. https://github.com/JasonLovesDoggo/abacus/commit/898ff1204e11317cc161240b660e63eed5a72b33", "creation_timestamp": "2025-03-03T16:30:30.000000Z"}, {"uuid": "a273e1de-1f82-433d-90c4-3e661bf7aad6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27420", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6229", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27420\n\ud83d\udd25 CVSS Score: 6.4 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A Stored Cross-Site Scripting (XSS) vulnerability was identified in the atendido_parentesco_adicionar.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts into the descricao parameter. The injected scripts are stored on the server and executed automatically whenever the affected page is accessed by users, posing a significant security risk. This vulnerability fix in 3.2.16.\n\ud83d\udccf Published: 2025-03-03T16:05:16.087Z\n\ud83d\udccf Modified: 2025-03-03T16:05:16.087Z\n\ud83d\udd17 References:\n1. https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-x3wr-75qx-55cw\n2. https://github.com/LabRedesCefetRJ/WeGIA/commit/add78bb177cbb29477ff2121b533651a9d673918", "creation_timestamp": "2025-03-03T16:30:33.000000Z"}, {"uuid": "a6ddd20c-d6dc-4906-b299-339967c4f73a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27579", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6117", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27579\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L)\n\ud83d\udd39 Description: In Bitaxe ESP-Miner before 2.5.0 with AxeOS, one can use an /api/system CSRF attack to update the payout address (aka stratumUser) for a Bitaxe Bitcoin miner, or change the frequency and voltage settings.\n\ud83d\udccf Published: 2025-03-02T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-02T23:38:49.197Z\n\ud83d\udd17 References:\n1. https://snotra.uk/axeos-csrf-vulnerability.html\n2. https://www.nobsbitcoin.com/bitaxe-firmware-esp-miner-v2-5-0/\n3. https://github.com/skot/ESP-Miner/pull/637", "creation_timestamp": "2025-03-03T00:29:49.000000Z"}, {"uuid": "ee5597c6-09b9-490c-b9af-ff0f39806fb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27584", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6120", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27584\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A stored cross-site scripting (XSS) vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the First Name parameter at /rest/staffResource/update.\n\ud83d\udccf Published: 2025-03-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-03T01:00:43.750Z\n\ud83d\udd17 References:\n1. https://github.com/VvV1per/Vulnerability-Research-CVEs/tree/main/CVE-2024-89636", "creation_timestamp": "2025-03-03T01:29:02.000000Z"}, {"uuid": "a5c8ad1b-59d3-49f4-8d5c-76494fdbeb67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27585", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6119", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27585\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A stored cross-site scripting (XSS) vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Print Name parameter at /rest/staffResource/update.\n\ud83d\udccf Published: 2025-03-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-03T01:00:44.497Z\n\ud83d\udd17 References:\n1. https://github.com/VvV1per/Vulnerability-Research-CVEs/tree/main/CVE-2024-89636", "creation_timestamp": "2025-03-03T01:29:01.000000Z"}, {"uuid": "b6491ed6-c5b1-4f52-987b-2802f226b750", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27111", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6370", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27111\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Rack is a modular Ruby web server interface. The Rack::Sendfile middleware logs unsanitised header values from the X-Sendfile-Type header. An attacker can exploit this by injecting escape sequences (such as newline characters) into the header, resulting in log injection. This vulnerability is fixed in 2.2.12, 3.0.13, and 3.1.11.\n\ud83d\udccf Published: 2025-03-04T15:26:55.377Z\n\ud83d\udccf Modified: 2025-03-04T15:26:55.377Z\n\ud83d\udd17 References:\n1. https://github.com/rack/rack/security/advisories/GHSA-8cgq-6mh2-7j6v\n2. https://github.com/rack/rack/commit/803aa221e8302719715e224f4476e438f2531a53\n3. https://github.com/rack/rack/commit/aeac570bb8080ca7b53b7f2e2f67498be7ebd30b\n4. https://github.com/rack/rack/commit/b13bc6bfc7506aca3478dc5ac1c2ec6fc53f82a3", "creation_timestamp": "2025-03-04T15:31:02.000000Z"}, {"uuid": "8fd6367d-b868-4828-b7a5-058d05e11907", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27590", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6146", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27590\n\ud83d\udd25 CVSS Score: 9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: In oxidized-web (aka Oxidized Web) before 0.15.0, the RANCID migration page allows an unauthenticated user to gain control over the Linux user account that is running oxidized-web.\n\ud83d\udccf Published: 2025-03-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-03T03:28:18.346Z\n\ud83d\udd17 References:\n1. https://github.com/ytti/oxidized-web/releases/tag/0.15.0\n2. https://github.com/ytti/oxidized-web/commit/a5220a0ddc57b85cd122bffee228d3ed4901668e", "creation_timestamp": "2025-03-03T04:29:48.000000Z"}, {"uuid": "3a89e091-76a8-4d1a-9b23-674d05ac5cb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27371", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6247", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27371\n\ud83d\udd25 CVSS Score: 6.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:N)\n\ud83d\udd39 Description: In certain IETF OAuth 2.0-related specifications, when the JSON Web Token Profile for OAuth 2.0 Client Authentication mechanism is used, there are ambiguities in the audience values of JWTs sent to authorization servers. The affected RFCs may include RFC 7523, and also RFC 7521, RFC 7522, RFC 9101 (JAR), and RFC 9126 (PAR).\n\ud83d\udccf Published: 2025-03-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-03T18:16:55.266Z\n\ud83d\udd17 References:\n1. https://openid.net/wp-content/uploads/2025/01/OIDF-Responsible-Disclosure-Notice-on-Security-Vulnerability-for-private_key_jwt.pdf\n2. https://openid.net/notice-of-a-security-vulnerability/\n3. https://talks.secworkshop.events/osw2025/talk/R8D9BS/", "creation_timestamp": "2025-03-03T18:35:12.000000Z"}, {"uuid": "a012b34d-e331-4009-9167-243b2cf032db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27279", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6221", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27279\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Flashfader allows Reflected XSS. This issue affects Flashfader: from n/a through 1.1.1.\n\ud83d\udccf Published: 2025-03-03T13:30:31.244Z\n\ud83d\udccf Modified: 2025-03-03T13:30:31.244Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/flashfader/vulnerability/wordpress-flashfader-plugin-1-1-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-03-03T14:30:18.000000Z"}, {"uuid": "dabcb322-7fd0-4925-936e-1ba64ef248dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27418", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6230", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27418\n\ud83d\udd25 CVSS Score: 6.4 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A Stored Cross-Site Scripting (XSS) vulnerability was identified in the adicionar_tipo_atendido.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts into the tipo parameter. The injected scripts are stored on the server and executed automatically whenever the affected page is accessed by users, posing a significant security risk. This vulnerability is fixed in 3.2.16.\n\ud83d\udccf Published: 2025-03-03T16:03:24.070Z\n\ud83d\udccf Modified: 2025-03-03T16:03:24.070Z\n\ud83d\udd17 References:\n1. https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-ffcg-qr75-98mg\n2. https://github.com/LabRedesCefetRJ/WeGIA/commit/e2f258cc8fed8b7e5850114ce6e74bd9ba4f397f", "creation_timestamp": "2025-03-03T16:30:34.000000Z"}, {"uuid": "62631c90-f6f2-49f8-b441-5e76f6b76e09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27667", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6504", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27667\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Administrative User Email Enumeration OVE-20230524-0011.\n\ud83d\udccf Published: 2025-03-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-05T05:25:36.657Z\n\ud83d\udd17 References:\n1. https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm", "creation_timestamp": "2025-03-05T05:33:21.000000Z"}, {"uuid": "9a6da5a1-1592-4415-8c1a-5c554d59b86f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27583", "type": "seen", "source": "Telegram/DXo_44zcDtYUH-T4UJTJjc2T8Ao63GWchimR7j--rZOoNeik", "content": "", "creation_timestamp": "2025-03-06T02:16:33.000000Z"}, {"uuid": "e9b09270-2583-4ed5-b22c-5057c72cd375", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27417", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6238", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27417\n\ud83d\udd25 CVSS Score: 6.4 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A Stored Cross-Site Scripting (XSS) vulnerability was identified in the adicionar_status_atendido.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts into the status parameter. The injected scripts are stored on the server and executed automatically whenever the affected page is accessed by users, posing a significant security risk. This vulnerability is fixed in 3.2.16.\n\ud83d\udccf Published: 2025-03-03T16:01:25.506Z\n\ud83d\udccf Modified: 2025-03-03T16:01:25.506Z\n\ud83d\udd17 References:\n1. https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-j3p8-xww6-wvqh\n2. https://github.com/LabRedesCefetRJ/WeGIA/commit/0f2644bca2afbdfff21662c51a64679dfba8c2bd", "creation_timestamp": "2025-03-03T16:30:47.000000Z"}, {"uuid": "b14d7eea-c74a-4a73-b0e2-b9991d49fdf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27370", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6246", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27370\n\ud83d\udd25 CVSS Score: 6.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:N)\n\ud83d\udd39 Description: OpenID Connect Core through 1.0 errata set 2 allows audience injection in certain situations. When the private_key_jwt authentication mechanism is used, a malicious Authorization Server could trick a Client into writing attacker-controlled values into the audience, including token endpoints or issuer identifiers of other Authorization Servers. The malicious Authorization Server could then use these private key JWTs to impersonate the Client.\n\ud83d\udccf Published: 2025-03-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-03T18:18:11.423Z\n\ud83d\udd17 References:\n1. https://openid.net/wp-content/uploads/2025/01/OIDF-Responsible-Disclosure-Notice-on-Security-Vulnerability-for-private_key_jwt.pdf\n2. https://openid.net/notice-of-a-security-vulnerability/\n3. https://talks.secworkshop.events/osw2025/talk/R8D9BS/", "creation_timestamp": "2025-03-03T18:35:11.000000Z"}, {"uuid": "e4c6cf17-3c5a-4350-b627-f49432d51fde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27500", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6273", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27500\n\ud83d\udd25 CVSS Score: 8.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N)\n\ud83d\udd39 Description: OpenZiti is a free and open source project focused on bringing zero trust to any application. An endpoint(/api/upload) on the admin panel can be accessed without any form of authentication. This endpoint accepts an HTTP POST to upload a file which is then stored on the node and is available via URL. This can lead to a stored cross site scripting attack if the file uploaded contains malicious code and is then accessed and executed within the context of the user's browser. This function is no longer necessary as the ziti-console moves from a node server application to a single page application, and has been disabled. The vulnerability is fixed in 3.7.1.\n\ud83d\udccf Published: 2025-03-03T18:30:48.198Z\n\ud83d\udccf Modified: 2025-03-03T20:22:19.785Z\n\ud83d\udd17 References:\n1. https://github.com/openziti/ziti-console/security/advisories/GHSA-frxm-vm48-5qf2", "creation_timestamp": "2025-03-03T20:30:35.000000Z"}, {"uuid": "a2e2586c-69e2-4835-ab8d-b1b439c92c5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27501", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6268", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27501\n\ud83d\udd25 CVSS Score: 8.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N)\n\ud83d\udd39 Description: OpenZiti is a free and open source project focused on bringing zero trust to any application. An endpoint on the admin panel can be accessed without any form of authentication. This endpoint accepts a user-supplied URL parameter to connect to an OpenZiti Controller and performs a server-side request, resulting in a potential Server-Side Request Forgery (SSRF) vulnerability. The fixed version has moved the request to the external controller from the server side to the client side, thereby eliminating the identity of the node from being used to gain any additional permissions. This vulnerability is fixed in 3.7.1.\n\ud83d\udccf Published: 2025-03-03T18:33:19.670Z\n\ud83d\udccf Modified: 2025-03-03T19:10:02.275Z\n\ud83d\udd17 References:\n1. https://github.com/openziti/ziti-console/security/advisories/GHSA-fqxh-vfv5-8qjp", "creation_timestamp": "2025-03-03T19:31:05.000000Z"}, {"uuid": "2515ae89-a58b-42ae-9e29-860ed935cfba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27402", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6396", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27402\n\ud83d\udd25 CVSS Score: 4.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L)\n\ud83d\udd39 Description: Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap is missing CSRF protections on tracker fields administrative operations. An attacker could use this vulnerability to trick victims into removing or updating tracker fields. This vulnerability is fixed in Tuleap Community Edition 16.4.99.1740414959 and Tuleap Enterprise Edition 16.4-6 and 16.3-11.\n\ud83d\udccf Published: 2025-03-04T17:00:49.077Z\n\ud83d\udccf Modified: 2025-03-04T17:17:56.708Z\n\ud83d\udd17 References:\n1. https://github.com/Enalean/tuleap/security/advisories/GHSA-66pg-cpjf-2mfg\n2. https://github.com/Enalean/tuleap/commit/ea6319e2ad40beeda335af4ccd7a204a6912765c\n3. https://tuleap.net/plugins/tracker/?aid=41857", "creation_timestamp": "2025-03-04T17:34:06.000000Z"}, {"uuid": "0bf14e6c-e306-4ee6-8160-8c97be15ed78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27219", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6302", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27219\n\ud83d\udd25 CVSS Score: 5.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L)\n\ud83d\udd39 Description: In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of Service (DoS) vulnerability. The method does not impose any limit on the length of the raw cookie value it processes. This oversight can lead to excessive resource consumption when parsing extremely large cookies.\n\ud83d\udccf Published: 2025-03-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-03T23:38:00.413Z\n\ud83d\udd17 References:\n1. https://hackerone.com/reports/2936778\n2. https://github.com/rubysec/ruby-advisory-db/blob/master/gems/cgi/CVE-2025-27219.yml", "creation_timestamp": "2025-03-04T00:31:07.000000Z"}, {"uuid": "feb45c14-8749-47b1-b5af-0c52a9630701", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27220", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6301", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27220\n\ud83d\udd25 CVSS Score: 4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L)\n\ud83d\udd39 Description: In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service (ReDoS) vulnerability exists in the Util#escapeElement method.\n\ud83d\udccf Published: 2025-03-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-03T23:46:21.977Z\n\ud83d\udd17 References:\n1. https://hackerone.com/reports/2890322\n2. https://github.com/rubysec/ruby-advisory-db/blob/master/gems/cgi/CVE-2025-27220.yml", "creation_timestamp": "2025-03-04T00:31:06.000000Z"}, {"uuid": "dae6b352-e9cb-437e-a2c6-f2936a42e8cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27221", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6300", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27221\n\ud83d\udd25 CVSS Score: 3.2 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N)\n\ud83d\udd39 Description: In the URI gem before 1.0.3 for Ruby, the URI handling methods (URI.join, URI#merge, URI#+) have an inadvertent leakage of authentication credentials because userinfo is retained even after changing the host.\n\ud83d\udccf Published: 2025-03-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-03T23:58:48.831Z\n\ud83d\udd17 References:\n1. https://hackerone.com/reports/2957667\n2. https://github.com/rubysec/ruby-advisory-db/blob/master/gems/uri/CVE-2025-27221.yml", "creation_timestamp": "2025-03-04T00:31:05.000000Z"}, {"uuid": "9311ad29-c79e-459d-86fa-9047532e5b06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27521", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6352", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27521\n\ud83d\udd25 CVSS Score: 6.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N)\n\ud83d\udd39 Description: Vulnerability of improper access permission in the process management module\nImpact: Successful exploitation of this vulnerability may affect service confidentiality.\n\ud83d\udccf Published: 2025-03-04T07:13:32.851Z\n\ud83d\udccf Modified: 2025-03-04T07:13:32.851Z\n\ud83d\udd17 References:\n1. https://consumer.huawei.com/en/support/bulletin/2025/3/", "creation_timestamp": "2025-03-04T07:30:55.000000Z"}, {"uuid": "3feb04c8-3dfc-48cf-ac6f-9d75851993ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27401", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6395", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27401\n\ud83d\udd25 CVSS Score: 4.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L)\n\ud83d\udd39 Description: Tuleap is an Open Source Suite to improve management of software developments and collaboration. In a standard usages of Tuleap, the issue has a limited impact, it will mostly leave dangling data. However, a malicious user could create and delete reports multiple times to cycle through all the filters of all reports of the instance and delete them. The malicious user only needs to have access to one tracker. This would result in the loss of all criteria filters forcing users and tracker admins to re-create them. This vulnerability is fixed in Tuleap Community Edition 16.4.99.1740498975 and Tuleap Enterprise Edition 16.4-6 and 16.3-11.\n\ud83d\udccf Published: 2025-03-04T16:58:18.478Z\n\ud83d\udccf Modified: 2025-03-04T17:20:34.993Z\n\ud83d\udd17 References:\n1. https://github.com/Enalean/tuleap/security/advisories/GHSA-3rjf-87rf-h8m9\n2. https://github.com/Enalean/tuleap/commit/0070fef5c3b27fd402d3232041c6e03f79a84ffd\n3. https://tuleap.net/plugins/tracker/?aid=41850", "creation_timestamp": "2025-03-04T17:34:05.000000Z"}, {"uuid": "fb4cd201-0624-4316-8b43-4f700448a5da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27150", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6409", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27150\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: Tuleap is an Open Source Suite to improve management of software developments and collaboration. The password to connect the Redis instance is not purged from the archive generated with tuleap collect-system-data. These archives are likely to be used by support teams that should not have access to this password. The vulnerability is fixed in Tuleap Community Edition 16.4.99.1740492866 and Tuleap Enterprise Edition 16.4-6 and 16.3-11.\n\ud83d\udccf Published: 2025-03-04T16:48:43.226Z\n\ud83d\udccf Modified: 2025-03-04T18:52:59.756Z\n\ud83d\udd17 References:\n1. https://github.com/Enalean/tuleap/security/advisories/GHSA-jc5r-684x-j46q\n2. https://github.com/Enalean/tuleap/commit/a6702622a8db969a17522b8fac0774afdb1c916f\n3. https://tuleap.net/plugins/tracker/?aid=41870", "creation_timestamp": "2025-03-04T19:33:55.000000Z"}, {"uuid": "df9b4acd-c406-4c9b-81b0-3d01402ee629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27675", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6496", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27675\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Vulnerable OpenID Implementation V-2023-004.\n\ud83d\udccf Published: 2025-03-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-05T05:25:43.520Z\n\ud83d\udd17 References:\n1. https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm", "creation_timestamp": "2025-03-05T05:33:13.000000Z"}, {"uuid": "eafe864d-c0d9-49be-ba19-3a497c8a4786", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27668", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6503", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27668\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Arbitrary Content Inclusion via Iframe OVE-20230524-0012.\n\ud83d\udccf Published: 2025-03-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-05T05:25:37.454Z\n\ud83d\udd17 References:\n1. https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm", "creation_timestamp": "2025-03-05T05:33:21.000000Z"}, {"uuid": "ef87ef3e-47fb-4ad9-b60f-3e16548b1b3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27674", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6497", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27674\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Hardcoded IdP Key V-2023-006.\n\ud83d\udccf Published: 2025-03-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-05T05:25:42.647Z\n\ud83d\udd17 References:\n1. https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm", "creation_timestamp": "2025-03-05T05:33:13.000000Z"}, {"uuid": "fd14ff69-aaea-42ed-aa16-ddd1da3b2eab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27684", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6487", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27684\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735 Application 20.0.1330 allows Debug Bundle Contains Sensitive Data V-2022-003.\n\ud83d\udccf Published: 2025-03-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-05T05:25:51.044Z\n\ud83d\udd17 References:\n1. https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm", "creation_timestamp": "2025-03-05T05:33:00.000000Z"}, {"uuid": "7ddab884-9e20-4515-9dde-b7a2003b1289", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27414", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6422", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27414\n\ud83d\udd25 CVSS Score: 4.6 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U)\n\ud83d\udd39 Description: MinIO is a high performance object storage. Starting in RELEASE.2024-06-06T09-36-42Z and prior to \nRELEASE.2025-02-28T09-55-16Z, a bug in evaluating the trust of the SSH key used in an SFTP connection to MinIO allows authentication bypass and unauthorized data access. On a MinIO server with SFTP access configured and using LDAP as an external identity provider, MinIO supports SSH key based authentication for SFTP connections when the user has the `sshPublicKey` attribute set in their LDAP server. The server trusts the client's key only when the public key is the same as the `sshPublicKey` attribute. Due to the bug, when the user has no `sshPublicKey` property in LDAP, the server ends up trusting the key allowing the client to perform any FTP operations allowed by the MinIO access policies associated with the LDAP user (or any of their groups). Three requirements must be met in order to exploit the vulnerability. First, the MinIO server must be configured to allow SFTP access and use LDAP as an external identity provider. Second, the attacker must have knowledge of an LDAP username that does not have the `sshPublicKey` property set. Third, such an LDAP username or one of their groups must also have some MinIO access policy configured. When this bug is successfully exploited, the attacker can perform any FTP operations (i.e. reading, writing, deleting and listing objects) allowed by the access policy associated with the LDAP user account (and their groups). Version 1.2.0 fixes the issue.\n\ud83d\udccf Published: 2025-02-28T21:06:58.155Z\n\ud83d\udccf Modified: 2025-03-04T20:03:45.107Z\n\ud83d\udd17 References:\n1. https://github.com/minio/minio/security/advisories/GHSA-wc79-7x8x-2p58\n2. https://github.com/minio/minio/commit/4c71f1b4ec0fb2a473ddaac18c20ec9e63f267ec\n3. https://github.com/minio/minio/commit/91e1487de45720753c9e9e4c02b1bd16b7e452fa", "creation_timestamp": "2025-03-04T20:32:02.000000Z"}, {"uuid": "19375e5a-c9a8-4735-83c5-a66bf338fa7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27510", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6454", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27510\n\ud83d\udd25 CVSS Score: 9.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: conda-forge-metadata provides programatic access to conda-forge's metadata. conda-forge-metadata uses an optional dependency - \"conda-oci-mirror\" which was neither present on the PyPi repository nor registered by any entity. If conda-oci-mirror is taken over by a threat actor, it can result in remote code execution.\n\ud83d\udccf Published: 2025-03-04T21:48:12.688Z\n\ud83d\udccf Modified: 2025-03-04T21:48:12.688Z\n\ud83d\udd17 References:\n1. https://github.com/conda-forge/conda-forge-metadata/security/advisories/GHSA-vwfh-m3q7-9jpw\n2. https://github.com/conda-forge/conda-forge-metadata/blob/799aee36b21ee06289d73d57838b28201f5a57af/pyproject.toml#L28", "creation_timestamp": "2025-03-04T22:33:26.000000Z"}, {"uuid": "35ff2732-0f86-4e3f-aa78-f27c76ee344d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27413", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6421", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27413\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: PwnDoc is a penetration test reporting application. Prior to version 1.2.0, the backup restore functionality allows an administrator to import raw data into the database, including Path Traversal (`../`) sequences. This is problematic for the template update functionality as it uses the path from the database to write arbitrary content to, potentially overwriting source code to achieve Remote Code Execution. Any user with the `backups:create`, `backups:update` and `templates:update` permissions (only administrators by default) can write arbitrary content to anywhere on the filesystem. By overwriting source code, it is possible to achieve Remote Code Execution. Version 1.2.0 fixes the issue.\n\ud83d\udccf Published: 2025-02-28T21:02:35.656Z\n\ud83d\udccf Modified: 2025-03-04T20:09:20.769Z\n\ud83d\udd17 References:\n1. https://github.com/pwndoc/pwndoc/security/advisories/GHSA-r3vj-47cf-4672\n2. https://github.com/pwndoc/pwndoc/commit/68aa1ea676a91e17bfb333a27571151bd07fb21d\n3. https://github.com/pwndoc/pwndoc/blob/14acb704891245bf1703ce6296d62112e85aa995/backend/src/models/template.js#L170-L175\n4. https://github.com/pwndoc/pwndoc/blob/14acb704891245bf1703ce6296d62112e85aa995/backend/src/routes/backup.js#L826-L827\n5. https://github.com/pwndoc/pwndoc/blob/14acb704891245bf1703ce6296d62112e85aa995/backend/src/routes/template.js#L63-L66\n6. https://github.com/pwndoc/pwndoc/releases/tag/v1.2.0", "creation_timestamp": "2025-03-04T20:32:00.000000Z"}, {"uuid": "53ec49fa-f7c6-4212-8fbb-308f1ba65616", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27683", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6488", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27683\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735 Application 20.0.1330 allows Driver Unrestricted Upload of File with Dangerous Type V-2022-006.\n\ud83d\udccf Published: 2025-03-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-05T05:25:50.321Z\n\ud83d\udd17 References:\n1. https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm", "creation_timestamp": "2025-03-05T05:33:00.000000Z"}, {"uuid": "304b6aca-e69b-4bd9-ac17-218fdb4168a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27685", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6486", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27685\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735 Application 20.0.1330 allows Configuration File Contains CA & Private Key V-2022-001.\n\ud83d\udccf Published: 2025-03-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-05T05:25:51.859Z\n\ud83d\udd17 References:\n1. https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm", "creation_timestamp": "2025-03-05T05:32:59.000000Z"}, {"uuid": "df67cff4-99bc-4090-b005-e88e511131bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27679", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6492", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27679\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cross-Site Scripting in Badge Registration V-2023-005.\n\ud83d\udccf Published: 2025-03-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-05T05:25:46.898Z\n\ud83d\udd17 References:\n1. https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm", "creation_timestamp": "2025-03-05T05:33:06.000000Z"}, {"uuid": "5ef5b362-b870-4646-ab47-cf96f5cfcc51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27673", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6498", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27673\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cookie Returned in Response Body OVE-20230524-0017.\n\ud83d\udccf Published: 2025-03-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-05T05:25:41.788Z\n\ud83d\udd17 References:\n1. https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm", "creation_timestamp": "2025-03-05T05:33:14.000000Z"}, {"uuid": "dcabd715-b097-4815-a9e5-aedb201a1dd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27676", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6495", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27676\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cross-Site Scripting in Reports V-2023-002.\n\ud83d\udccf Published: 2025-03-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-05T05:25:44.354Z\n\ud83d\udd17 References:\n1. https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm", "creation_timestamp": "2025-03-05T05:33:09.000000Z"}, {"uuid": "00b173ba-f0bb-47d3-8421-19559e11957d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27670", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6501", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27670\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Insufficient Signature Validation OVE-20230524-0014.\n\ud83d\udccf Published: 2025-03-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-05T05:25:39.242Z\n\ud83d\udd17 References:\n1. https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm", "creation_timestamp": "2025-03-05T05:33:19.000000Z"}, {"uuid": "a92a4d9f-435d-46f1-a272-ef72872cc32d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27671", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6500", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27671\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Device Impersonation OVE-20230524-0015.\n\ud83d\udccf Published: 2025-03-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-05T05:25:40.096Z\n\ud83d\udd17 References:\n1. https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm", "creation_timestamp": "2025-03-05T05:33:15.000000Z"}, {"uuid": "86245f2f-4f1b-4ed7-be8a-c827955a36a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27669", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6502", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27669\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Remote Network Scanning (XSPA)/DoS OVE-20230524-0013.\n\ud83d\udccf Published: 2025-03-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-05T05:25:38.236Z\n\ud83d\udd17 References:\n1. https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm", "creation_timestamp": "2025-03-05T05:33:20.000000Z"}, {"uuid": "8a173eed-ff6a-4df1-ab17-bf40b2cd0fb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27795", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6799", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27795\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L)\n\ud83d\udd39 Description: JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits.\n\ud83d\udccf Published: 2025-03-07T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-07T05:47:02.163Z\n\ud83d\udd17 References:\n1. http://www.graphicsmagick.org/NEWS.html", "creation_timestamp": "2025-03-07T06:34:50.000000Z"}, {"uuid": "554a2b05-33a7-4074-8123-bb848132093a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27796", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6798", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27796\n\ud83d\udd25 CVSS Score: 4.5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L)\n\ud83d\udd39 Description: WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation.\n\ud83d\udccf Published: 2025-03-07T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-07T05:49:30.741Z\n\ud83d\udd17 References:\n1. http://www.graphicsmagick.org/NEWS.html\n2. https://sourceforge.net/p/graphicsmagick/bugs/750/", "creation_timestamp": "2025-03-07T06:34:49.000000Z"}, {"uuid": "78f3bd4f-0402-4a9c-a4eb-911dd3637490", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27513", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6584", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27513\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: OpenTelemetry dotnet is a dotnet telemetry framework. A vulnerability in OpenTelemetry.Api package 1.10.0 to 1.11.1 could cause a Denial of Service (DoS) when a tracestate and traceparent header is received. Even if an application does not explicitly use trace context propagation, receiving these headers can still trigger high CPU usage. This issue impacts any application accessible over the web or backend services that process HTTP requests containing a tracestate header. Application may experience excessive resource consumption, leading to increased latency, degraded performance, or downtime. This vulnerability is fixed in 1.11.2.\n\ud83d\udccf Published: 2025-03-05T18:12:25.867Z\n\ud83d\udccf Modified: 2025-03-05T18:19:02.492Z\n\ud83d\udd17 References:\n1. https://github.com/open-telemetry/opentelemetry-dotnet/security/advisories/GHSA-8785-wc3w-h8q6\n2. https://github.com/open-telemetry/opentelemetry-dotnet/commit/1b555c1201413f2f55f2cd3c4ba03ef4b615b6b5", "creation_timestamp": "2025-03-05T18:55:30.000000Z"}, {"uuid": "6e37dd08-4061-4fa8-a128-f34bc1f841c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27152", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6839", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27152\n\ud83d\udd25 CVSS Score: 7.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P)\n\ud83d\udd39 Description: axios is a promise based HTTP client for the browser and node.js. The issue occurs when passing absolute URLs rather than protocol-relative URLs to axios. Even if \u2060baseURL is set, axios sends the request to the specified absolute URL, potentially causing SSRF and credential leakage. This issue impacts both server-side and client-side usage of axios. This issue is fixed in 1.8.2.\n\ud83d\udccf Published: 2025-03-07T15:13:15.155Z\n\ud83d\udccf Modified: 2025-03-07T15:13:15.155Z\n\ud83d\udd17 References:\n1. https://github.com/axios/axios/security/advisories/GHSA-jr5f-v2jv-69x6\n2. https://github.com/axios/axios/issues/6463", "creation_timestamp": "2025-03-07T15:35:16.000000Z"}, {"uuid": "ddd0ceb8-2105-414a-9430-905ee3fa6ae1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27600", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6736", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27600\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N)\n\ud83d\udd39 Description: FastGPT is a knowledge-based platform built on the LLMs. Since the web crawling plug-in does not perform intranet IP verification, an attacker can initiate an intranet IP request, causing the system to initiate a request through the intranet and potentially obtain some private data on the intranet. This issue is fixed in 4.9.0.\n\ud83d\udccf Published: 2025-03-06T19:05:59.684Z\n\ud83d\udccf Modified: 2025-03-06T19:05:59.684Z\n\ud83d\udd17 References:\n1. https://github.com/labring/FastGPT/security/advisories/GHSA-vc67-62v5-8cwx", "creation_timestamp": "2025-03-06T19:38:22.000000Z"}, {"uuid": "6c5f8ccc-5c50-4fa5-a6e3-9c0b7cdae308", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27644", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6685", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27644\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Local Privilege Escalation V-2024-007.\n\ud83d\udccf Published: 2025-03-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-06T15:19:27.928Z\n\ud83d\udd17 References:\n1. https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm", "creation_timestamp": "2025-03-06T16:07:04.000000Z"}, {"uuid": "e71bb47c-db71-4300-ac7f-14f33a6e585d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27623", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6710", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27623\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Jenkins 2.499 and earlier, LTS 2.492.1 and earlier does not redact encrypted values of secrets when accessing `config.xml` of views via REST API or CLI, allowing attackers with View/Read permission to view encrypted values of secrets.\n\ud83d\udccf Published: 2025-03-05T22:33:35.469Z\n\ud83d\udccf Modified: 2025-03-06T16:18:41.555Z\n\ud83d\udd17 References:\n1. https://www.jenkins.io/security/advisory/2025-03-05/#SECURITY-3496", "creation_timestamp": "2025-03-06T16:34:13.000000Z"}, {"uuid": "4bcf8465-cb6b-4c17-9b34-2880eb6c080b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27622", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6708", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27622\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Jenkins 2.499 and earlier, LTS 2.492.1 and earlier does not redact encrypted values of secrets when accessing `config.xml` of agents via REST API or CLI, allowing attackers with Agent/Extended Read permission to view encrypted values of secrets.\n\ud83d\udccf Published: 2025-03-05T22:33:34.766Z\n\ud83d\udccf Modified: 2025-03-06T16:19:56.244Z\n\ud83d\udd17 References:\n1. https://www.jenkins.io/security/advisory/2025-03-05/#SECURITY-3495", "creation_timestamp": "2025-03-06T16:34:08.000000Z"}, {"uuid": "fdefc272-0ce1-4180-96be-480280e9b569", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27822", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6895", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27822\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: An issue was discovered in the Masquerade module before 1.x-1.0.1 for Backdrop CMS. It allows people to temporarily switch to another user account. The module provides a \"Masquerade as admin\" permission to restrict people (who can masquerade) from switching to an account with administrative privileges. This permission is not always honored and may allow non-administrative users to masquerade as an administrator. This vulnerability is mitigated by the fact that an attacker must have a role with the \"Masquerade as user\" permission.\n\ud83d\udccf Published: 2025-03-07T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-07T22:29:21.287Z\n\ud83d\udd17 References:\n1. https://backdropcms.org/security/backdrop-sa-contrib-2025-006", "creation_timestamp": "2025-03-07T22:35:41.000000Z"}, {"uuid": "206c2311-3c39-4707-80cd-850b8605acf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27509", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6738", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27509\n\ud83d\udd25 CVSS Score: 9.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: fleetdm/fleet is an open source device management, built on osquery. In vulnerable versions of Fleet, an attacker could craft a specially-formed SAML response to forge authentication assertions, provision a new administrative user account if Just-In-Time (JIT) provisioning is enabled, or create new accounts tied to forged assertions if f MDM enrollment is enabled. This vulnerability is fixed in 4.64.2, 4.63.2, 4.62.4, and 4.58.1.\n\ud83d\udccf Published: 2025-03-06T19:00:36.098Z\n\ud83d\udccf Modified: 2025-03-06T19:00:36.098Z\n\ud83d\udd17 References:\n1. https://github.com/fleetdm/fleet/security/advisories/GHSA-52jx-g6m5-h735\n2. https://github.com/fleetdm/fleet/commit/718c95e47ad010ad6b8ceb3f3460e921fbfc53bb", "creation_timestamp": "2025-03-06T19:38:27.000000Z"}, {"uuid": "7064e5bc-7057-4f29-97f7-9422edde6356", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27411", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6774", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27411\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: REDAXO is a PHP-based CMS. In Redaxo before 5.18.3, the mediapool/media page is vulnerable to arbitrary file upload. This vulnerability is fixed in 5.18.3.\n\ud83d\udccf Published: 2025-03-05T15:42:29.888Z\n\ud83d\udccf Modified: 2025-03-06T22:00:09.152Z\n\ud83d\udd17 References:\n1. https://github.com/redaxo/redaxo/security/advisories/GHSA-wppf-gqj5-fc4f\n2. https://github.com/redaxo/redaxo/commit/3b2159bb45da0ab6cfaef5c8cf8b602ee5e2fb37", "creation_timestamp": "2025-03-06T22:33:44.000000Z"}, {"uuid": "814b2510-1ade-47b7-87a4-1dde3d67cef8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27824", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6892", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27824\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: An XSS issue was discovered in the Link iframe formatter module before 1.x-1.1.1 for Backdrop CMS. It doesn't sufficiently sanitize input before displaying results to the screen. This vulnerability is mitigated by the fact that an attacker must have the ability to create content containing an iFrame field.\n\ud83d\udccf Published: 2025-03-07T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-07T22:30:26.688Z\n\ud83d\udd17 References:\n1. https://backdropcms.org/security/backdrop-sa-contrib-2025-003", "creation_timestamp": "2025-03-07T22:35:39.000000Z"}, {"uuid": "34dbd245-cd8e-4f14-9de2-a56adea45a8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27598", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6771", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27598\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: ImageSharp is a 2D graphics API. An Out-of-bounds Write vulnerability has been found in the ImageSharp gif decoder, allowing attackers to cause a crash using a specially crafted gif. This can potentially lead to denial of service. The problem has been patched. All users are advised to upgrade to v3.1.7 or v2.1.10.\n\ud83d\udccf Published: 2025-03-06T22:23:39.486Z\n\ud83d\udccf Modified: 2025-03-06T22:23:39.486Z\n\ud83d\udd17 References:\n1. https://github.com/SixLabors/ImageSharp/security/advisories/GHSA-2cmq-823j-5qj8\n2. https://github.com/SixLabors/ImageSharp/issues/2859\n3. https://github.com/SixLabors/ImageSharp/pull/2890", "creation_timestamp": "2025-03-06T22:33:42.000000Z"}, {"uuid": "eb59828b-6a9a-4f62-8982-98391cf40d38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "exploited", "source": "https://t.me/DarkWebInformer_CVEAlerts/7135", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27363\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C/CR:H/IR:H/AR:H/MAV:N/MAC:L/MPR:N/MUI:N/MS:U/MC:H/MI:H/MA:H)\n\ud83d\udd39 Description: An out of bounds write exists in FreeType versions 2.13.0 and below when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value causing it to wrap around and allocate too small of a heap buffer. The code then writes up to 6 signed long integers out of bounds relative to this buffer. This may result in arbitrary code execution. This vulnerability may have been exploited in the wild.\n\ud83d\udccf Published: 2025-03-11T13:28:31.705Z\n\ud83d\udccf Modified: 2025-03-11T13:28:31.705Z\n\ud83d\udd17 References:\n1. https://www.facebook.com/security/advisories/cve-2025-27363", "creation_timestamp": "2025-03-11T13:39:52.000000Z"}, {"uuid": "6cdff207-bd4c-426d-b2a8-f59319fb897e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27816", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6823", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27816\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N)\n\ud83d\udd39 Description: A vulnerability was discovered in the Arctera InfoScale 7.0 through 8.0.2 where a .NET remoting endpoint can be exploited due to the insecure deserialization of potentially untrusted messages. The vulnerability is present in the Windows Plugin_Host service, which runs on all the servers where InfoScale is installed. The service is used only when applications are configured for Disaster Recovery (DR) using the DR wizard. Disabling the Plugin_Host service manually will eliminate the vulnerability.\n\ud83d\udccf Published: 2025-03-07T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-07T07:39:19.824Z\n\ud83d\udd17 References:\n1. https://www.veritas.com/content/support/en_US/security/ARC25-002", "creation_timestamp": "2025-03-07T08:35:13.000000Z"}, {"uuid": "8309f660-c3b2-4cdc-8b97-4c59712b0211", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27826", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6894", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27826\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: An XSS issue was discovered in the Bootstrap Lite theme before 1.x-1.4.5 for Backdrop CMS. It doesn't sufficiently sanitize certain class names.\n\ud83d\udccf Published: 2025-03-07T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-07T22:29:40.914Z\n\ud83d\udd17 References:\n1. https://backdropcms.org/security/backdrop-sa-core-2025-005", "creation_timestamp": "2025-03-07T22:35:41.000000Z"}, {"uuid": "292eb404-e3a1-4668-b304-c65bc9c5f006", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27607", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6850", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27607\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Python JSON Logger is a JSON Formatter for Python Logging. Between 30 December 2024 and 4 March 2025 Python JSON Logger was vulnerable to RCE through a missing dependency. This occurred because msgspec-python313-pre was deleted by the owner leaving the name open to being claimed by a third party. If the package was claimed, it would allow them RCE on any Python JSON Logger user who installed the development dependencies on Python 3.13 (e.g. pip install python-json-logger[dev]). This issue has been resolved with 3.3.0.\n\ud83d\udccf Published: 2025-03-07T16:18:13.789Z\n\ud83d\udccf Modified: 2025-03-07T16:18:13.789Z\n\ud83d\udd17 References:\n1. https://github.com/nhairs/python-json-logger/security/advisories/GHSA-wmxh-pxcx-9w24\n2. https://github.com/nhairs/python-json-logger/commit/2548e3a2e3cedf6bef3ee7c60c55b7c02d1af11a\n3. https://github.com/nhairs/python-json-logger/commit/e7761e56edb980cfab0165e32469d5fd017a5d72", "creation_timestamp": "2025-03-07T16:35:20.000000Z"}, {"uuid": "074e1093-6889-4023-95e8-61dbeadf7c29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6948", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27840\n\ud83d\udd25 CVSS Score: 6.8 (cvssV3_1, Vector: CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:L)\n\ud83d\udd39 Description: Espressif ESP32 chips allow 29 hidden HCI commands, such as 0xFC02 (Write memory).\n\ud83d\udccf Published: 2025-03-08T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-08T20:11:55.412Z\n\ud83d\udd17 References:\n1. https://github.com/TarlogicSecurity/Talks/blob/main/2025_RootedCon_BluetoothTools.pdf\n2. https://x.com/pascal_gujer/status/1898442439704158276\n3. https://www.tarlogic.com/news/backdoor-esp32-chip-infect-ot-devices/\n4. https://www.bleepingcomputer.com/news/security/undocumented-backdoor-found-in-bluetooth-chip-used-by-a-billion-devices/\n5. https://reg.rootedcon.com/cfp/schedule/talk/5", "creation_timestamp": "2025-03-08T20:41:50.000000Z"}, {"uuid": "96f33ef6-e5e5-42de-b875-903ac598bc1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27253", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6987", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27253\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L)\n\ud83d\udd39 Description: An improper input validation in GE Vernova UR IED family devices from version 7.0 up to 8.60 allows an attacker to provide input that enstablishes a TCP connection through a port forwarding. The lack of the IP address and port validation may allow the attacker to bypass firewall rules or to send malicious traffic in the network\n\ud83d\udccf Published: 2025-03-10T09:04:34.413Z\n\ud83d\udccf Modified: 2025-03-10T09:04:34.413Z\n\ud83d\udd17 References:\n1. https://www.gevernova.com/grid-solutions/app/DownloadFile.aspx?prod=urfamily&type=21&file=76", "creation_timestamp": "2025-03-10T09:41:32.000000Z"}, {"uuid": "00991e56-2c76-4a4e-ace0-ba745aaa322c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27254", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6986", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27254\n\ud83d\udd25 CVSS Score: 8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H)\n\ud83d\udd39 Description: Improper Authentication vulnerability in GE Vernova EnerVista UR Setup allows Authentication Bypass.\u00a0\nThe software's startup authentication can be disabled by altering a Windows registry setting that any user can modify.\n\ud83d\udccf Published: 2025-03-10T09:05:08.963Z\n\ud83d\udccf Modified: 2025-03-10T09:05:08.963Z\n\ud83d\udd17 References:\n1. https://www.gevernova.com/grid-solutions/app/DownloadFile.aspx?prod=urfamily&type=21&file=76", "creation_timestamp": "2025-03-10T09:41:28.000000Z"}, {"uuid": "2f35d463-7132-4e0f-bfc5-381fe6ec2a67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27255", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6985", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27255\n\ud83d\udd25 CVSS Score: 8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H)\n\ud83d\udd39 Description: Use of Hard-coded Credentials vulnerability in GE Vernova EnerVista UR Setup allows Privilege Escalation. The local user database is encrypted using an hardcoded password retrievable by an attacker analyzing the application code.\n\ud83d\udccf Published: 2025-03-10T09:05:17.222Z\n\ud83d\udccf Modified: 2025-03-10T09:05:17.222Z\n\ud83d\udd17 References:\n1. https://www.gevernova.com/grid-solutions/app/DownloadFile.aspx?prod=urfamily&type=21&file=76", "creation_timestamp": "2025-03-10T09:41:28.000000Z"}, {"uuid": "1d86602f-4078-41fb-8ce7-7f39cd3cd524", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27825", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6893", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27825\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: An XSS issue was discovered in the Bootstrap 5 Lite theme before 1.x-1.0.3 for Backdrop CMS. It doesn't sufficiently sanitize certain class names.\n\ud83d\udccf Published: 2025-03-07T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-07T22:30:03.942Z\n\ud83d\udd17 References:\n1. https://backdropcms.org/security/backdrop-sa-contrib-2025-004", "creation_timestamp": "2025-03-07T22:35:40.000000Z"}, {"uuid": "485e9539-2adb-4205-9165-271690086af4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27773", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7223", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27773\n\ud83d\udd25 CVSS Score: 8.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N)\n\ud83d\udd39 Description: The SimpleSAMLphp SAML2 library is a PHP library for SAML2 related functionality. Prior to versions 4.17.0 and 5.0.0-alpha.20, there is a signature confusion attack in the HTTPRedirect binding. An attacker with any signed SAMLResponse via the HTTP-Redirect binding can cause the application to accept an unsigned message. Versions 4.17.0 and 5.0.0-alpha.20 contain a fix for the issue.\n\ud83d\udccf Published: 2025-03-11T19:04:52.135Z\n\ud83d\udccf Modified: 2025-03-11T19:27:00.852Z\n\ud83d\udd17 References:\n1. https://github.com/simplesamlphp/saml2/security/advisories/GHSA-46r4-f8gj-xg56\n2. https://github.com/simplesamlphp/saml2/commit/7867d6099dc7f31bed1ea10e5bea159c5623d2a0\n3. https://github.com/simplesamlphp/saml2/blob/9545abd0d9d48388f2fa00469c5c1e0294f0303e/src/SAML2/HTTPRedirect.php#L104-L113\n4. https://github.com/simplesamlphp/saml2/blob/9545abd0d9d48388f2fa00469c5c1e0294f0303e/src/SAML2/HTTPRedirect.php#L178-L217", "creation_timestamp": "2025-03-11T20:21:09.000000Z"}, {"uuid": "b4ac097f-db44-43b8-a7ac-27d00e651936", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27519", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6901", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27519\n\ud83d\udd25 CVSS Score: 9.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Cognita is a RAG (Retrieval Augmented Generation) Framework for building modular, open source applications for production by TrueFoundry. A path traversal issue exists at /v1/internal/upload-to-local-directory which is enabled when the Local env variable is set to true, such as when Cognita is setup using Docker. Because the docker environment sets up the backend uvicorn server with auto reload enabled, when an attacker overwrites the /app/backend/__init__.py file, the file will automatically be reloaded and executed. This allows an attacker to get remote code execution in the context of the Docker container. This vulnerability is fixed in commit a78bd065e05a1b30a53a3386cc02e08c317d2243.\n\ud83d\udccf Published: 2025-03-07T15:36:34.819Z\n\ud83d\udccf Modified: 2025-03-07T21:48:51.891Z\n\ud83d\udd17 References:\n1. https://securitylab.github.com/advisories/GHSL-2024-193_GHSL-2024-194_Cognita/\n2. https://github.com/truefoundry/cognita/pull/393\n3. https://github.com/truefoundry/cognita/commit/a78bd065e05a1b30a53a3386cc02e08c317d2243", "creation_timestamp": "2025-03-07T22:35:52.000000Z"}, {"uuid": "3978e09a-0efe-4076-bd3b-3fc09bac4541", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27518", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6900", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27518\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N)\n\ud83d\udd39 Description: Cognita is a RAG (Retrieval Augmented Generation) Framework for building modular, open source applications for production by TrueFoundry. An insecure CORS configuration in the Cognita backend server allows arbitrary websites to send cross site requests to the application. This vulnerability is fixed in commit 75079c3d3cf376381489b9a82ee46c69024e1a15.\n\ud83d\udccf Published: 2025-03-07T15:36:48.366Z\n\ud83d\udccf Modified: 2025-03-07T21:49:40.505Z\n\ud83d\udd17 References:\n1. https://securitylab.github.com/advisories/GHSL-2024-193_GHSL-2024-194_Cognita/\n2. https://github.com/truefoundry/cognita/pull/424\n3. https://github.com/truefoundry/cognita/commit/75079c3d3cf376381489b9a82ee46c69024e1a15", "creation_timestamp": "2025-03-07T22:35:48.000000Z"}, {"uuid": "ac5faef0-3733-4c9e-afee-cce0f9f8cd96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27166", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7283", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27166\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\ud83d\udccf Published: 2025-03-11T17:43:21.562Z\n\ud83d\udccf Modified: 2025-03-12T04:01:00.413Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/indesign/apsb25-19.html", "creation_timestamp": "2025-03-12T04:43:16.000000Z"}, {"uuid": "8ac6303c-c650-4727-ab4d-0ad1ff0971c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27175", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7282", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27175\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\ud83d\udccf Published: 2025-03-11T17:43:20.698Z\n\ud83d\udccf Modified: 2025-03-12T04:01:02.120Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/indesign/apsb25-19.html", "creation_timestamp": "2025-03-12T04:43:15.000000Z"}, {"uuid": "5f24cf5a-af1d-4be0-bbd3-30283c4ffb01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27839", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7021", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27839\n\ud83d\udd25 CVSS Score: 3.2 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N)\n\ud83d\udd39 Description: operations/attestation/AttestationTask.kt in the Tangem SDK before 5.18.3 for Android has a logic flow in offline wallet attestation (genuineness check) that causes verification results to be disregarded during the first scan of a card. Exploitation may not have been possible.\n\ud83d\udccf Published: 2025-03-07T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-10T17:19:25.047Z\n\ud83d\udd17 References:\n1. https://tangem.com/en/blog/post/app-update/\n2. https://github.com/tangem/tangem-sdk-android/commit/24588188fdb51ed469cd59d2c595128c1fe63b07\n3. https://github.com/tangem/tangem-sdk-android/releases/tag/release-app_5.18-409", "creation_timestamp": "2025-03-10T17:38:18.000000Z"}, {"uuid": "b6029a49-ce60-4f2d-890f-1b93a86bc268", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27256", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6984", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27256\n\ud83d\udd25 CVSS Score: 8.3 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H)\n\ud83d\udd39 Description: Missing Authentication for Critical Function vulnerability in GE Vernova Enervista UR Setup application allows Authentication Bypass due to a missing SSH server authentication. Since the client connection is not authenticated, an attacker may perform a man-in-the-middle attack on the network.\n\ud83d\udccf Published: 2025-03-10T09:05:25.962Z\n\ud83d\udccf Modified: 2025-03-10T09:05:25.962Z\n\ud83d\udd17 References:\n1. https://www.gevernova.com/grid-solutions/app/DownloadFile.aspx?prod=urfamily&type=21&file=76", "creation_timestamp": "2025-03-10T09:41:27.000000Z"}, {"uuid": "bcc325a9-e3fc-4225-95da-bcc7fb764c99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27257", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6983", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27257\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H)\n\ud83d\udd39 Description: Insufficient Verification of Data Authenticity vulnerability in GE Vernova UR IED family devices allows an authenticated user to install a modified firmware.\nThe firmware signature verification is enforced only on the client-side dedicated software Enervista UR Setup, allowing the integration check to be bypassed.\n\ud83d\udccf Published: 2025-03-10T09:05:34.817Z\n\ud83d\udccf Modified: 2025-03-10T09:05:34.817Z\n\ud83d\udd17 References:\n1. https://www.gevernova.com/grid-solutions/app/DownloadFile.aspx?prod=urfamily&type=21&file=76", "creation_timestamp": "2025-03-10T09:41:26.000000Z"}, {"uuid": "0c626215-67ab-4b2a-a639-636b0ae673c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27912", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7120", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27912\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C)\n\ud83d\udd39 Description: An issue was discovered in Datalust Seq before 2024.3.13545. Missing Content-Type validation can lead to CSRF when (1) Entra ID or OpenID Connect authentication is in use and a user visits a compromised/malicious site, or (2) when username/password or Active Directory authentication is in use and a user visits a compromised/malicious site under the same effective top-level domain as the Seq server. Exploitation of the vulnerability allows the attacker to conduct impersonation attacks and perform actions in Seq on behalf of the targeted user.\n\ud83d\udccf Published: 2025-03-11T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-11T07:54:29.956Z\n\ud83d\udd17 References:\n1. https://datalust.co/seq\n2. https://github.com/datalust/seq-tickets/issues/2366", "creation_timestamp": "2025-03-11T08:38:55.000000Z"}, {"uuid": "761cc098-5e1f-434e-af90-a63e24070501", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27911", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7119", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27911\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:F/RL:O/RC:C)\n\ud83d\udd39 Description: An issue was discovered in Datalust Seq before 2024.3.13545. Expansion of identifiers in message templates can be used to bypass the system \"Event body limit bytes\" setting, leading to increased resource consumption. With sufficiently large events, there can be disk space exhaustion (if saved to disk) or a termination of the server process with an out-of-memory error.\n\ud83d\udccf Published: 2025-03-11T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-11T07:57:02.462Z\n\ud83d\udd17 References:\n1. https://datalust.co/seq\n2. https://github.com/datalust/seq-tickets/issues/2365", "creation_timestamp": "2025-03-11T08:38:55.000000Z"}, {"uuid": "f6b0e140-e4a4-43b9-8449-ed0ed7306d5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27615", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7041", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27615\n\ud83d\udd25 CVSS Score: 8.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H)\n\ud83d\udd39 Description: umatiGateway is software for connecting OPC Unified Architecture servers with an MQTT broker utilizing JSON messages. The user interface may possibly be publicly accessible with umatiGateway's provided docker-compose file. With this access, the configuration can be viewed and altered. Commit 5d81a3412bc0051754a3095d89a06d6d743f2b16 uses `127.0.0.1:8080:8080` to limit access to the local network. For those who are unable to use this proposed patch, a firewall on Port 8080 may block remote access, but the workaround may not be perfect because Docker may also bypass a firewall by its iptable based rules for port forwarding.\n\ud83d\udccf Published: 2025-03-10T18:47:59.819Z\n\ud83d\udccf Modified: 2025-03-10T19:05:29.676Z\n\ud83d\udd17 References:\n1. https://github.com/umati/umatiGateway/security/advisories/GHSA-qf9w-x9qx-2mq7\n2. https://github.com/umati/umatiGateway/pull/101\n3. https://github.com/umati/umatiGateway/commit/5d81a3412bc0051754a3095d89a06d6d743f2b16\n4. https://github.com/umati/umatiGateway/blob/abe73096a17307327f0d6dc0ed4db1fb93464521/README.md?plain=1#L34-L35", "creation_timestamp": "2025-03-10T19:38:33.000000Z"}, {"uuid": "024f9fcd-4915-4fda-86ff-90d8854f59a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27136", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7039", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27136\n\ud83d\udd25 CVSS Score: 5.5 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:P)\n\ud83d\udd39 Description: LocalS3 is an Amazon S3 mock service for testing and local development. Prior to version 1.21, the LocalS3 service's bucket creation endpoint is vulnerable to XML External Entity (XXE) injection. When processing the CreateBucketConfiguration XML document during bucket creation, the service's XML parser is configured to resolve external entities. This allows an attacker to declare an external entity that references an internal URL, which the server will then attempt to fetch when parsing the XML. The vulnerability specifically occurs in the location constraint processing, where the XML parser resolves external entities without proper validation or restrictions. When the external entity is resolved, the server makes an HTTP request to the specified URL and includes the response content in the parsed XML document. This vulnerability can be exploited to perform server-side request forgery (SSRF) attacks, allowing an attacker to make requests to internal services or resources that should not be accessible from external networks. The server will include the responses from these internal requests in the resulting bucket configuration, effectively leaking sensitive information. The attacker only needs to be able to send HTTP requests to the LocalS3 service to exploit this vulnerability.\n\ud83d\udccf Published: 2025-03-10T18:24:38.743Z\n\ud83d\udccf Modified: 2025-03-10T19:09:21.238Z\n\ud83d\udd17 References:\n1. https://github.com/Robothy/local-s3/security/advisories/GHSA-g6wm-2v64-wq36\n2. https://github.com/Robothy/local-s3/commit/d6ed756ceb30c1eb9d4263321ac683d734f8836f", "creation_timestamp": "2025-03-10T19:38:32.000000Z"}, {"uuid": "519c13cf-f0b2-48c6-b12d-b7a2c31477fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27616", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7043", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27616\n\ud83d\udd25 CVSS Score: 8.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: Vela is a Pipeline Automation (CI/CD) framework built on Linux container technology written in Golang. Prior to versions 0.25.3 and 0.26.3, by spoofing a webhook payload with a specific set of headers and body data, an attacker could transfer ownership of a repository and its repo level secrets to a separate repository. These secrets could be exfiltrated by follow up builds to the repository. Users with an enabled repository with access to repo level CI secrets in Vela are vulnerable to the exploit, and any user with access to the CI instance and the linked source control manager can perform the exploit. Versions 0.25.3 and 0.26.3 fix the issue. No known workarounds are available.\n\ud83d\udccf Published: 2025-03-10T18:56:14.537Z\n\ud83d\udccf Modified: 2025-03-10T18:56:14.537Z\n\ud83d\udd17 References:\n1. https://github.com/go-vela/server/security/advisories/GHSA-9m63-33q3-xq5x\n2. https://github.com/go-vela/server/commit/257886e5a3eea518548387885894e239668584f5\n3. https://github.com/go-vela/server/commit/67c1892e2464dc54b8d2588815dfb7819222500b\n4. https://github.com/go-vela/server/releases/tag/v0.25.3\n5. https://github.com/go-vela/server/releases/tag/v0.26.3", "creation_timestamp": "2025-03-10T19:38:38.000000Z"}, {"uuid": "04a23bf0-7f94-468b-b87a-7739a24aae64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27913", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7047", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27913\n\ud83d\udd25 CVSS Score: 2.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N)\n\ud83d\udd39 Description: Passbolt API before 5, if the server is misconfigured (with an incorrect installation process and disregarding of Health Check results), can send email messages with a domain name taken from an attacker-controlled HTTP Host header.\n\ud83d\udccf Published: 2025-03-10T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-10T20:09:31.240Z\n\ud83d\udd17 References:\n1. https://www.passbolt.com/incidents/host-header-injection", "creation_timestamp": "2025-03-10T20:38:51.000000Z"}, {"uuid": "477f0b18-4164-43f2-b7dd-339e0d521955", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27431", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7084", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27431\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: User management functionality in SAP NetWeaver Application Server Java is vulnerable to Stored Cross-Site Scripting (XSS). This could enable an attacker to inject malicious payload that gets stored and executed when a user accesses the functionality, hence leading to information disclosure or unauthorized data modifications within the scope of victim\ufffds browser. There is no impact on availability.\n\ud83d\udccf Published: 2025-03-11T00:37:35.111Z\n\ud83d\udccf Modified: 2025-03-11T00:37:35.111Z\n\ud83d\udd17 References:\n1. https://me.sap.com/notes/3567246\n2. https://url.sap/sapsecuritypatchday", "creation_timestamp": "2025-03-11T01:41:22.000000Z"}, {"uuid": "e0e92bc1-0536-497d-a060-6cc7cfd1c129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27433", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7082", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27433\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The Manage Bank Statements in SAP S/4HANA allows authenticated attacker to bypass certain functionality restrictions of the application and upload files to a reversed bank statement. This vulnerability has a low impact on the application's integrity, with no effect on confidentiality and availability of the application.\n\ud83d\udccf Published: 2025-03-11T00:38:50.716Z\n\ud83d\udccf Modified: 2025-03-11T00:38:51.032Z\n\ud83d\udd17 References:\n1. https://me.sap.com/notes/3565835\n2. https://url.sap/sapsecuritypatchday", "creation_timestamp": "2025-03-11T01:41:20.000000Z"}, {"uuid": "189e0a3b-dcdf-4603-8d77-9f97fe98c3a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27610", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7074", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27610\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: Rack provides an interface for developing web applications in Ruby. Prior to versions 2.2.13, 3.0.14, and 3.1.12, `Rack::Static` can serve files under the specified `root:` even if `urls:` are provided, which may expose other files under the specified `root:` unexpectedly. The vulnerability occurs because `Rack::Static` does not properly sanitize user-supplied paths before serving files. Specifically, encoded path traversal sequences are not correctly validated, allowing attackers to access files outside the designated static file directory. By exploiting this vulnerability, an attacker can gain access to all files under the specified `root:` directory, provided they are able to determine then path of the file. Versions 2.2.13, 3.0.14, and 3.1.12 contain a patch for the issue. Other mitigations include removing usage of `Rack::Static`, or ensuring that `root:` points at a directory path which only contains files which should be accessed publicly. It is likely that a CDN or similar static file server would also mitigate the issue.\n\ud83d\udccf Published: 2025-03-10T22:19:25.982Z\n\ud83d\udccf Modified: 2025-03-10T22:19:25.982Z\n\ud83d\udd17 References:\n1. https://github.com/rack/rack/security/advisories/GHSA-7wqh-767x-r66v\n2. https://github.com/rack/rack/commit/50caab74fa01ee8f5dbdee7bb2782126d20c6583", "creation_timestamp": "2025-03-10T22:40:19.000000Z"}, {"uuid": "f4e7f7c2-1537-4342-83f8-d22d21dbc7e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27434", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7081", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27434\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Due to insufficient input validation, SAP Commerce (Swagger UI) allows an unauthenticated attacker to inject the malicious code from remote sources, which can be leveraged by an attacker to execute a cross-site scripting (XSS) attack. This could lead to a high impact on the confidentiality, integrity, and availability of data in SAP Commerce.\n\ud83d\udccf Published: 2025-03-11T00:39:01.831Z\n\ud83d\udccf Modified: 2025-03-11T00:39:01.831Z\n\ud83d\udd17 References:\n1. https://me.sap.com/notes/3569602\n2. https://url.sap/sapsecuritypatchday", "creation_timestamp": "2025-03-11T01:41:16.000000Z"}, {"uuid": "8267d091-da1f-4e65-a32a-4a83dc3d68b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27436", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7080", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27436\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The Manage Bank Statements in SAP S/4HANA does not perform required access control checks for an authenticated user to confirm whether a request to interact with a resource is legitimate, allowing the attacker to delete the attachment of a posted bank statement. This leads to a low impact on integrity, with no impact on the confidentiality of the data or the availability of the application.\n\ud83d\udccf Published: 2025-03-11T00:39:14.372Z\n\ud83d\udccf Modified: 2025-03-11T00:39:14.372Z\n\ud83d\udd17 References:\n1. https://me.sap.com/notes/3565835\n2. https://url.sap/sapsecuritypatchday", "creation_timestamp": "2025-03-11T01:41:15.000000Z"}, {"uuid": "038961fb-e54b-48f0-b96c-3b2a6cb1d40f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27430", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7085", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27430\n\ud83d\udd25 CVSS Score: 3.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N)\n\ud83d\udd39 Description: Under certain conditions, an SSRF vulnerability in SAP CRM and SAP S/4HANA (Interaction Center) allows an attacker with low privileges to access restricted information. This flaw enables the attacker to send requests to internal network resources, thereby compromising the application's confidentiality. There is no impact on integrity or availability\n\ud83d\udccf Published: 2025-03-11T00:37:24.590Z\n\ud83d\udccf Modified: 2025-03-11T00:37:24.590Z\n\ud83d\udd17 References:\n1. https://me.sap.com/notes/3561861\n2. https://url.sap/sapsecuritypatchday", "creation_timestamp": "2025-03-11T01:41:22.000000Z"}, {"uuid": "8bc0b5db-5fe5-4bdc-97bc-8aa5d82db0fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2711", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8549", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2711\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in Yonyou UFIDA ERP-NC 5.0. It has been classified as problematic. Affected is an unknown function of the file /help/systop.jsp. The manipulation of the argument langcode leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-24T21:00:10.838Z\n\ud83d\udccf Modified: 2025-03-24T21:00:10.838Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300732\n2. https://vuldb.com/?ctiid.300732\n3. https://vuldb.com/?submit.517309\n4. https://github.com/Hebing123/cve/issues/86", "creation_timestamp": "2025-03-24T21:23:29.000000Z"}, {"uuid": "c8e2ebc3-7587-4416-9b25-d3ba644d23e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27407", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7367", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27407\n\ud83d\udd25 CVSS Score: 9.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: graphql-ruby is a Ruby implementation of GraphQL. Starting in version 1.11.5 and prior to versions 1.11.8, 1.12.25, 1.13.24, 2.0.32, 2.1.14, 2.2.17, and 2.3.21, loading a malicious schema definition in `GraphQL::Schema.from_introspection` (or `GraphQL::Schema::Loader.load`) can result in remote code execution. Any system which loads a schema by JSON from an untrusted source is vulnerable, including those that use GraphQL::Client to load external schemas via GraphQL introspection. Versions 1.11.8, 1.12.25, 1.13.24, 2.0.32, 2.1.14, 2.2.17, and 2.3.21 contain a patch for the issue.\n\ud83d\udccf Published: 2025-03-12T18:15:57.957Z\n\ud83d\udccf Modified: 2025-03-12T18:42:08.976Z\n\ud83d\udd17 References:\n1. https://github.com/rmosolgo/graphql-ruby/security/advisories/GHSA-q92j-grw3-h492\n2. https://github.com/rmosolgo/graphql-ruby/commit/28233b16c0eb9d0fb7808f4980e061dc7507c4cd\n3. https://github.com/rmosolgo/graphql-ruby/commit/2d2f4ed1f79472f8eed29c864b039649e1de238f\n4. https://github.com/rmosolgo/graphql-ruby/commit/5c5a7b9a9bdce143be048074aea50edb7bb747be\n5. https://github.com/rmosolgo/graphql-ruby/commit/6eca16b9fa553aa957099a30dbde64ddcdac52ca\n6. https://github.com/rmosolgo/graphql-ruby/commit/d0963289e0dab4ea893bbecf12bb7d89294957bb\n7. https://github.com/rmosolgo/graphql-ruby/commit/d1117ae0361d9ed67e0795b07f5c3e98e62f3c7c\n8. https://github.com/rmosolgo/graphql-ruby/commit/e3b33ace05391da2871c75ab4d3b66e29133b367\n9. https://github.com/github-community-projects/graphql-client", "creation_timestamp": "2025-03-12T19:41:15.000000Z"}, {"uuid": "98c79936-46b6-42f9-a0b0-524fd7f490dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27173", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7240", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27173\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Substance3D - Modeler versions 1.15.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\ud83d\udccf Published: 2025-03-11T20:11:52.152Z\n\ud83d\udccf Modified: 2025-03-11T20:11:52.152Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/substance3d-modeler/apsb25-21.html", "creation_timestamp": "2025-03-11T20:41:38.000000Z"}, {"uuid": "d0667e69-c2d3-46c5-b238-19814b1b1810", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27180", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7239", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27180\n\ud83d\udd25 CVSS Score: 5.5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: Substance3D - Modeler versions 1.15.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\ud83d\udccf Published: 2025-03-11T20:11:52.956Z\n\ud83d\udccf Modified: 2025-03-11T20:11:52.956Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/substance3d-modeler/apsb25-21.html", "creation_timestamp": "2025-03-11T20:41:37.000000Z"}, {"uuid": "43130fd3-747b-413a-b799-ca4f62878868", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27181", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7238", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27181\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Substance3D - Modeler versions 1.15.0 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\ud83d\udccf Published: 2025-03-11T20:11:53.741Z\n\ud83d\udccf Modified: 2025-03-11T20:11:53.741Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/substance3d-modeler/apsb25-21.html", "creation_timestamp": "2025-03-11T20:41:36.000000Z"}, {"uuid": "361a25fa-52b8-426b-8495-0c8a17fa611c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27101", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7246", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27101\n\ud83d\udd25 CVSS Score: 7.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:P)\n\ud83d\udd39 Description: Opal is OBiBa\u2019s core database application for biobanks or epidemiological studies. Prior to version 5.1.1, when copying any parent directory to a folder in the /temp/ directory, all files in that parent directory are copied, including files which the user should not have access to. All users of the application are impacted, as this is exploitable by any user to reveal all files in the opal filesystem. This also means that low-privilege users such as DataShield users can retrieve the files of other users. Version 5.1.1 contains a patch for the issue.\n\ud83d\udccf Published: 2025-03-11T21:32:48.746Z\n\ud83d\udccf Modified: 2025-03-11T21:32:48.746Z\n\ud83d\udd17 References:\n1. https://github.com/obiba/opal/security/advisories/GHSA-rxmx-gqjj-vhv8\n2. https://github.com/obiba/opal/commit/fca7dc9c8348064741b2e8b2c31b66660a935743", "creation_timestamp": "2025-03-11T21:39:49.000000Z"}, {"uuid": "8a73b925-cadf-4d32-b9e9-d5ed27b5289b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27403", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7151", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27403\n\ud83d\udd25 CVSS Score: 7.2 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:H/SA:L)\n\ud83d\udd39 Description: Ratify is a verification engine as a binary executable and on Kubernetes which enables verification of artifact security metadata and admits for deployment only those that comply with policies the user creates. In a Kubernetes environment, Ratify can be configured to authenticate to a private Azure Container Registry (ACR). The Azure workload identity and Azure managed identity authentication providers are configured in this setup. Users that configure a private ACR to be used with the Azure authentication providers may be impacted by a vulnerability that exists in versions prior to 1.2.3 and 1.3.2. Both Azure authentication providers attempt to exchange an Entra ID (EID) token for an ACR refresh token. However, Ratify\u2019s Azure authentication providers did not verify that the target registry is an ACR. This could have led to the EID token being presented to a non-ACR registry during token exchange. EID tokens with ACR access can potentially be extracted and abused if a user workload contains an image reference to a malicious registry. As of versions 1.2.3 and 1.3.2, the Azure workload identity and Azure managed identity authentication providers are updated to add new validation prior to EID token exchange. Validation relies upon registry domain validation against a pre-configured list of well-known ACR endpoints. EID token exchange will be executed only if at least one of the configured well-known domain suffixes (wildcard support included) matches the registry domain of the image reference.\n\ud83d\udccf Published: 2025-03-11T14:16:10.013Z\n\ud83d\udccf Modified: 2025-03-11T14:16:10.013Z\n\ud83d\udd17 References:\n1. https://github.com/ratify-project/ratify/security/advisories/GHSA-44f7-5fj5-h4px\n2. https://github.com/ratify-project/ratify/commit/0ec0c08490e3d672ae64b1a220c90d5484f1c93f\n3. https://github.com/ratify-project/ratify/commit/84c7c48fa76bb9a1c9583635d1e90bc25b1a546c", "creation_timestamp": "2025-03-11T14:39:46.000000Z"}, {"uuid": "222a5fd0-1866-4f20-b519-0b8e53e60929", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27172", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7164", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27172\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\ud83d\udccf Published: 2025-03-11T16:26:04.564Z\n\ud83d\udccf Modified: 2025-03-11T16:26:04.564Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/substance3d_designer/apsb25-22.html", "creation_timestamp": "2025-03-11T16:40:10.000000Z"}, {"uuid": "56fd3d57-7daa-4f79-aa9d-9f8112c022c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27178", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7278", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27178\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\ud83d\udccf Published: 2025-03-11T17:43:19.108Z\n\ud83d\udccf Modified: 2025-03-12T04:01:08.946Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/indesign/apsb25-19.html", "creation_timestamp": "2025-03-12T04:43:09.000000Z"}, {"uuid": "51778143-ceff-43ef-94bd-4a0e28a5a0bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27174", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7277", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27174\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\ud83d\udccf Published: 2025-03-11T18:10:13.126Z\n\ud83d\udccf Modified: 2025-03-12T04:01:10.179Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/acrobat/apsb25-14.html", "creation_timestamp": "2025-03-12T04:43:08.000000Z"}, {"uuid": "073f70ae-bec2-4a6d-b82a-da820832ba65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27177", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7280", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27177\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\ud83d\udccf Published: 2025-03-11T17:43:19.882Z\n\ud83d\udccf Modified: 2025-03-12T04:01:06.382Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/indesign/apsb25-19.html", "creation_timestamp": "2025-03-12T04:43:10.000000Z"}, {"uuid": "e1a132ff-0bac-4ce2-a630-2a23d0bfd64a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27164", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7271", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27164\n\ud83d\udd25 CVSS Score: 5.5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\ud83d\udccf Published: 2025-03-11T18:10:14.018Z\n\ud83d\udccf Modified: 2025-03-12T04:01:20.798Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/acrobat/apsb25-14.html", "creation_timestamp": "2025-03-12T04:43:00.000000Z"}, {"uuid": "5a32b0c8-6e92-4ff5-9e4c-d3111f3570ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27158", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7269", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27158\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\ud83d\udccf Published: 2025-03-11T18:10:15.676Z\n\ud83d\udccf Modified: 2025-03-12T04:01:25.096Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/acrobat/apsb25-14.html", "creation_timestamp": "2025-03-12T04:42:56.000000Z"}, {"uuid": "2ffc247a-8134-413c-867c-2e277d18a2ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27162", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7268", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27162\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\ud83d\udccf Published: 2025-03-11T18:10:12.272Z\n\ud83d\udccf Modified: 2025-03-12T04:01:26.558Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/acrobat/apsb25-14.html", "creation_timestamp": "2025-03-12T04:42:55.000000Z"}, {"uuid": "d17988a0-c941-4d40-9242-8cba61c329d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27914", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7306", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27914\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0 and 10.1. A Reflected Cross-Site Scripting (XSS) vulnerability exists in the /h/rest endpoint, allowing authenticated attackers to inject and execute arbitrary JavaScript in a victim's session. Exploitation requires a valid auth token and involves a crafted URL with manipulated query parameters that triggers XSS when accessed by a victim.\n\ud83d\udccf Published: 2025-03-12T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-12T14:26:03.568Z\n\ud83d\udd17 References:\n1. https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy\n2. https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.11#Security_Fixes", "creation_timestamp": "2025-03-12T14:40:40.000000Z"}, {"uuid": "52823b01-86eb-40ce-8222-8dd8f61b205d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27160", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7276", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27160\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\ud83d\udccf Published: 2025-03-11T18:10:11.438Z\n\ud83d\udccf Modified: 2025-03-12T04:01:11.572Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/acrobat/apsb25-14.html", "creation_timestamp": "2025-03-12T04:43:07.000000Z"}, {"uuid": "efb2d838-7cdd-4b56-97d1-3a6bf95e5379", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27159", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7275", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27159\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\ud83d\udccf Published: 2025-03-11T18:10:10.399Z\n\ud83d\udccf Modified: 2025-03-12T04:01:12.931Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/acrobat/apsb25-14.html", "creation_timestamp": "2025-03-12T04:43:03.000000Z"}, {"uuid": "107522a4-9829-44ab-834d-3adc982973d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27161", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7274", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27161\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\ud83d\udccf Published: 2025-03-11T18:10:14.806Z\n\ud83d\udccf Modified: 2025-03-12T04:01:14.294Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/acrobat/apsb25-14.html", "creation_timestamp": "2025-03-12T04:43:03.000000Z"}, {"uuid": "a4abeb25-da24-4c0e-a5fd-04ebe5079f03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27688", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8022", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27688\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Dell ThinOS 2408 and prior, contains an improper permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.\n\ud83d\udccf Published: 2025-03-18T15:55:44.470Z\n\ud83d\udccf Modified: 2025-03-19T03:55:50.783Z\n\ud83d\udd17 References:\n1. https://www.dell.com/support/kbdoc/en-us/000289886/dsa-2025-107", "creation_timestamp": "2025-03-19T04:48:49.000000Z"}, {"uuid": "f363a08b-0c26-45e5-87e3-a5dfe7aa5d15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27593", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7549", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27593\n\ud83d\udd25 CVSS Score: 9.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N)\n\ud83d\udd39 Description: The product can be used to distribute malicious code using SDD Device Drivers due to missing download verification checks, leading to code execution on target systems.\n\ud83d\udccf Published: 2025-03-14T12:46:58.946Z\n\ud83d\udccf Modified: 2025-03-14T13:36:49.059Z\n\ud83d\udd17 References:\n1. https://sick.com/psirt\n2. https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF\n3. https://www.cisa.gov/resources-tools/resources/ics-recommended-practices\n4. https://www.first.org/cvss/calculator/3.1\n5. https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0004.pdf\n6. https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0004.json\n7. https://github.security.telekom.com/2025/03/multiple-vulnerabilities-in-sick-dl100.html", "creation_timestamp": "2025-03-14T13:47:13.000000Z"}, {"uuid": "fb362e10-0895-42d2-87cd-1c1be14740c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27595", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7552", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27595\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The device uses a weak hashing alghorithm to create the password hash. Hence, a matching password can be easily calculated by an attacker. This impacts the security and the integrity of the device.\n\ud83d\udccf Published: 2025-03-14T12:53:13.682Z\n\ud83d\udccf Modified: 2025-03-14T13:35:00.490Z\n\ud83d\udd17 References:\n1. https://sick.com/psirt\n2. https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF\n3. https://www.cisa.gov/resources-tools/resources/ics-recommended-practices\n4. https://www.first.org/cvss/calculator/3.1\n5. https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0004.pdf\n6. https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0004.json\n7. https://github.security.telekom.com/2025/03/multiple-vulnerabilities-in-sick-dl100.html", "creation_timestamp": "2025-03-14T13:47:27.000000Z"}, {"uuid": "0ba06527-317c-4dfb-8a82-06e12f29885b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27594", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7551", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27594\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The device uses an unencrypted, proprietary protocol for communication. Through this protocol, configuration data is transmitted and device authentication is performed. An attacker can thereby intercept the authentication hash and use it to log into the device using a pass-the-hash attack.\n\ud83d\udccf Published: 2025-03-14T12:50:15.198Z\n\ud83d\udccf Modified: 2025-03-14T13:35:28.200Z\n\ud83d\udd17 References:\n1. https://sick.com/psirt\n2. https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF\n3. https://www.cisa.gov/resources-tools/resources/ics-recommended-practices\n4. https://www.first.org/cvss/calculator/3.1\n5. https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0004.pdf\n6. https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0004.json\n7. https://github.security.telekom.com/2025/03/multiple-vulnerabilities-in-sick-dl100.html", "creation_timestamp": "2025-03-14T13:47:19.000000Z"}, {"uuid": "899b236a-136f-4b12-bbab-5480bb8c8e2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27017", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7333", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27017\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/S:P/AU:Y/R:U/V:C/RE:L/U:Green)\n\ud83d\udd39 Description: Apache NiFi 1.13.0 through 2.2.0 includes the username and password used to authenticate with MongoDB in the NiFi provenance events that MongoDB components generate during processing. An authorized user with read access to the provenance events of those processors may see the credentials information. Upgrading to Apache NiFi 2.3.0 is the recommended mitigation, which removes the credentials from provenance event records.\n\ud83d\udccf Published: 2025-03-12T16:19:45.206Z\n\ud83d\udccf Modified: 2025-03-12T16:19:45.206Z\n\ud83d\udd17 References:\n1. https://lists.apache.org/thread/d4n5474jkhp82dvnht13pjtlfx7bhn5q", "creation_timestamp": "2025-03-12T16:41:12.000000Z"}, {"uuid": "4b79a87c-96fc-4c2e-baf7-570ecf948eb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27169", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7400", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27169\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Illustrator versions 29.2.1, 28.7.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\ud83d\udccf Published: 2025-03-11T18:00:30.150Z\n\ud83d\udccf Modified: 2025-03-13T03:55:15.395Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/illustrator/apsb25-17.html", "creation_timestamp": "2025-03-13T04:42:18.000000Z"}, {"uuid": "ccb78ef1-6c22-4754-a0c4-9220f6afed10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27002", "type": "seen", "source": "Telegram/jXqh7iGd3nKmZccxZRIgdWFEyhTj1-aVjALGGvD6hr5r9pg", "content": "", "creation_timestamp": "2026-01-08T17:13:43.000000Z"}, {"uuid": "8506f803-3f67-4ecf-8ca5-69ab41a9b87a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7406", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-29891\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Bypass/Injection vulnerability in Apache Camel.\n\nThis issue affects Apache Camel: from 4.10.0 before 4.10.2, from 4.8.0 before 4.8.5, from 3.10.0 before 3.22.4.\n\nUsers are recommended to upgrade to version 4.10.2 for 4.10.x LTS, 4.8.5 for 4.8.x LTS and 3.22.4 for 3.x releases.\n\nThis vulnerability is present in Camel's default incoming header filter, that allows an attacker to include Camel specific headers that for some Camel components can alter the behaviours such as the camel-bean component, or the camel-exec component.\n\nIf you have Camel applications that are directly connected to the internet via HTTP, then an attacker\u00a0could include parameters in the HTTP requests that are sent to the Camel application that get translated into headers.\u00a0\n\nThe headers could be both provided as request parameters for an HTTP methods invocation or as part of the payload of the HTTP methods invocation.\n\nAll the known Camel HTTP component such as camel-servlet, camel-jetty, camel-undertow, camel-platform-http, and camel-netty-http would be vulnerable out of the box.\n\nThis CVE is related to the CVE-2025-27636: while they have the same root cause and are fixed with the same fix, CVE-2025-27636 was assumed to only be exploitable if an attacker could add malicious HTTP headers, while we have now determined that it is also exploitable via HTTP parameters. Like in CVE-2025-27636, exploitation is only possible if the Camel route uses particular vulnerable components.\n\ud83d\udccf Published: 2025-03-12T14:42:59.644Z\n\ud83d\udccf Modified: 2025-03-13T08:22:07.519Z\n\ud83d\udd17 References:\n1. https://camel.apache.org/security/CVE-2025-27636.html\n2. https://camel.apache.org/security/CVE-2025-29891.html", "creation_timestamp": "2025-03-13T08:46:02.000000Z"}, {"uuid": "9db119fe-aeef-4234-bc36-2b07e483ff3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27002", "type": "published-proof-of-concept", "source": "Telegram/4pwzrJnceRLyEgpbd6VO8VdJVifSdOcVQ4b7TmcAbl02Blg", "content": "", "creation_timestamp": "2026-01-08T17:13:19.000000Z"}, {"uuid": "fd303792-b94d-4b94-b9bb-9406f877a5d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27004", "type": "seen", "source": "Telegram/jXqh7iGd3nKmZccxZRIgdWFEyhTj1-aVjALGGvD6hr5r9pg", "content": "", "creation_timestamp": "2026-01-08T17:13:43.000000Z"}, {"uuid": "361d986b-5e5c-400b-87b1-d5182f2e4d00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27281", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7807", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27281\n\ud83d\udd25 CVSS Score: 8.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in cookforweb All In Menu allows Blind SQL Injection. This issue affects All In Menu: from n/a through 1.1.5.\n\ud83d\udccf Published: 2025-03-15T21:57:04.049Z\n\ud83d\udccf Modified: 2025-03-17T16:09:21.936Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/all-in-menu/vulnerability/wordpress-all-in-menu-plugin-1-1-5-sql-injection-vulnerability?_s_id=cve", "creation_timestamp": "2025-03-17T16:47:49.000000Z"}, {"uuid": "ee999f5a-585b-466e-bdbd-ed764ffed32a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27102", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7767", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27102\n\ud83d\udd25 CVSS Score: 5.4 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:P)\n\ud83d\udd39 Description: Agate is central authentication server software for OBiBa epidemiology applications. Prior to version 3.3.0, when registering for an Agate account, arbitrary HTML code can be injected into a user's first and last name. This HTML is then rendered in the email sent to administrative users. The Agate service account sends this email and appears trustworthy, making this a significant risk for phishing attacks. Administrative users are impacted, as they can be targeted by unauthenticated users. Version 3.3.0 fixes the issue.\n\ud83d\udccf Published: 2025-03-17T13:11:53.696Z\n\ud83d\udccf Modified: 2025-03-17T13:31:23.176Z\n\ud83d\udd17 References:\n1. https://github.com/obiba/agate/security/advisories/GHSA-v3wj-7vj5-xj5v\n2. https://github.com/obiba/agate/releases/tag/3.3.0", "creation_timestamp": "2025-03-17T13:46:59.000000Z"}, {"uuid": "30e9ce77-8101-4a51-a2aa-cfd836fbe9e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27080", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7977", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27080\n\ud83d\udd25 CVSS Score: 6 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N)\n\ud83d\udd39 Description: Vulnerabilities in the command line interface of AOS-CX could allow an authenticated remote attacker to expose sensitive information. Successful exploitation could allow an attacker to gain unauthorized access to services outside of the impacted switch, potentially leading to lateral movement involving those services.\n\ud83d\udccf Published: 2025-03-18T19:02:30.151Z\n\ud83d\udccf Modified: 2025-03-18T19:32:15.822Z\n\ud83d\udd17 References:\n1. https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04818en_us&docLocale=en_US", "creation_timestamp": "2025-03-18T19:48:50.000000Z"}, {"uuid": "987b0b60-f58e-4021-ba4a-54138cd9b722", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27784", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8165", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27774\n\ud83d\udd25 CVSS Score: 8.8 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:P)\n\ud83d\udd39 Description: Applio is a voice conversion tool. Versions 3.2.7 and prior are vulnerable to server-side request forgery (SSRF) and file write in `model_download.py` (line 156 in 3.2.7). The blind SSRF allows for sending requests on behalf of Applio server and can be leveraged to probe for other vulnerabilities on the server itself or on other back-end systems on the internal network, that the Applio server can reach. The blind SSRF can also be coupled with the an arbitrary file read (e.g., CVE-2025-27784) to read files from hosts on the internal network, that the Applio server can reach, which would make it a full SSRF. The file write allows for writing files on the server, which can be coupled with other vulnerabilities, for example an unsafe deserialization, to achieve remote code execution on the Applio server. As of time of publication, no known patches are available.\n\ud83d\udccf Published: 2025-03-19T20:42:56.129Z\n\ud83d\udccf Modified: 2025-03-19T20:42:56.129Z\n\ud83d\udd17 References:\n1. https://securitylab.github.com/advisories/GHSL-2024-341_GHSL-2024-353_Applio/\n2. https://github.com/IAHispano/Applio/blob/29b4a00e4be209f9aac51cd9ccffcc632dfb2973/assets/flask/routes.py#L14\n3. https://github.com/IAHispano/Applio/blob/29b4a00e4be209f9aac51cd9ccffcc632dfb2973/rvc/lib/tools/model_download.py#L143\n4. https://github.com/IAHispano/Applio/blob/29b4a00e4be209f9aac51cd9ccffcc632dfb2973/rvc/lib/tools/model_download.py#L147-L148\n5. https://github.com/IAHispano/Applio/blob/29b4a00e4be209f9aac51cd9ccffcc632dfb2973/tabs/download/download.py#L192-L196", "creation_timestamp": "2025-03-19T21:18:41.000000Z"}, {"uuid": "236effc4-0de6-400f-9c3f-0232a6d690f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27704", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8121", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27704\n\ud83d\udd25 CVSS Score: 5.5 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: There is a cross-site scripting vulnerability in the Secure\nAccess administrative console of Absolute Secure Access prior to version 13.53.\nAttackers with system administrator permissions can interfere with another\nsystem administrator\u2019s use of the management console when the second\nadministrator logs in.  Attack complexity is high, attack requirements are\npresent, privileges required are none, user interaction is required. The impact\nto confidentiality is low, the impact to availability is none, and the impact\nto system integrity is none.\n\ud83d\udccf Published: 2025-03-19T19:08:26.262Z\n\ud83d\udccf Modified: 2025-03-19T19:12:58.341Z\n\ud83d\udd17 References:\n1. https://www.absolute.com/platform/security-information/vulnerability-archive/secure-access-1353/", "creation_timestamp": "2025-03-19T19:18:14.000000Z"}, {"uuid": "6516ca4a-7199-49b4-bd74-1d8a35c28a53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27705", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8134", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27705\n\ud83d\udd25 CVSS Score: 5.5 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: There is a cross-site scripting vulnerability in the Secure\nAccess administrative console of Absolute Secure Access prior to version 13.53.\nAttackers with system administrator permissions can interfere with another\nsystem administrator\u2019s use of the management console when the second\nadministrator logs in.  Attack complexity is high, attack requirements are\npresent, privileges required are none, user interaction is required. The impact\nto confidentiality is low, the impact to availability is none, and the impact\nto system integrity is none.\n\ud83d\udccf Published: 2025-03-19T19:15:08.265Z\n\ud83d\udccf Modified: 2025-03-19T20:06:42.594Z\n\ud83d\udd17 References:\n1. https://www.absolute.com/platform/security-information/vulnerability-archive/secure-access-1353/", "creation_timestamp": "2025-03-19T20:18:00.000000Z"}, {"uuid": "b9c1e224-d722-4b7b-abd0-6a85023fa615", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27415", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8125", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27415\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: Nuxt is an open-source web development framework for Vue.js. Prior to 3.16.0, by sending a crafted HTTP request to a server behind an CDN, it is possible in some circumstances to poison the CDN cache and highly impacts the availability of a site. It is possible to craft a request, such as https://mysite.com/?/_payload.json which will be rendered as JSON. If the CDN in front of a Nuxt site ignores the query string when determining whether to cache a route, then this JSON response could be served to future visitors to the site. An attacker can perform this attack to a vulnerable site in order to make a site unavailable indefinitely. It is also possible in the case where the cache will be reset to make a small script to send a request each X seconds (=caching duration) so that the cache is permanently poisoned making the site completely unavailable. This vulnerability is fixed in 3.16.0.\n\ud83d\udccf Published: 2025-03-19T19:02:04.824Z\n\ud83d\udccf Modified: 2025-03-19T19:02:04.824Z\n\ud83d\udd17 References:\n1. https://github.com/nuxt/nuxt/security/advisories/GHSA-jvhm-gjrh-3h93", "creation_timestamp": "2025-03-19T19:18:19.000000Z"}, {"uuid": "c183e675-3a0d-4e07-b1ac-6aa9be450763", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27785", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8157", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27785\n\ud83d\udd25 CVSS Score: 7.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P)\n\ud83d\udd39 Description: Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to arbitrary file read in train.py's `export_index` function. This issue may lead to reading arbitrary files on the Applio server. It can also be used in conjunction with blind server-side request forgery to read files from servers on the internal network that the Applio server has access to. As of time of publication, no known patches are available.\n\ud83d\udccf Published: 2025-03-19T20:35:10.662Z\n\ud83d\udccf Modified: 2025-03-19T20:47:30.839Z\n\ud83d\udd17 References:\n1. https://securitylab.github.com/advisories/GHSL-2024-341_GHSL-2024-353_Applio/\n2. https://github.com/IAHispano/Applio/blob/29b4a00e4be209f9aac51cd9ccffcc632dfb2973/tabs/train/train.py#L273\n3. https://github.com/IAHispano/Applio/blob/29b4a00e4be209f9aac51cd9ccffcc632dfb2973/tabs/train/train.py#L816", "creation_timestamp": "2025-03-19T21:18:27.000000Z"}, {"uuid": "585d2997-2909-4bd5-8fd5-7804f6c16c2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27781", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8156", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27781\n\ud83d\udd25 CVSS Score: 8.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P)\n\ud83d\udd39 Description: Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to unsafe deserialization in inference.py. `model_file` in inference.py as well as `model_file` in tts.py take user-supplied input (e.g. a path to a model) and pass that value to the `change_choices` and later to `get_speakers_id` function, which loads that model with `torch.load` in inference.py (line 326 in 3.2.8-bugfix), which is vulnerable to unsafe deserialization. The issue can lead to remote code execution. A patch is available on the `main` branch of the repository.\n\ud83d\udccf Published: 2025-03-19T20:22:38.448Z\n\ud83d\udccf Modified: 2025-03-19T20:48:03.243Z\n\ud83d\udd17 References:\n1. https://securitylab.github.com/advisories/GHSL-2024-341_GHSL-2024-353_Applio/\n2. https://github.com/IAHispano/Applio/commit/eb21d9dd349a6ae1a28c440b30d306eafba65097\n3. https://github.com/IAHispano/Applio/blob/29b4a00e4be209f9aac51cd9ccffcc632dfb2973/tabs/inference/inference.py#L325\n4. https://github.com/IAHispano/Applio/blob/29b4a00e4be209f9aac51cd9ccffcc632dfb2973/tabs/inference/inference.py#L338-L345\n5. https://github.com/IAHispano/Applio/blob/29b4a00e4be209f9aac51cd9ccffcc632dfb2973/tabs/tts/tts.py#L50-L57", "creation_timestamp": "2025-03-19T21:18:27.000000Z"}, {"uuid": "fa0c313e-c51c-41b7-b63e-31582b68e1ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27784", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8260", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27776\n\ud83d\udd25 CVSS Score: 8.8 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:P)\n\ud83d\udd39 Description: Applio is a voice conversion tool. Versions 3.2.7 and prior are vulnerable to server-side request forgery (SSRF) and file write in `model_download.py` (line 240 in 3.2.7). The blind SSRF allows for sending requests on behalf of Applio server and can be leveraged to probe for other vulnerabilities on the server itself or on other back-end systems on the internal network, that the Applio server can reach. The blind SSRF can also be coupled with the arbitrary file read CVE-2025-27784 to read files from hosts on the internal network, that the Applio server can reach, which would make it a full SSRF. The file write allows for writing files on the server, which can be coupled with other vulnerabilities, for example an unsafe deserialization, to achieve remote code execution on the Applio server. As of time of publication, no known patches are available.\n\ud83d\udccf Published: 2025-03-19T20:42:38.780Z\n\ud83d\udccf Modified: 2025-03-20T19:10:17.135Z\n\ud83d\udd17 References:\n1. https://securitylab.github.com/advisories/GHSL-2024-341_GHSL-2024-353_Applio/\n2. https://github.com/IAHispano/Applio/blob/29b4a00e4be209f9aac51cd9ccffcc632dfb2973/assets/flask/routes.py#L14\n3. https://github.com/IAHispano/Applio/blob/29b4a00e4be209f9aac51cd9ccffcc632dfb2973/rvc/lib/tools/model_download.py#L240\n4. https://github.com/IAHispano/Applio/blob/29b4a00e4be209f9aac51cd9ccffcc632dfb2973/tabs/download/download.py#L192-L196", "creation_timestamp": "2025-03-20T19:18:21.000000Z"}, {"uuid": "b2d7a9dd-ecbd-4474-b904-d67ff0b59534", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2715", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8568", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2715\n\ud83d\udd25 CVSS Score: 5.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as problematic has been found in timschofield webERP up to 5.0.0.rc+13. This affects an unknown part of the file ConfirmDispatch_Invoice.php of the component Confirm Dispatch and Invoice Page. The manipulation of the argument Narrative leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-24T22:31:04.189Z\n\ud83d\udccf Modified: 2025-03-24T22:31:04.189Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300735\n2. https://vuldb.com/?ctiid.300735\n3. https://vuldb.com/?submit.519791\n4. https://github.com/janssensjelle/published-pocs/blob/main/weberp-xss-confirm-dispatch.md", "creation_timestamp": "2025-03-24T23:23:28.000000Z"}, {"uuid": "8d615d9a-7a6a-46a3-819b-3930a2baacd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2716", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8567", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2716\n\ud83d\udd25 CVSS Score: 5.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as problematic was found in China Mobile P22g-CIac 1.0.00.488. This vulnerability affects unknown code of the component Samba Path Handler. The manipulation leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-24T23:00:07.183Z\n\ud83d\udccf Modified: 2025-03-24T23:00:07.183Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300736\n2. https://vuldb.com/?ctiid.300736\n3. https://vuldb.com/?submit.519900\n4. https://github.com/rookiiiiiiie/China-Mobile-Internet-of-Things-Co.-Ltd./blob/main/Issues.md", "creation_timestamp": "2025-03-24T23:23:27.000000Z"}, {"uuid": "ce4a6469-2168-4173-81c8-9cb5bd11ad98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27775", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8261", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27775\n\ud83d\udd25 CVSS Score: 8.8 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:P)\n\ud83d\udd39 Description: Applio is a voice conversion tool. Versions 3.2.7 and prior are vulnerable to server-side request forgery (SSRF) and file write in `model_download.py` (line 143 in 3.2.7). The blind SSRF allows for sending requests on behalf of Applio server and can be leveraged to probe for other vulnerabilities on the server itself or on other back-end systems on the internal network, that the Applio server can reach. The file write allows for writing files on the server, which can be coupled with other vulnerabilities, for example an unsafe deserialization, to achieve remote code execution on the Applio server. As of time of publication, no known patches are available.\n\ud83d\udccf Published: 2025-03-19T20:42:47.335Z\n\ud83d\udccf Modified: 2025-03-20T19:09:55.498Z\n\ud83d\udd17 References:\n1. https://securitylab.github.com/advisories/GHSL-2024-341_GHSL-2024-353_Applio/\n2. https://github.com/IAHispano/Applio/blob/29b4a00e4be209f9aac51cd9ccffcc632dfb2973/assets/flask/routes.py#L14\n3. https://github.com/IAHispano/Applio/blob/29b4a00e4be209f9aac51cd9ccffcc632dfb2973/rvc/lib/tools/model_download.py#L156\n4. https://github.com/IAHispano/Applio/blob/29b4a00e4be209f9aac51cd9ccffcc632dfb2973/rvc/lib/tools/model_download.py#L169-L171\n5. https://github.com/IAHispano/Applio/blob/29b4a00e4be209f9aac51cd9ccffcc632dfb2973/tabs/download/download.py#L192-L196", "creation_timestamp": "2025-03-20T19:18:22.000000Z"}, {"uuid": "18986f4b-b609-4f50-88f0-23a852dd5429", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27776", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8260", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27776\n\ud83d\udd25 CVSS Score: 8.8 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:P)\n\ud83d\udd39 Description: Applio is a voice conversion tool. Versions 3.2.7 and prior are vulnerable to server-side request forgery (SSRF) and file write in `model_download.py` (line 240 in 3.2.7). The blind SSRF allows for sending requests on behalf of Applio server and can be leveraged to probe for other vulnerabilities on the server itself or on other back-end systems on the internal network, that the Applio server can reach. The blind SSRF can also be coupled with the arbitrary file read CVE-2025-27784 to read files from hosts on the internal network, that the Applio server can reach, which would make it a full SSRF. The file write allows for writing files on the server, which can be coupled with other vulnerabilities, for example an unsafe deserialization, to achieve remote code execution on the Applio server. As of time of publication, no known patches are available.\n\ud83d\udccf Published: 2025-03-19T20:42:38.780Z\n\ud83d\udccf Modified: 2025-03-20T19:10:17.135Z\n\ud83d\udd17 References:\n1. https://securitylab.github.com/advisories/GHSL-2024-341_GHSL-2024-353_Applio/\n2. https://github.com/IAHispano/Applio/blob/29b4a00e4be209f9aac51cd9ccffcc632dfb2973/assets/flask/routes.py#L14\n3. https://github.com/IAHispano/Applio/blob/29b4a00e4be209f9aac51cd9ccffcc632dfb2973/rvc/lib/tools/model_download.py#L240\n4. https://github.com/IAHispano/Applio/blob/29b4a00e4be209f9aac51cd9ccffcc632dfb2973/tabs/download/download.py#L192-L196", "creation_timestamp": "2025-03-20T19:18:21.000000Z"}, {"uuid": "cd868ac1-4a5f-4499-a5f8-ec01286bb65c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2749", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8502", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2749\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: An authenticated remote code execution in Kentico Xperience allows authenticated users Staging Sync Server to upload arbitrary data to path relative locations. This results in path traversal and arbitrary file upload, including content that can be executed server side leading to remote code execution.This issue affects Kentico Xperience through 13.0.178.\n\ud83d\udccf Published: 2025-03-24T18:18:07.228Z\n\ud83d\udccf Modified: 2025-03-24T19:16:31.029Z\n\ud83d\udd17 References:\n1. https://labs.watchtowr.com/bypassing-authentication-like-its-the-90s-pre-auth-rce-chain-s-in-kentico-xperience-cms/\n2. https://devnet.kentico.com/download/hotfixes", "creation_timestamp": "2025-03-24T19:23:08.000000Z"}, {"uuid": "bcb6b76c-76db-45f9-8d20-5b9bef5f52fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2714", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8564", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2714\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in JoomlaUX JUX Real Estate 3.4.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /extensions/realestate/index.php/agents/agent-register/addagent. The manipulation of the argument plan_id leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-24T22:00:07.642Z\n\ud83d\udccf Modified: 2025-03-24T22:00:07.642Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300734\n2. https://vuldb.com/?ctiid.300734\n3. https://vuldb.com/?submit.517638", "creation_timestamp": "2025-03-24T22:23:44.000000Z"}, {"uuid": "6d3a1fa3-ff60-48a4-be5d-583f1ef94dbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27867", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8449", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27867\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Felix HTTP Webconsole Plugin.\n\nThis issue affects Apache Felix HTTP Webconsole Plugin: from Version 1.X through 1.2.0.\n\nUsers are recommended to upgrade to version 1.2.2, which fixes the issue.\n\ud83d\udccf Published: 2025-03-12T15:51:24.965Z\n\ud83d\udccf Modified: 2025-03-21T20:36:57.712Z\n\ud83d\udd17 References:\n1. https://lists.apache.org/thread/y83f2rvm8bccr5ctgv7mzxd69p6f77dp", "creation_timestamp": "2025-03-21T21:22:11.000000Z"}, {"uuid": "c6bd7fd4-6f3c-4a03-b0dc-6b5851bad6a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2739", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8610", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2739\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in PHPGurukul Old Age Home Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/manage-services.php. The manipulation of the argument sertitle leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-25T06:00:11.189Z\n\ud83d\udccf Modified: 2025-03-25T06:00:11.189Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300761\n2. https://vuldb.com/?ctiid.300761\n3. https://vuldb.com/?submit.523400\n4. https://github.com/silent1189/Phpgurukul-Old-Age-Home-Management-System-V1.0-SQL-injection/issues/1\n5. https://phpgurukul.com/", "creation_timestamp": "2025-03-25T06:23:48.000000Z"}, {"uuid": "4d251f7b-510e-435e-baa7-7c4921c5038f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2705", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8479", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2705\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as critical has been found in Digiwin ERP 5.1. Affected is the function DoUpload/DoWebUpload of the file /Api/FileUploadApi.ashx. The manipulation of the argument File leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-24T16:00:07.614Z\n\ud83d\udccf Modified: 2025-03-24T16:00:07.614Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300726\n2. https://vuldb.com/?ctiid.300726\n3. https://vuldb.com/?submit.516291\n4. https://github.com/Rain1er/report/blob/main/THNlcnBf/RCE_3.md\n5. https://github.com/Rain1er/report/blob/main/THNlcnBf/RCE_4.md", "creation_timestamp": "2025-03-24T16:23:14.000000Z"}, {"uuid": "e23e4196-8b94-489b-a464-e5cfb6d6854c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2754", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8629", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2754\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been declared as critical. Affected by this vulnerability is the function Assimp::AC3DImporter::ConvertObjectSection of the file code/AssetLib/AC/ACLoader.cpp of the component AC3D File Handler. The manipulation of the argument it leads to heap-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-25T08:31:07.954Z\n\ud83d\udccf Modified: 2025-03-25T08:31:07.954Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300859\n2. https://vuldb.com/?ctiid.300859\n3. https://vuldb.com/?submit.517788\n4. https://github.com/assimp/assimp/issues/6015\n5. https://github.com/assimp/assimp/issues/6015#issue-2877373501", "creation_timestamp": "2025-03-25T09:24:16.000000Z"}, {"uuid": "749aa402-5f8c-4e6e-819b-24b6a57475a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2755", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8628", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2755\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been rated as critical. Affected by this issue is the function Assimp::AC3DImporter::ConvertObjectSection of the file code/AssetLib/AC/ACLoader.cpp of the component AC3D File Handler. The manipulation of the argument src.entries leads to out-of-bounds read. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-25T09:00:10.018Z\n\ud83d\udccf Modified: 2025-03-25T09:00:10.018Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300860\n2. https://vuldb.com/?ctiid.300860\n3. https://vuldb.com/?submit.517789\n4. https://github.com/assimp/assimp/issues/6017\n5. https://github.com/assimp/assimp/issues/6017#issue-2877374161", "creation_timestamp": "2025-03-25T09:24:15.000000Z"}, {"uuid": "67fa5614-07cf-4f84-a70e-d5d9e6a51b40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2712", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8566", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2712\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in Yonyou UFIDA ERP-NC 5.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /help/top.jsp. The manipulation of the argument langcode leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-24T21:31:03.846Z\n\ud83d\udccf Modified: 2025-03-24T21:31:03.846Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300733\n2. https://vuldb.com/?ctiid.300733\n3. https://github.com/Hebing123/cve/issues/86", "creation_timestamp": "2025-03-24T22:23:46.000000Z"}, {"uuid": "5aa7955e-8b30-4520-b8a6-cef671ea3918", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2708", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8524", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2708\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, was found in zhijiantianya ruoyi-vue-pro 2.4.1. This affects an unknown part of the file /admin-api/infra/file/upload of the component Backend File Upload Interface. The manipulation of the argument path leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-24T19:31:03.576Z\n\ud83d\udccf Modified: 2025-03-24T20:06:17.827Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300729\n2. https://vuldb.com/?ctiid.300729\n3. https://vuldb.com/?submit.517030\n4. https://github.com/uglory-gll/javasec/blob/main/ruoyi-vue-pro.md#4file-path-traversal-back-end", "creation_timestamp": "2025-03-24T20:23:39.000000Z"}, {"uuid": "d205a555-28f2-4d72-a380-49f5254b868b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2709", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8529", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2709\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability has been found in Yonyou UFIDA ERP-NC 5.0 and classified as problematic. This vulnerability affects unknown code of the file /login.jsp. The manipulation of the argument key/redirect leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-24T20:00:11.432Z\n\ud83d\udccf Modified: 2025-03-24T20:00:11.432Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300730\n2. https://vuldb.com/?ctiid.300730\n3. https://vuldb.com/?submit.517305\n4. https://github.com/Hebing123/cve/issues/84", "creation_timestamp": "2025-03-24T20:23:46.000000Z"}, {"uuid": "f2bbc4d0-8999-488f-926a-2fe0685136c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2731", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8590", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2731\n\ud83d\udd25 CVSS Score: 8.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /api/wizard/getDualbandSync of the component HTTP POST Request Handler. The manipulation leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-25T03:31:04.477Z\n\ud83d\udccf Modified: 2025-03-25T03:31:04.477Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300751\n2. https://vuldb.com/?ctiid.300751\n3. https://vuldb.com/?submit.520497\n4. https://github.com/Qwen11/CVE_store/blob/main/H3C/vulnerability%20Information_3.md", "creation_timestamp": "2025-03-25T04:23:23.000000Z"}, {"uuid": "233fa091-e834-4328-9880-1c74a5f866c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2732", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8589", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2732\n\ud83d\udd25 CVSS Score: 8.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/wizard/getWifiNeighbour of the component HTTP POST Request Handler. The manipulation leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-25T04:00:07.714Z\n\ud83d\udccf Modified: 2025-03-25T04:00:07.714Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300752\n2. https://vuldb.com/?ctiid.300752\n3. https://vuldb.com/?submit.520499\n4. https://github.com/Qwen11/CVE_store/blob/main/H3C/vulnerability%20Information_4.md", "creation_timestamp": "2025-03-25T04:23:22.000000Z"}, {"uuid": "fed3f403-c12b-465c-8b2a-6bf053eeb025", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2734", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8596", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2734\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, was found in PHPGurukul Old Age Home Management System 1.0. Affected is an unknown function of the file /admin/aboutus.php. The manipulation of the argument pagetitle leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-25T04:31:07.803Z\n\ud83d\udccf Modified: 2025-03-25T04:31:07.803Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300756\n2. https://vuldb.com/?ctiid.300756\n3. https://vuldb.com/?submit.522265\n4. https://github.com/0xabandon/CVE/issues/1\n5. https://phpgurukul.com/", "creation_timestamp": "2025-03-25T05:23:42.000000Z"}, {"uuid": "9a1bb7c4-017c-4ad9-8d94-2658f5a90ddc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2735", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8593", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2735\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability has been found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/add-services.php. The manipulation of the argument sertitle leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-25T05:00:09.373Z\n\ud83d\udccf Modified: 2025-03-25T05:00:09.373Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300757\n2. https://vuldb.com/?ctiid.300757\n3. https://vuldb.com/?submit.522266\n4. https://github.com/0xabandon/CVE/issues/2\n5. https://phpgurukul.com/", "creation_timestamp": "2025-03-25T05:23:33.000000Z"}, {"uuid": "0208857d-34b9-4d3d-8fa0-0bd4e905a523", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2733", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8597", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2733\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as critical has been found in mannaandpoem OpenManus up to 2025.3.13. This affects an unknown part of the file app/tool/python_execute.py of the component Prompt Handler. The manipulation leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-25T04:31:04.535Z\n\ud83d\udccf Modified: 2025-03-25T04:31:04.535Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300753\n2. https://vuldb.com/?ctiid.300753\n3. https://vuldb.com/?submit.520426\n4. https://magnificent-dill-351.notion.site/Command-Execution-in-Openmanus-2025-3-13-1b6c693918ed80b2826ef6bb385693fa", "creation_timestamp": "2025-03-25T05:23:42.000000Z"}, {"uuid": "bc0b3a8e-1fe6-4d56-9033-28e8d76a3551", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27516", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14211", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27516\n\ud83d\udd25 CVSS Score: 5.4 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in how the Jinja sandboxed environment interacts with the |attr filter allows an attacker that controls the content of a template to execute arbitrary Python code. To exploit the vulnerability, an attacker needs to control the content of a template. Whether that is the case depends on the type of application using Jinja. This vulnerability impacts users of applications which execute untrusted templates. Jinja's sandbox does catch calls to str.format and ensures they don't escape the sandbox. However, it's possible to use the |attr filter to get a reference to a string's plain format method, bypassing the sandbox. After the fix, the |attr filter no longer bypasses the environment's attribute lookup. This vulnerability is fixed in 3.1.6.\n\ud83d\udccf Published: 2025-03-05T20:40:06.568Z\n\ud83d\udccf Modified: 2025-05-01T00:13:00.395Z\n\ud83d\udd17 References:\n1. https://github.com/pallets/jinja/security/advisories/GHSA-cpwx-vrp4-4pq7\n2. https://github.com/pallets/jinja/commit/90457bbf33b8662926ae65cdde4c4c32e756e403", "creation_timestamp": "2025-05-01T01:13:33.000000Z"}, {"uuid": "5ab3e276-7e37-4121-b811-e16c78abe586", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2717", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8572", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2717\n\ud83d\udd25 CVSS Score: 5.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, has been found in D-Link DIR-823X 240126/240802. This issue affects the function sub_41710C of the file /goform/diag_nslookup of the component HTTP POST Request Handler. The manipulation of the argument target_addr leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-24T23:31:05.104Z\n\ud83d\udccf Modified: 2025-03-24T23:31:05.104Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300737\n2. https://vuldb.com/?ctiid.300737\n3. https://vuldb.com/?submit.517958\n4. https://github.com/mono7s/Dir-823x/blob/main/diag_nslookup/diag_nslookup.md\n5. https://www.dlink.com/", "creation_timestamp": "2025-03-25T00:25:16.000000Z"}, {"uuid": "0aa75d31-0209-41bd-8031-532a69e0e335", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2720", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8571", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2720\n\ud83d\udd25 CVSS Score: 4.8 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in GNOME libgsf up to 1.14.53 and classified as problematic. Affected by this issue is the function gsf_base64_encode_simple. The manipulation of the argument size leads to use of uninitialized variable. The attack needs to be approached locally. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-24T23:31:06.804Z\n\ud83d\udccf Modified: 2025-03-24T23:31:06.804Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300740\n2. https://vuldb.com/?ctiid.300740\n3. https://vuldb.com/?submit.520180\n4. https://www.gnome.org/", "creation_timestamp": "2025-03-25T00:25:15.000000Z"}, {"uuid": "467732ac-e8d4-4cb6-8994-31ac0d77b09b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2721", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8570", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2721\n\ud83d\udd25 CVSS Score: 4.8 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in GNOME libgsf up to 1.14.53. It has been classified as critical. This affects the function gsf_base64_encode_simple. The manipulation of the argument size_t leads to heap-based buffer overflow. An attack has to be approached locally. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-25T00:00:10.522Z\n\ud83d\udccf Modified: 2025-03-25T00:00:10.522Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300741\n2. https://vuldb.com/?ctiid.300741\n3. https://vuldb.com/?submit.520181\n4. https://www.gnome.org/", "creation_timestamp": "2025-03-25T00:25:14.000000Z"}, {"uuid": "47c7d3d3-6573-49de-b2a7-cde98cafd7b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2723", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8578", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2723\n\ud83d\udd25 CVSS Score: 4.8 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in GNOME libgsf up to 1.14.53. It has been rated as critical. This issue affects the function gsf_property_settings_collec. The manipulation of the argument n_alloced_params leads to heap-based buffer overflow. Attacking locally is a requirement. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-25T01:00:06.666Z\n\ud83d\udccf Modified: 2025-03-25T01:00:06.666Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300743\n2. https://vuldb.com/?ctiid.300743\n3. https://vuldb.com/?submit.520183\n4. https://www.gnome.org/", "creation_timestamp": "2025-03-25T01:24:07.000000Z"}, {"uuid": "1a257225-55dc-4033-b4b5-3c45b328c29e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2724", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8582", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2724\n\ud83d\udd25 CVSS Score: 4.8 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as problematic has been found in GNOME libgsf up to 1.14.53. Affected is the function sorting_key_copy. The manipulation of the argument Name leads to out-of-bounds read. It is possible to launch the attack on the local host. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-25T01:31:04.182Z\n\ud83d\udccf Modified: 2025-03-25T01:31:04.182Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300744\n2. https://vuldb.com/?ctiid.300744\n3. https://vuldb.com/?submit.520184\n4. https://www.gnome.org/", "creation_timestamp": "2025-03-25T02:23:20.000000Z"}, {"uuid": "629640b0-93c1-4ceb-9b5b-66610ada5d6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2725", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8581", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2725\n\ud83d\udd25 CVSS Score: 8.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as critical was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. Affected by this vulnerability is an unknown functionality of the file /api/login/auth of the component HTTP POST Request Handler. The manipulation leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-25T02:00:09.925Z\n\ud83d\udccf Modified: 2025-03-25T02:00:09.925Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300745\n2. https://vuldb.com/?ctiid.300745\n3. https://vuldb.com/?submit.520390\n4. https://github.com/ZIKH26/CVE-information/blob/master/H3C/Vulnerability%20Information_1.md", "creation_timestamp": "2025-03-25T02:23:19.000000Z"}, {"uuid": "0c80b71f-d814-4f9e-8043-4243de836254", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2726", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8580", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2726\n\ud83d\udd25 CVSS Score: 8.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, has been found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. Affected by this issue is some unknown functionality of the file /api/esps of the component HTTP POST Request Handler. The manipulation leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-25T02:00:11.956Z\n\ud83d\udccf Modified: 2025-03-25T02:00:11.956Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300746\n2. https://vuldb.com/?ctiid.300746\n3. https://vuldb.com/?submit.520393\n4. https://github.com/ZIKH26/CVE-information/blob/master/H3C/Vulnerability%20Information_2.md", "creation_timestamp": "2025-03-25T02:23:18.000000Z"}, {"uuid": "ddd505e1-9543-4b17-8cf0-0f8b9f3e2694", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2722", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8579", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2722\n\ud83d\udd25 CVSS Score: 4.8 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in GNOME libgsf up to 1.14.53. It has been declared as critical. This vulnerability affects the function gsf_prop_settings_collect_va. The manipulation of the argument n_alloced_params leads to heap-based buffer overflow. Local access is required to approach this attack. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-25T00:31:03.859Z\n\ud83d\udccf Modified: 2025-03-25T00:31:03.859Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300742\n2. https://vuldb.com/?ctiid.300742\n3. https://vuldb.com/?submit.520182\n4. https://www.gnome.org/", "creation_timestamp": "2025-03-25T01:24:08.000000Z"}, {"uuid": "9fbf83f5-ab0d-4841-b547-affed94e0946", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2728", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8587", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2728\n\ud83d\udd25 CVSS Score: 8.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability has been found in H3C Magic NX30 Pro and Magic NX400 up to V100R014 and classified as critical. This vulnerability affects unknown code of the file /api/wizard/getNetworkConf. The manipulation leads to command injection. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-25T02:31:05.468Z\n\ud83d\udccf Modified: 2025-03-25T02:31:05.468Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300748\n2. https://vuldb.com/?ctiid.300748\n3. https://vuldb.com/?submit.520462\n4. https://github.com/RK1Y8/cve_cve/blob/main/h3c.md", "creation_timestamp": "2025-03-25T03:24:20.000000Z"}, {"uuid": "caac2320-2d30-41f0-835e-f84bf5f10f80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2729", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8586", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2729\n\ud83d\udd25 CVSS Score: 8.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014 and classified as critical. This issue affects some unknown processing of the file /api/wizard/networkSetup of the component HTTP POST Request Handler. The manipulation leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-25T03:00:09.183Z\n\ud83d\udccf Modified: 2025-03-25T03:00:09.183Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300749\n2. https://vuldb.com/?ctiid.300749\n3. https://vuldb.com/?submit.520494\n4. https://github.com/Qwen11/CVE_store/blob/main/H3C/vulnerability%20Information_1.md", "creation_timestamp": "2025-03-25T03:24:19.000000Z"}, {"uuid": "6c56de2f-0dc5-4df6-a558-7876355503ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2730", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8585", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2730\n\ud83d\udd25 CVSS Score: 8.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. It has been classified as critical. Affected is an unknown function of the file /api/wizard/getssidname of the component HTTP POST Request Handler. The manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-25T03:00:11.804Z\n\ud83d\udccf Modified: 2025-03-25T03:00:11.804Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300750\n2. https://vuldb.com/?ctiid.300750\n3. https://vuldb.com/?submit.520495\n4. https://github.com/Qwen11/CVE_store/blob/main/H3C/vulnerability%20Information_2.md", "creation_timestamp": "2025-03-25T03:24:19.000000Z"}, {"uuid": "8ba75126-4578-45b4-ab0c-8260d8c41a60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2736", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8592", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2736\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/bwdates-report-details.php. The manipulation of the argument fromdate leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.\n\ud83d\udccf Published: 2025-03-25T05:00:12.295Z\n\ud83d\udccf Modified: 2025-03-25T05:00:12.295Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300758\n2. https://vuldb.com/?ctiid.300758\n3. https://vuldb.com/?submit.522881\n4. https://github.com/404heihei/CVE/issues/1\n5. https://phpgurukul.com/", "creation_timestamp": "2025-03-25T05:23:32.000000Z"}, {"uuid": "d58cef09-b390-47b2-9459-bedc71957eb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2740", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8624", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2740\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as critical has been found in PHPGurukul Old Age Home Management System 1.0. Affected is an unknown function of the file /admin/eligibility.php. The manipulation of the argument pagetitle leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-25T06:31:05.651Z\n\ud83d\udccf Modified: 2025-03-25T06:31:05.651Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300762\n2. https://vuldb.com/?ctiid.300762\n3. https://vuldb.com/?submit.524733\n4. https://github.com/guimo3/cve/issues/1\n5. https://phpgurukul.com/", "creation_timestamp": "2025-03-25T07:24:03.000000Z"}, {"uuid": "e456e2c4-7836-47ea-bc9f-5101d002a139", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2742", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8623", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2742\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as critical was found in zhijiantianya ruoyi-vue-pro 2.4.1. This vulnerability affects unknown code of the file /admin-api/mp/material/upload-permanent of the component Material Upload Interface. The manipulation of the argument File leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-25T06:31:07.259Z\n\ud83d\udccf Modified: 2025-03-25T06:31:07.259Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300844\n2. https://vuldb.com/?ctiid.300844\n3. https://vuldb.com/?submit.519691\n4. https://github.com/uglory-gll/javasec/blob/main/ruoyi-vue-pro.md#5arbitrary-file-deletion-vulnerability---uploadpermanentmaterial", "creation_timestamp": "2025-03-25T07:24:03.000000Z"}, {"uuid": "e6262a7b-79ef-4a98-8bc4-e4769a8d2859", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2743", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8622", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2743\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as problematic, has been found in zhijiantianya ruoyi-vue-pro 2.4.1. This issue affects some unknown processing of the file /admin-api/mp/material/upload-temporary of the component Material Upload Interface. The manipulation of the argument File leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-25T07:00:10.362Z\n\ud83d\udccf Modified: 2025-03-25T07:00:10.362Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300845\n2. https://vuldb.com/?ctiid.300845\n3. https://vuldb.com/?submit.519692\n4. https://github.com/uglory-gll/javasec/blob/main/ruoyi-vue-pro.md#6arbitrary-file-deletion-vulnerability---uploadtemporarymaterial", "creation_timestamp": "2025-03-25T07:23:58.000000Z"}, {"uuid": "e1cf5226-29fd-4b04-8ad2-849265c226ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2744", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8621", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2744\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, was found in zhijiantianya ruoyi-vue-pro 2.4.1. Affected is an unknown function of the file /admin-api/mp/material/upload-news-image of the component Material Upload Interface. The manipulation of the argument File leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-25T07:00:11.929Z\n\ud83d\udccf Modified: 2025-03-25T07:00:11.929Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300846\n2. https://vuldb.com/?ctiid.300846\n3. https://vuldb.com/?submit.519694\n4. https://github.com/uglory-gll/javasec/blob/main/ruoyi-vue-pro.md#7arbitrary-file-deletion-vulnerability---uploadnewsimage", "creation_timestamp": "2025-03-25T07:23:57.000000Z"}, {"uuid": "5fc9f5ef-f10e-482c-96ee-438299bffef1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2757", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8639", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2757\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as critical was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function AI_MD5_PARSE_STRING_IN_QUOTATION of the file code/AssetLib/MD5/MD5Parser.cpp of the component MD5 File Handler. The manipulation of the argument data leads to heap-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-25T09:31:06.160Z\n\ud83d\udccf Modified: 2025-03-25T09:31:06.160Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300862\n2. https://vuldb.com/?ctiid.300862\n3. https://vuldb.com/?submit.517817\n4. https://github.com/assimp/assimp/issues/6019\n5. https://github.com/assimp/assimp/issues/6019#issue-2877376386", "creation_timestamp": "2025-03-25T10:24:29.000000Z"}, {"uuid": "24b01a56-13f9-4318-95f6-8951cfb3da87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27633", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8648", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27633\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The TRMTracker web application is vulnerable to reflected Cross-site scripting attack. The application allows client-side code injection that might be used to compromise the confidentiality and integrity of the system.\n\ud83d\udccf Published: 2025-03-25T12:40:37.667Z\n\ud83d\udccf Modified: 2025-03-25T13:09:15.804Z\n\ud83d\udd17 References:\n1. https://publisher.hitachienergy.com/preview?DocumentID=8DBD000210&LanguageCode=en&DocumentPartId=&Action=Launch", "creation_timestamp": "2025-03-25T13:23:53.000000Z"}, {"uuid": "0dc9e271-b08b-4783-af88-73de67860463", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2750", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8627", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2750\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp of the component CSM File Handler. The manipulation leads to out-of-bounds write. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-25T07:31:03.681Z\n\ud83d\udccf Modified: 2025-03-25T07:31:03.681Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300855\n2. https://vuldb.com/?ctiid.300855\n3. https://vuldb.com/?submit.517783\n4. https://github.com/assimp/assimp/issues/6011\n5. https://github.com/assimp/assimp/issues/6011#issue-2877369004", "creation_timestamp": "2025-03-25T08:23:38.000000Z"}, {"uuid": "ac55ebb5-46df-4226-9a58-71062c68e1aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2751", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8626", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2751\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability has been found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This vulnerability affects the function Assimp::CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp of the component CSM File Handler. The manipulation of the argument na leads to out-of-bounds read. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-25T07:31:05.393Z\n\ud83d\udccf Modified: 2025-03-25T07:31:05.393Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300856\n2. https://vuldb.com/?ctiid.300856\n3. https://vuldb.com/?submit.517785\n4. https://github.com/assimp/assimp/issues/6012\n5. https://github.com/assimp/assimp/issues/6012#issue-2877369817", "creation_timestamp": "2025-03-25T08:23:37.000000Z"}, {"uuid": "2f4a6907-9f48-4e55-9881-782cf4633ae2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2752", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8625", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2752\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This issue affects the function fast_atoreal_move in the library include/assimp/fast_atof.h of the component CSM File Handler. The manipulation leads to out-of-bounds read. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-25T08:00:11.272Z\n\ud83d\udccf Modified: 2025-03-25T08:00:11.272Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300857\n2. https://vuldb.com/?ctiid.300857\n3. https://vuldb.com/?submit.517786\n4. https://github.com/assimp/assimp/issues/6013\n5. https://github.com/assimp/assimp/issues/6013#issue-2877371176", "creation_timestamp": "2025-03-25T08:23:36.000000Z"}, {"uuid": "c317e1f5-6a01-48db-af63-64ae2bc6f27d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2753", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8630", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2753\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as critical. Affected is the function SceneCombiner::MergeScenes of the file code/AssetLib/LWS/LWSLoader.cpp of the component LWS File Handler. The manipulation leads to out-of-bounds read. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-25T08:31:04.517Z\n\ud83d\udccf Modified: 2025-03-25T08:31:04.517Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300858\n2. https://vuldb.com/?ctiid.300858\n3. https://vuldb.com/?submit.517787\n4. https://github.com/assimp/assimp/issues/6014\n5. https://github.com/assimp/assimp/issues/6014#issue-2877372462", "creation_timestamp": "2025-03-25T09:24:17.000000Z"}, {"uuid": "f953cf09-ddbc-46fd-aa6b-9b0f5418b923", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2756", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8640", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2756\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as critical has been found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::AC3DImporter::ConvertObjectSection of the file code/AssetLib/AC/ACLoader.cpp of the component AC3D File Handler. The manipulation of the argument tmp leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-25T09:31:04.310Z\n\ud83d\udccf Modified: 2025-03-25T09:31:04.310Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300861\n2. https://vuldb.com/?ctiid.300861\n3. https://vuldb.com/?submit.517790\n4. https://github.com/assimp/assimp/issues/6018\n5. https://github.com/assimp/assimp/issues/6018#issue-2877375815", "creation_timestamp": "2025-03-25T10:24:30.000000Z"}, {"uuid": "bce2dc70-8944-40ee-a1b8-b48524a54836", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27632", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8646", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27632\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: A Host Header Injection vulnerability in TRMTracker application may allow an attacker by modifying the host header value in an HTTP request to leverage multiple attack vectors, including defacing the site content through web-cache poisoning.\n\ud83d\udccf Published: 2025-03-25T12:37:30.114Z\n\ud83d\udccf Modified: 2025-03-25T13:10:39.102Z\n\ud83d\udd17 References:\n1. https://publisher.hitachienergy.com/preview?DocumentID=8DBD000210&LanguageCode=en&DocumentPartId=&Action=Launch", "creation_timestamp": "2025-03-25T13:23:52.000000Z"}, {"uuid": "7ea894ab-ec5b-4c23-99d8-f7e091e15531", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27631", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8650", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27631\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: The TRMTracker web application is vulnerable to LDAP injection attack potentially allowing an attacker to inject code into a query and execute remote commands that can read and update data on the website.\n\ud83d\udccf Published: 2025-03-25T12:46:08.184Z\n\ud83d\udccf Modified: 2025-03-25T13:07:52.198Z\n\ud83d\udd17 References:\n1. https://publisher.hitachienergy.com/preview?DocumentID=8DBD000210&LanguageCode=en&DocumentPartId=&Action=Launch", "creation_timestamp": "2025-03-25T13:23:58.000000Z"}, {"uuid": "d7cc3865-c966-44dd-9274-ec08fb3c4f9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27888", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8679", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27888\n\ud83d\udd25 CVSS Score: 5.8 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:H/VI:L/VA:N/SC:L/SI:L/SA:N)\n\ud83d\udd39 Description: Severity: medium (5.8) / important\n\nServer-Side Request Forgery (SSRF), Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'),\u00a0URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache Druid.\n\nThis issue affects all previous Druid versions.\n\n\nWhen using the Druid management proxy, a request that has a specially crafted URL could be used to redirect the request to an arbitrary server instead. This has the potential for XSS or XSRF. The user is required to be authenticated for this exploit. The management proxy is enabled in Druid's out-of-box configuration. It may be disabled to mitigate this vulnerability. If the management proxy is disabled, some web console features will not work properly, but core functionality is unaffected.\n\n\nUsers are recommended to upgrade to Druid 31.0.2 or Druid 32.0.1, which fixes the issue.\n\ud83d\udccf Published: 2025-03-20T11:29:00.730Z\n\ud83d\udccf Modified: 2025-03-25T15:18:04.929Z\n\ud83d\udd17 References:\n1. https://lists.apache.org/thread/c0qo989pwtrqkjv6xfr0c30dnjq8vf39", "creation_timestamp": "2025-03-25T15:23:56.000000Z"}, {"uuid": "2e017b0b-537b-4910-b59e-6bf39bf89754", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27834", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8749", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27834\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs via an oversized Type 4 function in a PDF document to pdf/pdf_func.c.\n\ud83d\udccf Published: 2025-03-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-25T20:18:39.746Z\n\ud83d\udd17 References:\n1. https://bugs.ghostscript.com/show_bug.cgi?id=708253", "creation_timestamp": "2025-03-25T20:24:11.000000Z"}, {"uuid": "a6581e8e-d6e9-4175-85e0-e5c208f9ccdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27404", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8870", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27404\n\ud83d\udd25 CVSS Score: 7.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 allows an attacker to craft a URL that, once visited by any user, allows to embed arbitrary Javascript into Icinga Web and to act on behalf of that user. This issue has been resolved in versions 2.11.5 and 2.12.3 of Icinga Web 2. As a workaround, those who have Icinga Web 2.12.2 may enable a content security policy in the application settings.\n\ud83d\udccf Published: 2025-03-26T14:21:05.363Z\n\ud83d\udccf Modified: 2025-03-26T15:10:01.679Z\n\ud83d\udd17 References:\n1. https://github.com/Icinga/icingaweb2/security/advisories/GHSA-c6pg-h955-wf66\n2. https://github.com/Icinga/icingaweb2/releases/tag/v2.11.5\n3. https://github.com/Icinga/icingaweb2/releases/tag/v2.12.3", "creation_timestamp": "2025-03-26T15:26:16.000000Z"}, {"uuid": "9c4b7071-0990-47e7-8eca-b21c7b432ecf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27551", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8831", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27551\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: DBIx::Class::EncodedColumn use the rand() function, which is not cryptographically secure to salt password hashes.\n\nThis vulnerability is associated with program files lib/DBIx/Class/EncodedColumn/Digest.pm.\n\nThis issue affects DBIx::Class::EncodedColumn until 0.00032.\n\ud83d\udccf Published: 2025-03-26T11:07:43.089Z\n\ud83d\udccf Modified: 2025-03-26T11:07:43.089Z\n\ud83d\udd17 References:\n1. https://security.metacpan.org/docs/guides/random-data-for-security.html\n2. https://metacpan.org/release/WREIS/DBIx-Class-EncodedColumn-0.00032/changes", "creation_timestamp": "2025-03-26T11:25:26.000000Z"}, {"uuid": "1b54fc48-f687-4f14-8660-181cf59a8abb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27552", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8830", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27552\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: DBIx::Class::EncodedColumn use the rand() function, which is not cryptographically secure to salt password hashes.\n\nThis vulnerability is associated with program files Crypt/Eksblowfish/Bcrypt.pm.\n\nThis issue affects DBIx::Class::EncodedColumn until 0.00032.\n\ud83d\udccf Published: 2025-03-26T11:08:11.434Z\n\ud83d\udccf Modified: 2025-03-26T11:08:11.434Z\n\ud83d\udd17 References:\n1. https://security.metacpan.org/docs/guides/random-data-for-security.html\n2. https://metacpan.org/release/WREIS/DBIx-Class-EncodedColumn-0.00032/changes", "creation_timestamp": "2025-03-26T11:25:25.000000Z"}, {"uuid": "350f1b45-1e67-4a71-833d-6c3cf67f39bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27405", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8869", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27405\n\ud83d\udd25 CVSS Score: 7.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 allows an attacker to craft a URL that, once visited by any user, allows to embed arbitrary Javascript into Icinga Web and to act on behalf of that user. This issue has been resolved in versions 2.11.5 and 2.12.3 of Icinga Web 2. As a workaround, those who have Icinga Web 2.12.2 may enable a content security policy in the application settings.\n\ud83d\udccf Published: 2025-03-26T15:10:10.288Z\n\ud83d\udccf Modified: 2025-03-26T15:10:10.288Z\n\ud83d\udd17 References:\n1. https://github.com/Icinga/icingaweb2/security/advisories/GHSA-3x37-fjc3-ch8w\n2. https://github.com/Icinga/icingaweb2/releases/tag/v2.11.5\n3. https://github.com/Icinga/icingaweb2/releases/tag/v2.12.3", "creation_timestamp": "2025-03-26T15:26:16.000000Z"}, {"uuid": "3289df73-990b-426c-ba7a-3529f59cb28b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27609", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8896", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27609\n\ud83d\udd25 CVSS Score: 1.1 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U)\n\ud83d\udd39 Description: Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 allows an attacker to craft a request that, once transmitted to a victim's Icinga Web, allows to embed arbitrary Javascript into it and to act on behalf of that user. This issue has been resolved in versions 2.11.5 and 2.12.3 of Icinga Web 2. As a workaround, those who have Icinga Web 2.12.2 may enable a content security policy in the application settings. Any modern browser with a working CORS implementation also sufficiently guards against the vulnerability.\n\ud83d\udccf Published: 2025-03-26T16:10:19.223Z\n\ud83d\udccf Modified: 2025-03-26T16:10:19.223Z\n\ud83d\udd17 References:\n1. https://github.com/Icinga/icingaweb2/security/advisories/GHSA-5cjw-fwjc-8j38\n2. https://github.com/Icinga/icingaweb2/releases/tag/v2.11.5\n3. https://github.com/Icinga/icingaweb2/releases/tag/v2.12.3", "creation_timestamp": "2025-03-26T16:25:33.000000Z"}, {"uuid": "984a92c7-be10-4c7b-a9e9-a608cf134878", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27406", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8889", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27406\n\ud83d\udd25 CVSS Score: 7.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: Icinga Reporting is the central component for reporting related functionality in the monitoring web frontend and framework Icinga Web 2. A vulnerability present in versions 0.10.0 through 1.0.2 allows to set up a template that allows to embed arbitrary Javascript. This enables the attacker to act on behalf of the user, if the template is being previewed; and act on behalf of the headless browser, if a report using the template is printed to PDF. This issue has been resolved in version 1.0.3 of Icinga Reporting. As a workaround, review all templates and remove suspicious settings.\n\ud83d\udccf Published: 2025-03-26T15:49:45.273Z\n\ud83d\udccf Modified: 2025-03-26T16:15:22.593Z\n\ud83d\udd17 References:\n1. https://github.com/Icinga/icingaweb2-module-reporting/security/advisories/GHSA-7qvq-54vm-r7hx\n2. https://github.com/Icinga/icingaweb2-module-reporting/releases/tag/v1.0.3", "creation_timestamp": "2025-03-26T16:25:23.000000Z"}, {"uuid": "737b6851-908c-4d17-8c75-4c1268ad9a6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27267", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8901", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27267\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in srcoley Random Quotes allows Reflected XSS. This issue affects Random Quotes: from n/a through 1.3.\n\ud83d\udccf Published: 2025-03-26T14:24:21.196Z\n\ud83d\udccf Modified: 2025-03-26T17:00:17.453Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/random-quotes/vulnerability/wordpress-random-quotes-plugin-1-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-03-26T17:25:26.000000Z"}, {"uuid": "f78667da-70cf-472f-8056-d54da176e408", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2787", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8976", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2787\n\ud83d\udd25 CVSS Score: 8.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N/AU:N/R:U/V:C/RE:M/U:Amber)\n\ud83d\udd39 Description: KNIME Business Hub is affected by the Ingress-nginx CVE-2025-1974 ( a.k.a IngressNightmare ) vulnerability which affects the ingress-nginx component. In the worst case a complete takeover of the Kubernetes cluster is possible. Since the affected component is only reachable from within the cluster, i.e. requires an authenticated user, the severity in the context of KNIME Business Hub is slightly lower.\n\n\n\nBesides applying the publicly known workarounds, we strongly recommend updating to one of the following versions of KNIME Business Hub: \n\n\n\n  *  1.13.3 or above \n\n\n\n\n\n\n  *  1.12.4 or above \n\n\n\n\n\n\n  *  1.11.4 or above \n\n\n\n\n\n\n  *  1.10.4 or above\n\n\n\n\n\n\n\n\n  *\n\ud83d\udccf Published: 2025-03-26T21:08:08.461Z\n\ud83d\udccf Modified: 2025-03-26T21:17:33.152Z\n\ud83d\udd17 References:\n1. https://www.knime.com/security/advisories", "creation_timestamp": "2025-03-26T21:25:38.000000Z"}, {"uuid": "af919708-89f4-4217-af7b-9b68c9038be4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27188", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14318", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27188\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Authorization vulnerability that could result in Privilege escalation. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction.\n\ud83d\udccf Published: 2025-04-08T20:17:09.891Z\n\ud83d\udccf Modified: 2025-05-01T16:10:36.954Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/magento/apsb25-26.html", "creation_timestamp": "2025-05-01T16:14:28.000000Z"}, {"uuid": "1d3fdc35-836b-4d26-b30c-1899cf340729", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27793", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9118", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27793\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N)\n\ud83d\udd39 Description: Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. In Vega prior to version 5.32.0, corresponding to vega-functions prior to version 5.17.0, users running Vega/Vega-lite JSON definitions could run unexpected JavaScript code when drawing graphs, unless the library was used with the `vega-interpreter`. Vega version 5.32.0 and vega-functions version 5.17.0 fix the issue. As a workaround, use `vega` with expression interpreter.\n\ud83d\udccf Published: 2025-03-27T14:07:52.264Z\n\ud83d\udccf Modified: 2025-03-27T15:17:18.354Z\n\ud83d\udd17 References:\n1. https://github.com/vega/vega/security/advisories/GHSA-963h-3v39-3pqf\n2. https://github.com/vega/vega/commit/694560c0aa576df8b6c5f0f7d202ac82233e6966\n3. https://github.com/vega/vega/releases/tag/v5.32.0\n4. https://vega.github.io/vega/usage/interpreter", "creation_timestamp": "2025-03-27T15:26:49.000000Z"}, {"uuid": "a47cbbb1-e9c0-4e4c-b4a3-f01b471c96b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14257", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27007\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Incorrect Privilege Assignment vulnerability in Brainstorm Force SureTriggers allows Privilege Escalation.This issue affects SureTriggers: from n/a through 1.0.82.\n\ud83d\udccf Published: 2025-05-01T10:54:56.209Z\n\ud83d\udccf Modified: 2025-05-01T10:54:56.209Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/suretriggers/vulnerability/wordpress-suretriggers-1-0-82-privilege-escalation-vulnerability?_s_id=cve", "creation_timestamp": "2025-05-01T11:14:47.000000Z"}, {"uuid": "1cc5886a-9771-4133-a013-2926a64e3656", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27726", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9283", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27726\n\ud83d\udd25 CVSS Score: 2.1 (cvssV3_0, Vector: CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in the file download process of the USB storage file-sharing function of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnerability is exploited, the product's files may be obtained and/or altered by a crafted HTTP request to specific functions of the product from a device connected to the LAN side.\n\ud83d\udccf Published: 2025-03-28T08:18:49.092Z\n\ud83d\udccf Modified: 2025-03-28T08:18:49.092Z\n\ud83d\udd17 References:\n1. https://kddi-tech.com/contents/appendix_L2_06.html#64433e4a-8946-9c06-bddf-91cbfe56c8e5\n2. https://jvn.jp/en/jp/JVN04278547/", "creation_timestamp": "2025-03-28T08:27:24.000000Z"}, {"uuid": "c6710eb8-f97e-4457-9378-eb6091b03f5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27932", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9282", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27932\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)\n\ud83d\udd39 Description: Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in the file deletion process of the USB storage file-sharing function of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnerability is exploited, an attacker may delete a file on the device or cause a denial of service (DoS) condition.\n\ud83d\udccf Published: 2025-03-28T08:19:01.846Z\n\ud83d\udccf Modified: 2025-03-28T08:19:01.846Z\n\ud83d\udd17 References:\n1. https://kddi-tech.com/contents/appendix_L2_06.html#64433e4a-8946-9c06-bddf-91cbfe56c8e5\n2. https://jvn.jp/en/jp/JVN04278547/", "creation_timestamp": "2025-03-28T08:27:23.000000Z"}, {"uuid": "0e110d41-3eec-4781-8d7e-1b8a2ccf74e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27567", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9287", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27567\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Cross-site scripting vulnerability exists in the NickName registration screen of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is using the configuration page or functions accessible only from the LAN side of the product.\n\ud83d\udccf Published: 2025-03-28T08:17:54.622Z\n\ud83d\udccf Modified: 2025-03-28T08:17:54.622Z\n\ud83d\udd17 References:\n1. https://kddi-tech.com/contents/appendix_L2_06.html#64433e4a-8946-9c06-bddf-91cbfe56c8e5\n2. https://jvn.jp/en/jp/JVN04278547/", "creation_timestamp": "2025-03-28T08:27:31.000000Z"}, {"uuid": "89c4a411-ec02-4208-98ee-5372298b870d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2748", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10632", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-32370\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L)\n\ud83d\udd39 Description: Kentico Xperience before 13.0.178 has a specific set of allowed ContentUploader file extensions for unauthenticated uploads; however, because .zip is processed through TryZipProviderSafe, there is additional functionality to create files with other extensions. NOTE: this is a separate issue not necessarily related to SVG or XSS.\n\ud83d\udccf Published: 2025-04-06T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-06T06:50:42.609Z\n\ud83d\udd17 References:\n1. https://devnet.kentico.com/download/hotfixes\n2. https://labs.watchtowr.com/xss-to-rce-by-abusing-custom-file-handlers-kentico-xperience-cms-cve-2025-2748/", "creation_timestamp": "2025-04-06T07:38:01.000000Z"}, {"uuid": "12cb570e-62b7-4c5b-b07f-84fa863e2863", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27574", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9286", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27574\n\ud83d\udd25 CVSS Score: 3.6 (cvssV3_0, Vector: CVSS:3.0/AV:P/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Cross-site scripting vulnerability exists in the USB storage file-sharing function of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is using the configuration page or functions accessible only from the LAN side of the product.\n\ud83d\udccf Published: 2025-03-28T08:18:11.469Z\n\ud83d\udccf Modified: 2025-03-28T08:18:11.469Z\n\ud83d\udd17 References:\n1. https://kddi-tech.com/contents/appendix_L2_06.html#64433e4a-8946-9c06-bddf-91cbfe56c8e5\n2. https://jvn.jp/en/jp/JVN04278547/", "creation_timestamp": "2025-03-28T08:27:30.000000Z"}, {"uuid": "2dbb034f-38f6-4768-b866-6d4ee060e637", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27716", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9285", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27716\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in the file/folder listing process of the USB storage file-sharing function of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnerability is exploited, the product's files may be obtained and/or altered by a crafted HTTP request to specific functions of the product from a device connected to the LAN side.\n\ud83d\udccf Published: 2025-03-28T08:18:23.782Z\n\ud83d\udccf Modified: 2025-03-28T08:18:23.782Z\n\ud83d\udd17 References:\n1. https://kddi-tech.com/contents/appendix_L2_06.html#64433e4a-8946-9c06-bddf-91cbfe56c8e5\n2. https://jvn.jp/en/jp/JVN04278547/", "creation_timestamp": "2025-03-28T08:27:26.000000Z"}, {"uuid": "64f79317-a18f-4b51-b72c-54376620b339", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27718", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9284", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27718\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in the file upload process of the USB storage file-sharing function of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnerability is exploited, the product's files may be obtained and/or altered or arbitrary code may be executed by a crafted HTTP request to specific functions of the product from a device connected to the LAN side.\n\ud83d\udccf Published: 2025-03-28T08:18:36.814Z\n\ud83d\udccf Modified: 2025-03-28T08:18:36.814Z\n\ud83d\udd17 References:\n1. https://kddi-tech.com/contents/appendix_L2_06.html#64433e4a-8946-9c06-bddf-91cbfe56c8e5\n2. https://jvn.jp/en/jp/JVN04278547/", "creation_timestamp": "2025-03-28T08:27:25.000000Z"}, {"uuid": "5af85c48-4711-436e-9bfd-6a847eb621ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27001", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9313", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27001\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: Insertion of Sensitive Information Into Sent Data vulnerability in Shipmondo Shipmondo \u2013 A complete shipping solution for WooCommerce allows Retrieve Embedded Sensitive Data.This issue affects Shipmondo \u2013 A complete shipping solution for WooCommerce: from n/a through 5.0.3.\n\ud83d\udccf Published: 2025-03-28T09:38:45.897Z\n\ud83d\udccf Modified: 2025-03-28T09:38:45.897Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/pakkelabels-for-woocommerce/vulnerability/wordpress-shipmondo-a-complete-shipping-solution-for-woocommerce-plugin-5-0-3-authenticated-arbitrary-wordpress-option-disclosure-vulnerability?_s_id=cve", "creation_timestamp": "2025-03-28T10:28:29.000000Z"}, {"uuid": "4b494cae-6ed6-47cc-a272-e7a6f5e22c8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27095", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9680", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27095\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.8.0 and 3.10.18, an attacker with a low-privileged account can access the Kubernetes session feature and manipulate the kubeconfig file to redirect API requests to an external server controlled by the attacker. This allows the attacker to intercept and capture the Kubernetes cluster token. This can potentially allow unauthorized access to the cluster and compromise its security. This vulnerability is fixed in 4.8.0 and 3.10.18.\n\ud83d\udccf Published: 2025-03-31T15:08:20.942Z\n\ud83d\udccf Modified: 2025-03-31T15:08:20.942Z\n\ud83d\udd17 References:\n1. https://github.com/jumpserver/jumpserver/security/advisories/GHSA-5q9w-f4wh-f535", "creation_timestamp": "2025-03-31T15:31:18.000000Z"}, {"uuid": "4b23e433-f5b2-4eec-ac08-5edc35a28423", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2713", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9390", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2713\n\ud83d\udd25 CVSS Score: 6.8 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N)\n\ud83d\udd39 Description: Google gVisor's runsc component exhibited a local privilege escalation vulnerability due to incorrect handling of file access permissions, which allowed unprivileged users to access restricted files. This occurred because the process initially ran with root-like permissions until the first fork.\n\ud83d\udccf Published: 2025-03-28T15:27:43.231Z\n\ud83d\udccf Modified: 2025-03-28T16:14:47.370Z\n\ud83d\udd17 References:\n1. https://github.com/google/gvisor/commit/586c38d70081b13b2ed494cef48e99b93956843e", "creation_timestamp": "2025-03-28T16:27:58.000000Z"}, {"uuid": "0dbd3ef7-747d-4f57-b37e-eae73928ae9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2781", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9652", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2781\n\ud83d\udd25 CVSS Score: 6.3 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: The WatchGuard Mobile VPN with SSL Client on Windows does not properly configure directory permissions when installed in a non-default directory. This could allow an authenticated local attacker to escalate to SYSTEM privileges on a vulnerable system.\n\n\n\nThis issue affects Mobile VPN with SSL Client: from 11.0 through 12.11.\n\ud83d\udccf Published: 2025-03-28T22:23:50.752Z\n\ud83d\udccf Modified: 2025-03-31T14:23:48.669Z\n\ud83d\udd17 References:\n1. https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00004", "creation_timestamp": "2025-03-31T14:31:56.000000Z"}, {"uuid": "36b89d84-9988-4a09-9e56-8132a9f57332", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2782", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9643", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2782\n\ud83d\udd25 CVSS Score: 6.3 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: The WatchGuard Terminal Services Agent on Windows does not properly configure directory permissions when installed in a non-default directory. This could allow an authenticated local attacker to escalate to SYSTEM privileges on a vulnerable system.\n\n\n\nThis issue affects Terminal Services Agent: from 12.0 through 12.10.\n\ud83d\udccf Published: 2025-03-28T22:24:47.152Z\n\ud83d\udccf Modified: 2025-03-31T13:24:07.246Z\n\ud83d\udd17 References:\n1. https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00005", "creation_timestamp": "2025-03-31T13:31:18.000000Z"}, {"uuid": "75550d76-a3a1-431a-8d3b-87be9cac7c2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2794", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9689", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2794\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: An unsafe reflection vulnerability in Kentico Xperience allows an unauthenticated attacker to kill the current process, leading to a Denial-of-Service condition.\n\n\n\n\nThis issue affects Xperience: through 13.0.180.\n\ud83d\udccf Published: 2025-03-31T16:22:48.521Z\n\ud83d\udccf Modified: 2025-03-31T16:22:48.521Z\n\ud83d\udd17 References:\n1. https://devnet.kentico.com/download/hotfixes", "creation_timestamp": "2025-03-31T16:33:10.000000Z"}, {"uuid": "33415f64-2afc-4704-a222-ff649613613d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27149", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9757", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27149\n\ud83d\udd25 CVSS Score: 4.6 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Zulip server provides an open-source team chat that helps teams stay productive and focused. Prior to 10.0, the data export to organization administrators feature in Zulip leaks private data. The collection of user-agent types identifying specific integrations or HTTP libraries (E.g., ZulipGitlabWebhook, okhttp, or PycURL) that have been used to access any organization on the server was incorrectly included in all three export types, regardless of if they were used to access the exported organization or not. The \"public data\" and \"with consent\" exports metadata including the titles of some topics in private channels which the administrator otherwise did not have access to, and none of the users consented to exporting and metadata for which users were in a group DM together. This vulnerability is fixed in 10.0.\n\ud83d\udccf Published: 2025-03-31T15:33:38.543Z\n\ud83d\udccf Modified: 2025-03-31T18:36:58.695Z\n\ud83d\udd17 References:\n1. https://github.com/zulip/zulip/security/advisories/GHSA-358p-x39m-99mm", "creation_timestamp": "2025-03-31T19:31:24.000000Z"}, {"uuid": "39bc6ed4-80af-49b6-a425-223320bfed4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27427", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9861", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27427\n\ud83d\udd25 CVSS Score: 2.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability exists in Apache ActiveMQ Artemis whereby a user with the createDurableQueue or createNonDurableQueue permission on an address can augment the routing-type supported by that address even if said user doesn't have the createAddress permission for that particular address. When combined with the send permission and automatic queue creation a user could successfully send a message with a routing-type not supported by the address when that message should actually be rejected on the basis that the user doesn't have permission to change the routing-type of the address.\n\nThis issue affects Apache ActiveMQ Artemis from 2.0.0 through 2.39.0.\n\nUsers are recommended to upgrade to version 2.40.0 which fixes the issue.\n\ud83d\udccf Published: 2025-04-01T07:26:59.994Z\n\ud83d\udccf Modified: 2025-04-01T07:26:59.994Z\n\ud83d\udd17 References:\n1. https://lists.apache.org/thread/8dzlm2vkqphyrnkrby8r8kzndsm5o6x8", "creation_timestamp": "2025-04-01T07:32:09.000000Z"}, {"uuid": "88e317e7-c42f-4617-a160-d43a97e15f24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27130", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9869", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27130\n\ud83d\udd25 CVSS Score: 6.3 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: Welcart e-Commerce 2.11.6 and earlier versions contains an untrusted data deserialization vulnerability. If this vulnerability is exploited, arbitrary code may be executed by a remote unauthenticated attacker who can access websites created using the product.\n\ud83d\udccf Published: 2025-04-01T08:57:25.711Z\n\ud83d\udccf Modified: 2025-04-01T08:57:25.711Z\n\ud83d\udd17 References:\n1. https://www.welcart.com/archives/23868.html\n2. https://jvn.jp/en/jp/JVN87266215/", "creation_timestamp": "2025-04-01T09:32:43.000000Z"}, {"uuid": "1e84725c-6ab2-4a33-a2a6-a6b47c193f36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9877", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-30177\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Bypass/Injection vulnerability in Apache Camel in Camel-Undertow component under particular conditions.\n\nThis issue affects Apache Camel: from 4.10.0 before 4.10.3, from 4.8.0 before 4.8.6.\n\nUsers are recommended to upgrade to version 4.10.3 for 4.10.x LTS and 4.8.6 for 4.8.x LTS.\n\nCamel undertow component is vulnerable to Camel message header injection, in particular the custom header filter strategy used by the component only filter the \"out\" direction, while it doesn't filter the \"in\" direction.\n\n\nThis allows an attacker to include Camel specific headers that for some Camel components can alter the behaviour such as the camel-bean component, or the camel-exec component.\n\ud83d\udccf Published: 2025-04-01T11:56:30.484Z\n\ud83d\udccf Modified: 2025-04-01T11:56:30.484Z\n\ud83d\udd17 References:\n1. https://camel.apache.org/security/CVE-2025-27636.html\n2. https://camel.apache.org/security/CVE-2025-29891.html\n3. https://lists.apache.org/thread/dj79zdgw01j337lr9gvyy4sv8xfyw8py", "creation_timestamp": "2025-04-01T12:32:30.000000Z"}, {"uuid": "6396bd84-39dc-477f-a4bf-d9a195f39b13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27829", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9961", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27829\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in Stormshield Network Security (SNS) 4.3.x before 4.3.35. If multicast streams are enabled on different interfaces, it may be possible to interrupt multicast traffic on some of these interfaces. That could result in a denial of the multicast routing service on the firewall.\n\ud83d\udccf Published: 2025-04-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-01T16:43:52.611Z\n\ud83d\udd17 References:\n1. https://advisories.stormshield.eu/2025-002/", "creation_timestamp": "2025-04-01T17:32:43.000000Z"}, {"uuid": "90702139-42e4-43a0-b2a3-096ce8fa331d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "exploited", "source": "https://t.me/DarkWebInformer_CVEAlerts/10150", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27363\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C/CR:H/IR:H/AR:H/MAV:N/MAC:L/MPR:N/MUI:N/MS:U/MC:H/MI:H/MA:H)\n\ud83d\udd39 Description: An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value causing it to wrap around and allocate too small of a heap buffer. The code then writes up to 6 signed long integers out of bounds relative to this buffer. This may result in arbitrary code execution. This vulnerability may have been exploited in the wild.\n\ud83d\udccf Published: 2025-03-11T13:28:31.705Z\n\ud83d\udccf Modified: 2025-04-02T22:03:19.128Z\n\ud83d\udd17 References:\n1. https://www.facebook.com/security/advisories/cve-2025-27363", "creation_timestamp": "2025-04-02T22:34:38.000000Z"}, {"uuid": "87191f78-af44-41b9-a22e-6eb3b867704e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2779", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10026", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2779\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)\n\ud83d\udd39 Description: The Insert Headers and Footers Code \u2013 HT Script plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_dismiss function in all versions up to, and including, 1.1.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update option values to 1/true on the WordPress site. This can be leveraged to update an option that would create an error on the site and deny access to legitimate users or be used to set some values to true, such as registration.\n\ud83d\udccf Published: 2025-04-02T01:44:29.451Z\n\ud83d\udccf Modified: 2025-04-02T01:44:29.451Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/75bc2295-bf9a-430f-92b7-d380eed6df11?source=cve\n2. https://plugins.trac.wordpress.org/browser/insert-headers-and-footers-script/tags/1.1.2/admin/class-rating-notice.php#L59", "creation_timestamp": "2025-04-02T02:35:49.000000Z"}, {"uuid": "a5bbeab7-d94b-4c57-9382-a68342c9fe1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27244", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10027", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27244\n\ud83d\udd25 CVSS Score: 5.9 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: AssetView and AssetView CLOUD contain an issue with acquiring sensitive information from sent data to the developer. If exploited, sensitive information may be obtained by a remote unauthenticated attacker.\n\ud83d\udccf Published: 2025-04-02T03:21:11.828Z\n\ud83d\udccf Modified: 2025-04-02T03:21:11.828Z\n\ud83d\udd17 References:\n1. https://www.hammock.jp/assetview/info/250325.html\n2. https://jvn.jp/en/jp/JVN26321838/", "creation_timestamp": "2025-04-02T03:35:35.000000Z"}, {"uuid": "2e3d1180-2c01-4dff-8095-23ff2f6810ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27694", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10072", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27694\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: Dell Wyse Management Suite, versions prior to  WMS 5.1, contains an Insufficient Resource Pool vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.\n\ud83d\udccf Published: 2025-04-02T00:12:16.032Z\n\ud83d\udccf Modified: 2025-04-02T13:24:43.503Z\n\ud83d\udd17 References:\n1. https://www.dell.com/support/kbdoc/en-us/000296515/dsa-2025-135", "creation_timestamp": "2025-04-02T13:33:44.000000Z"}, {"uuid": "4872ee55-1cbf-4641-bc70-82bc1f9f31cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27556", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10064", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27556\n\ud83d\udd25 CVSS Score: 5.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L)\n\ud83d\udd39 Description: An issue was discovered in Django 5.1 before 5.1.8 and 5.0 before 5.0.14. The NFKC normalization is slow on Windows. As a consequence, django.contrib.auth.views.LoginView, django.contrib.auth.views.LogoutView, and django.views.i18n.set_language are subject to a potential denial-of-service attack via certain inputs with a very large number of Unicode characters.\n\ud83d\udccf Published: 2025-04-02T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-02T13:27:54.960Z\n\ud83d\udd17 References:\n1. https://docs.djangoproject.com/en/dev/releases/security/\n2. https://groups.google.com/g/django-announce\n3. https://www.djangoproject.com/weblog/2025/apr/02/security-releases/", "creation_timestamp": "2025-04-02T13:33:35.000000Z"}, {"uuid": "ac93b380-bb34-4bce-abf1-0ffab19956c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2784", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10157", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2784\n\ud83d\udd25 CVSS Score: 7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H)\n\ud83d\udd39 Description: A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_insight_whitespace() function. Libsoup clients may read one byte out-of-bounds in response to a crafted HTTP response by an HTTP server.\n\ud83d\udccf Published: 2025-04-03T01:40:12.164Z\n\ud83d\udccf Modified: 2025-04-03T01:40:12.164Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2025-2784\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2354669\n3. https://gitlab.gnome.org/GNOME/libsoup/-/issues/422", "creation_timestamp": "2025-04-03T02:35:06.000000Z"}, {"uuid": "03dba169-ad1c-459b-a1b3-eb0a249481f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27686", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10701", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27686\n\ud83d\udd25 CVSS Score: 2.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: Dell Unisphere for PowerMax, version(s) prior to 10.2.0.9 and PowerMax version(s) prior to PowerMax 9.2.4.15, contain an Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection.\n\ud83d\udccf Published: 2025-04-07T13:23:08.166Z\n\ud83d\udccf Modified: 2025-04-07T13:23:08.166Z\n\ud83d\udd17 References:\n1. https://www.dell.com/support/kbdoc/en-ao/000302223/dsa-2025-111-dell-powermaxos-dell-powermax-eem-dell-unisphere-for-powermax-dell-unisphere-for-powermax-virtual-appliance-dell-unisphere-360-dell-solutions-enabler-and-dell-solutions-enabler-virtual-appliance-security-update-for-multiple-vulnerabilities", "creation_timestamp": "2025-04-07T13:45:27.000000Z"}, {"uuid": "47f652fb-77a3-4350-94a6-b64e3fa6ff2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2704", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10146", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2704\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: OpenVPN version 2.6.1 through 2.6.13 in server mode using TLS-crypt-v2 allows remote attackers to trigger a denial of service by corrupting and replaying network packets in the early handshake phase\n\ud83d\udccf Published: 2025-04-02T21:00:58.582Z\n\ud83d\udccf Modified: 2025-04-02T21:00:58.582Z\n\ud83d\udd17 References:\n1. https://community.openvpn.net/openvpn/wiki/CVE-2025-2704", "creation_timestamp": "2025-04-02T21:34:16.000000Z"}, {"uuid": "b8885890-6c2c-4753-8a1f-e16e58b8da18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27608", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10145", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27608\n\ud83d\udd25 CVSS Score: 1 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U)\n\ud83d\udd39 Description: Arduino IDE 2.x is an IDE based on the Theia IDE framework and built with Electron. A Self Cross-Site Scripting (XSS) vulnerability has been identified within the Arduino-IDE prior to version v2.3.5. The vulnerability occurs in the Additional Board Manager URLs field, which can be found in the Preferences -> Settings section of the Arduino IDE interface. In the vulnerable versions, any values entered in this field are directly displayed to the user through a notification tooltip object, without a proper output encoding routine, due to the underlying ElectronJS engine interpretation. This vulnerability exposes the input parameter to Self-XSS attacks, which may lead to security risks depending on where the malicious payload is injected. This vulnerability is fixed in 2.3.5.\n\ud83d\udccf Published: 2025-04-02T21:09:16.943Z\n\ud83d\udccf Modified: 2025-04-02T21:09:16.943Z\n\ud83d\udd17 References:\n1. https://github.com/arduino/arduino-ide/security/advisories/GHSA-252h-4j5q-88pc\n2. https://github.com/arduino/arduino-ide/commit/d298b3ffc94008e89066cd999d891e84190da18f", "creation_timestamp": "2025-04-02T21:34:15.000000Z"}, {"uuid": "11aab61b-2c8f-4ae1-951e-d1c880f3cc48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2780", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10413", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2780\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Woffice Core plugin for WordPress, used by the Woffice Theme, is vulnerable to arbitrary file uploads due to missing file type validation in the 'saveFeaturedImage' function in all versions up to, and including, 5.4.21. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.\n\ud83d\udccf Published: 2025-04-04T07:00:13.886Z\n\ud83d\udccf Modified: 2025-04-04T07:00:13.886Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/7d057ac6-a341-4ec3-956c-2a2a5636155c?source=cve\n2. http://localhost:1337/wp-content/plugins/woffice-core/extensions/woffice-event/class-fw-extension-woffice-event.php#L1235\n3. https://hub.woffice.io/woffice/changelog#april-1st-2025-version-5422", "creation_timestamp": "2025-04-04T07:36:06.000000Z"}, {"uuid": "10083d3a-50b2-4ab9-a8b6-1954208a46fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2797", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10414", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2797\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Woffice Core plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.4.21. This is due to missing or incorrect nonce validation on the 'woffice_handle_user_approval_actions' function. This makes it possible for unauthenticated attackers to approve registration for any user via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-04-04T07:00:12.004Z\n\ud83d\udccf Modified: 2025-04-04T07:00:12.004Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/1665f2d0-899b-4f9b-91b1-e5799c3b4d3d?source=cve\n2. http://localhost/wp-content/plugins/woffice-core/extensions/woffice-user-registration/includes/helpers.php#L52\n3. https://hub.woffice.io/woffice/changelog#april-1st-2025-version-5422", "creation_timestamp": "2025-04-04T07:36:07.000000Z"}, {"uuid": "100bf165-6a37-47e1-8faa-62f83dcecbd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27428", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10869", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27428\n\ud83d\udd25 CVSS Score: 7.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N)\n\ud83d\udd39 Description: Due to directory traversal vulnerability, an authorized attacker could gain access to some critical information by using RFC enabled function module. Upon successful exploitation, they could read files from any managed system connected to SAP Solution Manager, leading to high impact on confidentiality. There is no impact on integrity or availability.\n\ud83d\udccf Published: 2025-04-08T07:13:27.056Z\n\ud83d\udccf Modified: 2025-04-08T07:13:27.056Z\n\ud83d\udd17 References:\n1. https://me.sap.com/notes/3581811\n2. https://url.sap/sapsecuritypatchday", "creation_timestamp": "2025-04-08T07:46:31.000000Z"}, {"uuid": "b1d5ae4d-0471-47ae-b21f-9d5c444444ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27429", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10868", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27429\n\ud83d\udd25 CVSS Score: 9.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: SAP S/4HANA allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as a backdoor, creating the risk of full system compromise, undermining the confidentiality, integrity and availability of the system.\n\ud83d\udccf Published: 2025-04-08T07:13:37.548Z\n\ud83d\udccf Modified: 2025-04-08T07:13:37.548Z\n\ud83d\udd17 References:\n1. https://me.sap.com/notes/3581961\n2. https://url.sap/sapsecuritypatchday", "creation_timestamp": "2025-04-08T07:46:30.000000Z"}, {"uuid": "2c49d0fe-9c90-4153-b61a-b99dad5637dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27520", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10476", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27520\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: BentoML is a Python library for building online serving systems optimized for AI apps and model inference. A Remote Code Execution (RCE) vulnerability caused by insecure deserialization has been identified in the latest version (v1.4.2) of BentoML. It allows any unauthenticated user to execute arbitrary code on the server. It exists an unsafe code segment in serde.py. This vulnerability is fixed in 1.4.3.\n\ud83d\udccf Published: 2025-04-04T14:28:51.574Z\n\ud83d\udccf Modified: 2025-04-04T14:51:45.561Z\n\ud83d\udd17 References:\n1. https://github.com/bentoml/BentoML/security/advisories/GHSA-33xw-247w-6hmc\n2. https://github.com/bentoml/BentoML/commit/b35f4f4fcc53a8c3fe8ed9c18a013fe0a728e194", "creation_timestamp": "2025-04-04T15:37:02.000000Z"}, {"uuid": "ed9b7790-c2fc-456a-abec-d103a8456488", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2798", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10481", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2798\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Woffice CRM theme for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.4.21. This is due to a misconfiguration of excluded roles during registration. This makes it possible for unauthenticated attackers to register with an Administrator role if a custom login form is being used. This can be combined with CVE-2025-2797 to bypass the user approval process if an Administrator can be tricked into taking an action such as clicking a link.\n\ud83d\udccf Published: 2025-04-04T13:44:36.480Z\n\ud83d\udccf Modified: 2025-04-04T14:45:49.471Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/6dd6169b-bc94-4642-8975-2e96bc01576f?source=cve\n2. http://localhost/wp-content/themes/woffice/inc/classes/Woffice_Register.php#L405\n3. https://hub.woffice.io/woffice/changelog#april-1st-2025-version-5422", "creation_timestamp": "2025-04-04T15:37:10.000000Z"}, {"uuid": "69038e3b-51ae-4b53-b600-bbdc2eb41757", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2797", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10481", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2798\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Woffice CRM theme for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.4.21. This is due to a misconfiguration of excluded roles during registration. This makes it possible for unauthenticated attackers to register with an Administrator role if a custom login form is being used. This can be combined with CVE-2025-2797 to bypass the user approval process if an Administrator can be tricked into taking an action such as clicking a link.\n\ud83d\udccf Published: 2025-04-04T13:44:36.480Z\n\ud83d\udccf Modified: 2025-04-04T14:45:49.471Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/6dd6169b-bc94-4642-8975-2e96bc01576f?source=cve\n2. http://localhost/wp-content/themes/woffice/inc/classes/Woffice_Register.php#L405\n3. https://hub.woffice.io/woffice/changelog#april-1st-2025-version-5422", "creation_timestamp": "2025-04-04T15:37:10.000000Z"}, {"uuid": "a0064e42-cae0-4311-815d-59f25b9b92da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2789", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10713", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2789\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The MultiVendorX \u2013 Empower Your WooCommerce Store with a Dynamic Multivendor Marketplace \u2013 Build the Next Amazon, eBay, Etsy plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the delete_table_rate_shipping_row function in all versions up to, and including, 4.2.19. This makes it possible for unauthenticated attackers to delete Table Rates that can impact the shipping cost calculations.\n\ud83d\udccf Published: 2025-04-05T05:32:14.306Z\n\ud83d\udccf Modified: 2025-04-07T14:11:36.041Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/bf4eca37-066f-428c-a4f7-061ce06e1142?source=cve\n2. https://plugins.trac.wordpress.org/browser/dc-woocommerce-multi-vendor/tags/4.2.19/packages/mvx-tablerate/mvx-tablerate.php#L78\n3. https://plugins.trac.wordpress.org/browser/dc-woocommerce-multi-vendor/tags/4.2.19/packages/mvx-tablerate/mvx-tablerate.php#L211", "creation_timestamp": "2025-04-07T14:45:11.000000Z"}, {"uuid": "49c3a141-0994-4e28-89ac-d196008134a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27487", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10996", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27487\n\ud83d\udd25 CVSS Score: 8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)\n\ud83d\udd39 Description: Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code over a network.\n\ud83d\udccf Published: 2025-04-08T17:24:01.231Z\n\ud83d\udccf Modified: 2025-04-08T19:34:44.953Z\n\ud83d\udd17 References:\n1. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27487", "creation_timestamp": "2025-04-08T19:47:38.000000Z"}, {"uuid": "27280741-7cdd-4fae-875b-0085546d47fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27437", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10866", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27437\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: A Missing Authorization Check vulnerability exists in the Virus Scanner Interface of SAP NetWeaver Application Server ABAP. Because of this, an attacker authenticated as a non-administrative user can initiate a transaction, allowing them to access but not modify non-sensitive data without further authorization and with no effect on availability.\n\ud83d\udccf Published: 2025-04-08T07:13:58.049Z\n\ud83d\udccf Modified: 2025-04-08T07:13:58.049Z\n\ud83d\udd17 References:\n1. https://me.sap.com/notes/3568778\n2. https://url.sap/sapsecuritypatchday", "creation_timestamp": "2025-04-08T07:46:29.000000Z"}, {"uuid": "6d313f52-0792-4e41-b857-005de91aab7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27435", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10867", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27435\n\ud83d\udd25 CVSS Score: 4.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: Under specific conditions and prerequisites, an unauthenticated attacker could access customer coupon codes exposed in the URL parameters of the Coupon Campaign URL in SAP Commerce. This could allow the attacker to use the disclosed coupon code, hence posing a low impact on confidentiality and integrity of the application.\n\ud83d\udccf Published: 2025-04-08T07:13:49.402Z\n\ud83d\udccf Modified: 2025-04-08T07:13:49.402Z\n\ud83d\udd17 References:\n1. https://me.sap.com/notes/3539465\n2. https://url.sap/sapsecuritypatchday", "creation_timestamp": "2025-04-08T07:46:30.000000Z"}, {"uuid": "806b170e-e72a-464b-82e9-20b065061d82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27813", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11227", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27813\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: MSI Center before 2.0.52.0 has Missing PE Signature Validation.\n\ud83d\udccf Published: 2025-04-10T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-10T12:21:38.198Z\n\ud83d\udd17 References:\n1. https://csr.msi.com/global/product-security-advisories", "creation_timestamp": "2025-04-10T12:49:18.000000Z"}, {"uuid": "9ee29e19-5395-4867-af87-6d38813e3c80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27467", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10994", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27467\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)\n\ud83d\udd39 Description: Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.\n\ud83d\udccf Published: 2025-04-08T17:23:56.402Z\n\ud83d\udccf Modified: 2025-04-08T19:35:16.001Z\n\ud83d\udd17 References:\n1. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27467", "creation_timestamp": "2025-04-08T19:47:36.000000Z"}, {"uuid": "17124458-2dc2-4ce5-b84b-7bea6276267a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27739", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10973", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27739\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)\n\ud83d\udd39 Description: Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.\n\ud83d\udccf Published: 2025-04-08T17:24:11.631Z\n\ud83d\udccf Modified: 2025-04-08T17:36:46.989Z\n\ud83d\udd17 References:\n1. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27739", "creation_timestamp": "2025-04-08T17:46:49.000000Z"}, {"uuid": "70e9280b-430d-4da6-915a-aae43ab66036", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27480", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10981", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27480\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)\n\ud83d\udd39 Description: Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.\n\ud83d\udccf Published: 2025-04-08T17:23:58.678Z\n\ud83d\udccf Modified: 2025-04-08T19:40:38.153Z\n\ud83d\udd17 References:\n1. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27480", "creation_timestamp": "2025-04-08T19:47:19.000000Z"}, {"uuid": "69b22d91-213b-4c66-9e27-ece1bec50a5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27193", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10956", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27193\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Bridge versions 14.1.5, 15.0.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\ud83d\udccf Published: 2025-04-08T17:39:58.360Z\n\ud83d\udccf Modified: 2025-04-08T17:39:58.360Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/bridge/apsb25-25.html", "creation_timestamp": "2025-04-08T17:46:23.000000Z"}, {"uuid": "987a4d1f-9e3e-4481-9904-febc9feacd5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27482", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10989", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27482\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)\n\ud83d\udd39 Description: Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.\n\ud83d\udccf Published: 2025-04-08T17:23:59.900Z\n\ud83d\udccf Modified: 2025-04-08T19:36:55.815Z\n\ud83d\udd17 References:\n1. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27482", "creation_timestamp": "2025-04-08T19:47:29.000000Z"}, {"uuid": "bf843783-f6e9-4e6b-a1e8-4f0d0f66ac72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27084", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10936", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27084\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: A vulnerability in the Captive Portal of an AOS-10 GW and AOS-8 Controller/Mobility Conductor could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack. Successful exploitation could enable the attacker to execute arbitrary script code in the victim's browser within the context of the affected interface.\n\ud83d\udccf Published: 2025-04-08T16:32:46.764Z\n\ud83d\udccf Modified: 2025-04-08T16:33:09.252Z\n\ud83d\udd17 References:\n1. https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04845en_us&docLocale=en_US", "creation_timestamp": "2025-04-08T16:46:22.000000Z"}, {"uuid": "daaf9a4b-2a80-413a-b3a5-a2d5fed04350", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27483", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10993", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27483\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)\n\ud83d\udd39 Description: Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.\n\ud83d\udccf Published: 2025-04-08T17:24:00.564Z\n\ud83d\udccf Modified: 2025-04-08T19:35:30.618Z\n\ud83d\udd17 References:\n1. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27483", "creation_timestamp": "2025-04-08T19:47:35.000000Z"}, {"uuid": "5597751e-415d-405a-baa9-ebff9ba5e61b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27442", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10949", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27442\n\ud83d\udd25 CVSS Score: 4.6 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via adjacent network access.\n\ud83d\udccf Published: 2025-04-08T16:14:53.396Z\n\ud83d\udccf Modified: 2025-04-08T16:14:53.396Z\n\ud83d\udd17 References:\n1. https://www.zoom.com/en/trust/security-bulletin/zsb-25013", "creation_timestamp": "2025-04-08T16:46:41.000000Z"}, {"uuid": "7f80e4c9-315a-4b5b-89c6-c9f005a5a918", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27443", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10948", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27443\n\ud83d\udd25 CVSS Score: 2.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Insecure default variable initialization in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a loss of integrity via local access.\n\ud83d\udccf Published: 2025-04-08T16:16:38.148Z\n\ud83d\udccf Modified: 2025-04-08T16:16:38.148Z\n\ud83d\udd17 References:\n1. https://www.zoom.com/en/trust/security-bulletin/zsb-25014", "creation_timestamp": "2025-04-08T16:46:40.000000Z"}, {"uuid": "f49870ff-27d1-46bd-9073-a5b975096c2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27441", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10950", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27441\n\ud83d\udd25 CVSS Score: 4.6 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via adjacent network access.\n\ud83d\udccf Published: 2025-04-08T16:14:40.782Z\n\ud83d\udccf Modified: 2025-04-08T16:14:40.782Z\n\ud83d\udd17 References:\n1. https://www.zoom.com/en/trust/security-bulletin/zsb-25013", "creation_timestamp": "2025-04-08T16:46:42.000000Z"}, {"uuid": "b059c2af-a453-4769-885a-3440b6ebb738", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27083", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10940", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27083\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Authenticated command injection vulnerabilities exist in the AOS-10 GW and AOS-8 Controller/Mobility Conductor web-based management interface. Successful exploitation of these vulnerabilities allows an Authenticated attacker to execute arbitrary commands as a privileged user on the underlying operating system.\n\ud83d\udccf Published: 2025-04-08T16:26:50.920Z\n\ud83d\udccf Modified: 2025-04-08T16:26:50.920Z\n\ud83d\udd17 References:\n1. https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04845en_us&docLocale=en_US", "creation_timestamp": "2025-04-08T16:46:26.000000Z"}, {"uuid": "da65d792-ed3f-41d4-8fad-699ad2593222", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27082", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10943", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27082\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Arbitrary File Write vulnerabilities exist in the web-based management interface of both the AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploitation could allow an Authenticated attacker to upload arbitrary files and execute arbitrary commands on the underlying host operating system.\n\ud83d\udccf Published: 2025-04-08T16:22:50.625Z\n\ud83d\udccf Modified: 2025-04-08T16:22:50.625Z\n\ud83d\udd17 References:\n1. https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04845en_us&docLocale=en_US", "creation_timestamp": "2025-04-08T16:46:32.000000Z"}, {"uuid": "a09ecb02-80e2-4ca5-ad56-f46fd4a8b641", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27722", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11031", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27722\n\ud83d\udd25 CVSS Score: 5.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: Cleartext transmission of sensitive information issue exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If exploited, a man-in-the-middle attack may allow a remote unauthenticated attacker to eavesdrop the communication and obtain the authentication information.\n\ud83d\udccf Published: 2025-04-09T09:03:26.029Z\n\ud83d\udccf Modified: 2025-04-09T09:03:26.029Z\n\ud83d\udd17 References:\n1. https://www.inaba.co.jp/abaniact/news/security_20250404.pdf\n2. https://jvn.jp/en/vu/JVNVU93925742/", "creation_timestamp": "2025-04-09T09:47:32.000000Z"}, {"uuid": "9ac59792-3d3b-421a-a3ba-52017847cbcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27797", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11030", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27797\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: OS command injection vulnerability in the specific service exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If exploited, an arbitrary OS command may be executed by a remote attacker who can log in to the product.\n\ud83d\udccf Published: 2025-04-09T09:03:29.067Z\n\ud83d\udccf Modified: 2025-04-09T09:03:29.067Z\n\ud83d\udd17 References:\n1. https://www.inaba.co.jp/abaniact/news/security_20250404.pdf\n2. https://jvn.jp/en/vu/JVNVU93925742/", "creation_timestamp": "2025-04-09T09:47:31.000000Z"}, {"uuid": "50082054-b4bc-4ac8-8a24-dd66a6e7e422", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27737", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10975", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27737\n\ud83d\udd25 CVSS Score: 8.6 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C)\n\ud83d\udd39 Description: Improper input validation in Windows Security Zone Mapping allows an unauthorized attacker to bypass a security feature locally.\n\ud83d\udccf Published: 2025-04-08T17:24:10.512Z\n\ud83d\udccf Modified: 2025-04-08T17:36:45.778Z\n\ud83d\udd17 References:\n1. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27737", "creation_timestamp": "2025-04-08T17:46:51.000000Z"}, {"uuid": "75306a0c-2f71-4f66-b9de-a34169c09c68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27738", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10974", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27738\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C)\n\ud83d\udd39 Description: Improper access control in Windows Resilient File System (ReFS) allows an authorized attacker to disclose information over a network.\n\ud83d\udccf Published: 2025-04-08T17:24:11.062Z\n\ud83d\udccf Modified: 2025-04-08T17:36:46.406Z\n\ud83d\udd17 References:\n1. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27738", "creation_timestamp": "2025-04-08T17:46:50.000000Z"}, {"uuid": "e34f7644-b0b6-490c-8976-4ee5b2ef24c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27481", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10987", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27481\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)\n\ud83d\udd39 Description: Stack-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.\n\ud83d\udccf Published: 2025-04-08T17:23:59.303Z\n\ud83d\udccf Modified: 2025-04-08T19:37:28.223Z\n\ud83d\udd17 References:\n1. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27481", "creation_timestamp": "2025-04-08T19:47:27.000000Z"}, {"uuid": "3a52220b-7b69-4561-8116-c4a52e86f6f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27934", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11029", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27934\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: Information disclosure of authentication information in the specific service vulnerability exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If exploited, a remote unauthenticated attacker may obtain the product authentication information.\n\ud83d\udccf Published: 2025-04-09T09:03:32.130Z\n\ud83d\udccf Modified: 2025-04-09T09:03:32.130Z\n\ud83d\udd17 References:\n1. https://www.inaba.co.jp/abaniact/news/security_20250404.pdf\n2. https://jvn.jp/en/vu/JVNVU93925742/", "creation_timestamp": "2025-04-09T09:47:31.000000Z"}, {"uuid": "bc6b2fb7-08bc-4065-873a-64e011b76fdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2749", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mkevanrdo22s", "content": "", "creation_timestamp": "2026-04-26T06:06:44.584939Z"}, {"uuid": "ffc16937-36f5-49e2-af13-6ad96635fbb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27490", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11186", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27490\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)\n\ud83d\udd39 Description: Heap-based buffer overflow in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.\n\ud83d\udccf Published: 2025-04-08T17:24:04.563Z\n\ud83d\udccf Modified: 2025-04-09T23:42:04.018Z\n\ud83d\udd17 References:\n1. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27490", "creation_timestamp": "2025-04-09T23:48:03.000000Z"}, {"uuid": "4f36b364-95eb-4d01-bd14-01c7951919b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27727", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11185", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27727\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)\n\ud83d\udd39 Description: Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to elevate privileges locally.\n\ud83d\udccf Published: 2025-04-08T17:24:05.243Z\n\ud83d\udccf Modified: 2025-04-09T23:42:04.605Z\n\ud83d\udd17 References:\n1. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27727", "creation_timestamp": "2025-04-09T23:48:03.000000Z"}, {"uuid": "2fb0b3f2-3999-4c6a-98b7-b04b7f1cf059", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27729", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11184", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27729\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)\n\ud83d\udd39 Description: Use after free in Windows Shell allows an unauthorized attacker to execute code locally.\n\ud83d\udccf Published: 2025-04-08T17:24:05.843Z\n\ud83d\udccf Modified: 2025-04-09T23:42:05.212Z\n\ud83d\udd17 References:\n1. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27729", "creation_timestamp": "2025-04-09T23:48:02.000000Z"}, {"uuid": "46de727b-0857-44f4-bf56-466f0d08b912", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27812", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11226", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27812\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: MSI Center before 2.0.52.0 allows TOCTOU Local Privilege Escalation.\n\ud83d\udccf Published: 2025-04-10T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-10T12:28:50.799Z\n\ud83d\udd17 References:\n1. https://csr.msi.com/global/product-security-advisories", "creation_timestamp": "2025-04-10T12:49:18.000000Z"}, {"uuid": "14dfd86b-cd7c-45c9-88ce-e9bf928078ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27081", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11198", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27081\n\ud83d\udd25 CVSS Score: 6.8 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)\n\ud83d\udd39 Description: A potential security vulnerability in HPE NonStop OSM Service Connection Suite could potentially be exploited to allow a local Denial of Service.\n\ud83d\udccf Published: 2025-04-10T08:43:48.473Z\n\ud83d\udccf Modified: 2025-04-10T08:43:48.473Z\n\ud83d\udd17 References:\n1. https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns04836en_us&docLocale=en_US", "creation_timestamp": "2025-04-10T08:48:40.000000Z"}, {"uuid": "74806fc1-a9cb-4839-902c-b256c33ab204", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27350", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11219", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27350\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hugh Mungus Vice Versa allows Reflected XSS.This issue affects Vice Versa: from n/a through 2.2.3.\n\ud83d\udccf Published: 2025-04-10T10:21:37.799Z\n\ud83d\udccf Modified: 2025-04-10T10:21:37.799Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/vice-versa/vulnerability/wordpress-vice-versa-plugin-2-2-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-10T10:49:18.000000Z"}, {"uuid": "e5327e73-46ce-4834-ba7f-b3db75b56102", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27690", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11387", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27690\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.1.0, contains a use of default password vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to the takeover of a high privileged user account.\n\ud83d\udccf Published: 2025-04-10T02:04:43.949Z\n\ud83d\udccf Modified: 2025-04-11T03:55:24.269Z\n\ud83d\udd17 References:\n1. https://www.dell.com/support/kbdoc/en-us/000300860/dsa-2025-119-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities", "creation_timestamp": "2025-04-11T04:49:39.000000Z"}, {"uuid": "f06c9f0c-3911-4426-8c6c-f9407913711b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27009", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11598", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27009\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) vulnerability in wphocus My auctions allegro allows Stored XSS.This issue affects My auctions allegro: from n/a through 3.6.20.\n\ud83d\udccf Published: 2025-04-14T11:05:34.699Z\n\ud83d\udccf Modified: 2025-04-14T11:05:34.699Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/my-auctions-allegro-free-edition/vulnerability/wordpress-my-auctions-allegro-plugin-3-6-20-cross-site-request-forgery-csrf-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-14T11:53:34.000000Z"}, {"uuid": "61cb5da5-d587-45c9-9786-d1911f591cfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27682", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11926", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27682\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735 Application 20.0.1330 allows Insecure Log Permissions V-2022-005.\n\ud83d\udccf Published: 2025-03-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-15T21:41:19.974Z\n\ud83d\udd17 References:\n1. https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm\n2. https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html", "creation_timestamp": "2025-04-15T21:55:49.000000Z"}, {"uuid": "34c69905-4fba-4bd1-9cd8-d86137a138bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27980", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11824", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27980\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: cashbook v4.0.3 has an arbitrary file read vulnerability in /api/entry/flow/invoice/show?invoice=.\n\ud83d\udccf Published: 2025-04-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-15T14:45:58.048Z\n\ud83d\udd17 References:\n1. https://blog.csdn.net/qq_52469895/article/details/145496958?sharetype=blogdetail&sharerId=145496958&sharerefer=PC&sharesource=qq_52469895&spm=1011.2480.3001.8118", "creation_timestamp": "2025-04-15T14:55:04.000000Z"}, {"uuid": "91586339-cd36-44ba-8778-a6cf2cb0a539", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27680", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11928", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27680\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.750 Application 20.0.1442 allows Insecure Firmware Image with Insufficient Verification of Data Authenticity V-2024-004.\n\ud83d\udccf Published: 2025-03-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-15T21:40:03.268Z\n\ud83d\udd17 References:\n1. https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm\n2. https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html", "creation_timestamp": "2025-04-15T21:55:51.000000Z"}, {"uuid": "b4ec5f23-e507-4ccc-b0a1-daa06445f0d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27681", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11927", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27681\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735 Application 20.0.1330 mishandles Client Inter-process Security V-2022-004.\n\ud83d\udccf Published: 2025-03-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-15T21:40:39.288Z\n\ud83d\udd17 References:\n1. https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm\n2. https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html", "creation_timestamp": "2025-04-15T21:55:50.000000Z"}, {"uuid": "e829b026-556a-4fb3-8ef4-a85b494df631", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27684", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11924", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27684\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735 Application 20.0.1330 allows Debug Bundle Contains Sensitive Data V-2022-003.\n\ud83d\udccf Published: 2025-03-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-15T21:42:42.012Z\n\ud83d\udd17 References:\n1. https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm\n2. https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html", "creation_timestamp": "2025-04-15T21:55:47.000000Z"}, {"uuid": "31b90b4f-c5d4-496a-9c01-19c91d95c157", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27927", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11923", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27927\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: An unauthenticated attackers can obtain a list of smart devices by knowing a valid username through an unprotected API.\n\ud83d\udccf Published: 2025-04-15T21:43:15.834Z\n\ud83d\udccf Modified: 2025-04-15T21:43:15.834Z\n\ud83d\udd17 References:\n1. https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-04", "creation_timestamp": "2025-04-15T21:55:43.000000Z"}, {"uuid": "b7b5fb1f-3283-478c-8694-c0e43d8b3b0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27685", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11922", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27685\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735 Application 20.0.1330 allows Configuration File Contains CA & Private Key V-2022-001.\n\ud83d\udccf Published: 2025-03-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-15T21:43:43.753Z\n\ud83d\udd17 References:\n1. https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm\n2. https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html", "creation_timestamp": "2025-04-15T21:55:42.000000Z"}, {"uuid": "4fb485b6-9fcc-4a61-81fc-1188e0acc4fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27679", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11929", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27679\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cross-Site Scripting in Badge Registration V-2023-005.\n\ud83d\udccf Published: 2025-03-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-15T21:39:24.958Z\n\ud83d\udd17 References:\n1. https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm\n2. https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html", "creation_timestamp": "2025-04-15T21:55:55.000000Z"}, {"uuid": "97d8a181-4c2d-4860-95b8-858bbcae8084", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27683", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11925", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27683\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735 Application 20.0.1330 allows Driver Unrestricted Upload of File with Dangerous Type V-2022-006.\n\ud83d\udccf Published: 2025-03-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-15T21:42:06.247Z\n\ud83d\udd17 References:\n1. https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm\n2. https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html", "creation_timestamp": "2025-04-15T21:55:48.000000Z"}, {"uuid": "3a29e27f-493f-4b55-9c32-16a7cffd0e87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27676", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11933", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27676\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cross-Site Scripting in Reports V-2023-002.\n\ud83d\udccf Published: 2025-03-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-15T21:37:23.281Z\n\ud83d\udd17 References:\n1. https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm\n2. https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html", "creation_timestamp": "2025-04-15T21:55:59.000000Z"}, {"uuid": "a1d9d590-0629-4262-aaf7-2880c0ab6ae6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27677", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11932", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27677\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Symbolic Links For Unprivileged File Interaction V-2022-002.\n\ud83d\udccf Published: 2025-03-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-15T21:37:57.265Z\n\ud83d\udd17 References:\n1. https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm\n2. https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html", "creation_timestamp": "2025-04-15T21:55:58.000000Z"}, {"uuid": "779e3916-b4ab-485b-a1ac-1a574134b769", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27678", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11931", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27678\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Client Remote Code Execution V-2023-001.\n\ud83d\udccf Published: 2025-03-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-15T21:38:40.851Z\n\ud83d\udd17 References:\n1. https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm\n2. https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html", "creation_timestamp": "2025-04-15T21:55:57.000000Z"}, {"uuid": "280c1b8a-af94-4a67-b4e2-e3249bb9b7bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27657", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11937", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27657\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Remote Code Execution V-2023-008.\n\ud83d\udccf Published: 2025-03-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-15T21:33:35.750Z\n\ud83d\udd17 References:\n1. https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm\n2. https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html", "creation_timestamp": "2025-04-15T21:56:06.000000Z"}, {"uuid": "b2d031a3-a081-4003-a12e-336ce75d89dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27674", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11936", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27674\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Hardcoded IdP Key V-2023-006.\n\ud83d\udccf Published: 2025-03-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-15T21:34:27.790Z\n\ud83d\udd17 References:\n1. https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm\n2. https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html", "creation_timestamp": "2025-04-15T21:56:05.000000Z"}, {"uuid": "484d7511-b17a-4b2d-9273-98ef80ad3d9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27675", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11935", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27675\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Vulnerable OpenID Implementation V-2023-004.\n\ud83d\udccf Published: 2025-03-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-15T21:35:41.001Z\n\ud83d\udd17 References:\n1. https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm\n2. https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html", "creation_timestamp": "2025-04-15T21:56:05.000000Z"}, {"uuid": "60397b4b-524b-42fc-9cc8-14d2901a94c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27929", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11950", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27929\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Unauthenticated attackers can retrieve full list of users associated with arbitrary accounts.\n\ud83d\udccf Published: 2025-04-15T21:59:31.462Z\n\ud83d\udccf Modified: 2025-04-15T21:59:31.462Z\n\ud83d\udd17 References:\n1. https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-04", "creation_timestamp": "2025-04-15T22:55:54.000000Z"}, {"uuid": "6c6bcbbd-3924-4158-9792-8d0ddfc56dec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27561", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11954", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27561\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Unauthenticated attackers can rename \"rooms\" of arbitrary users.\n\ud83d\udccf Published: 2025-04-15T21:55:20.141Z\n\ud83d\udccf Modified: 2025-04-15T21:55:20.141Z\n\ud83d\udd17 References:\n1. https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-04", "creation_timestamp": "2025-04-15T22:56:01.000000Z"}, {"uuid": "a4c31564-b0a3-4fc6-a4f6-c307dcbd2063", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mkgat2dm5b2s", "content": "", "creation_timestamp": "2026-04-26T19:06:30.269800Z"}, {"uuid": "7a860ee4-3915-4d7a-b820-7e3010a5c366", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27892", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12139", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27892\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Shopware prior to version 6.5.8.13 is affected by a SQL injection vulnerability in the /api/search/order endpoint. NOTE: this issue exists because of a CVE-2024-22406 and CVE-2024-42357 regression.\n\ud83d\udccf Published: 2025-04-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-16T18:32:23.303Z\n\ud83d\udd17 References:\n1. https://github.com/shopware/shopware/security/advisories/GHSA-8g35-7rmw-7f59\n2. https://www.redteam-pentesting.de/en/advisories/rt-sa-2025-001/", "creation_timestamp": "2025-04-16T18:56:18.000000Z"}, {"uuid": "6654daae-00c7-4687-ae30-3dd5add4430f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27305", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5188", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27305\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Achal Jain Table of Contents Block allows Stored XSS. This issue affects Table of Contents Block: from n/a through 1.0.2.\n\ud83d\udccf Published: 2025-02-24T14:48:55.681Z\n\ud83d\udccf Modified: 2025-02-24T16:57:37.570Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/table-of-contents/vulnerability/wordpress-table-of-contents-block-plugin-1-0-2-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-02-24T17:21:55.000000Z"}, {"uuid": "5d8e756c-03c2-4ff4-ae9b-b217879cfd1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-28)", "content": "", "creation_timestamp": "2026-04-28T00:00:00.000000Z"}, {"uuid": "e07f6c57-f229-438d-8a80-9f96bc8c4a85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27086", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12744", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27086\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A vulnerability in the HPE Performance Cluster Manager (HPCM) GUI could allow an attacker to bypass authentication.\n\ud83d\udccf Published: 2025-04-21T18:07:11.498Z\n\ud83d\udccf Modified: 2025-04-21T18:19:30.528Z\n\ud83d\udd17 References:\n1. https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbcr04842en_us&docLocale=en_US", "creation_timestamp": "2025-04-21T19:02:27.000000Z"}, {"uuid": "28f515e6-6471-443c-8512-abd1ad399ca7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27907", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12911", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27907\n\ud83d\udd25 CVSS Score: 4.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N)\n\ud83d\udd39 Description: IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.\n\ud83d\udccf Published: 2025-04-22T16:20:21.645Z\n\ud83d\udccf Modified: 2025-04-22T16:20:21.645Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7231514", "creation_timestamp": "2025-04-22T17:03:36.000000Z"}, {"uuid": "a22a0f5b-f7be-4202-92a1-9959ceaeaa02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "published-proof-of-concept", "source": "Telegram/Ph5XVLoVKPKzeNd3zHbruXHl3wn31oqUjoUVrNk6if5Q2TM", "content": "", "creation_timestamp": "2026-01-02T21:00:05.000000Z"}, {"uuid": "33342bf8-5a5a-452a-99e2-b737be3a3694", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27087", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12994", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27087\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A vulnerability in the kernel of the Cray Operating System (COS) could allow an attacker to perform a local Denial of Service (DoS) attack.\n\ud83d\udccf Published: 2025-04-22T21:38:20.893Z\n\ud83d\udccf Modified: 2025-04-22T21:38:20.893Z\n\ud83d\udd17 References:\n1. https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbcr04838en_us&docLocale=en_US", "creation_timestamp": "2025-04-22T22:04:03.000000Z"}, {"uuid": "43876c3b-f084-42bd-8844-5f8d85458f9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27655", "type": "seen", "source": "Telegram/1Np4XDUTqbMrImIcHm8RIgunvF0kDg4_Xu2I85ZHdh8fyW9e", "content": "", "creation_timestamp": "2025-03-06T02:16:26.000000Z"}, {"uuid": "e4f1f194-88f6-43e8-8aa5-3547af7ed6e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2703", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13025", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2703\n\ud83d\udd25 CVSS Score: 6.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L)\n\ud83d\udd39 Description: The built-in XY Chart plugin is vulnerable to a DOM XSS vulnerability. \n\nA user with Editor permissions is able to modify such a panel in order to make it execute arbitrary JavaScript.\n\ud83d\udccf Published: 2025-04-23T11:36:02.852Z\n\ud83d\udccf Modified: 2025-04-23T11:36:02.852Z\n\ud83d\udd17 References:\n1. https://grafana.com/security/security-advisories/cve-2025-2703", "creation_timestamp": "2025-04-23T12:19:33.000000Z"}, {"uuid": "f875e1a2-04ba-46e7-86c4-06592dd2b837", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27654", "type": "seen", "source": "Telegram/vYAys4OoqUz2BTXBm6vR6DpOar5qII0e3eTcF_6fZRCF94pO", "content": "", "creation_timestamp": "2025-03-06T02:16:26.000000Z"}, {"uuid": "1b329217-48d2-4da0-902b-5d603ebcf15a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27580", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13165", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27580\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: NIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67 generates predictable tokens (that depend on username, time, and the fixed 7Dl9#dj- string) and thus allows unauthenticated users with a Common Access Card (CAC) to escalate privileges and compromise any account, including administrators.\n\ud83d\udccf Published: 2025-04-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-23T23:15:05.283Z\n\ud83d\udd17 References:\n1. https://github.com/brics-dev/brics\n2. https://brics.cit.nih.gov\n3. https://github.com/brics-dev/brics/blob/26bc6bb627a9a60e6c6a8a8c29735ae98c2e2679/core/src/main/java/gov/nih/tbi/CoreConstants.java#L38\n4. https://github.com/brics-dev/brics/blob/26bc6bb627a9a60e6c6a8a8c29735ae98c2e2679/service/src/main/java/gov/nih/tbi/account/service/complex/AccountManagerImpl.java#L725-L732\n5. https://github.com/RoseHacks/Vulnerability.Research/blob/main/CVE-2025-27580/README.md\n6. https://bugculture.io/CVE-2025-27580/", "creation_timestamp": "2025-04-24T00:05:22.000000Z"}, {"uuid": "462944ed-60bb-4d21-ae15-6f2a80b3f2e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27581", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13164", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27581\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: NIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67 allows users who lack the InET role to access the InET module via direct requests to known endpoints.\n\ud83d\udccf Published: 2025-04-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-23T23:21:18.702Z\n\ud83d\udd17 References:\n1. https://github.com/brics-dev/brics\n2. https://brics.cit.nih.gov\n3. https://github.com/RoseHacks/Vulnerability.Research/blob/main/CVE-2025-27581/README.md", "creation_timestamp": "2025-04-24T00:05:21.000000Z"}, {"uuid": "13cc3f9a-ded4-42c5-958f-9c204d8e66db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27653", "type": "seen", "source": "Telegram/l5BxjSpfp8_aldXmMba3WP_b_g4e-IrYfqjd7b9tQ4HwGsit", "content": "", "creation_timestamp": "2025-03-06T02:16:26.000000Z"}, {"uuid": "d75839a6-664f-4942-b797-51d7576dde4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27365", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14409", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27365\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, and MQ Operator SC2 3.2.0 through 3.2.10\u00a0\n\nClient connecting to a MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA channel process terminating it.\n\ud83d\udccf Published: 2025-05-01T21:24:24.884Z\n\ud83d\udccf Modified: 2025-05-01T21:44:17.412Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7232272", "creation_timestamp": "2025-05-01T22:21:36.000000Z"}, {"uuid": "6c897945-ee90-4404-aa58-ef2728063e65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27652", "type": "seen", "source": "Telegram/djmea3PYi4q79vHmmPTef919tUUGLS31NWeGDL-g3p4ra3An", "content": "", "creation_timestamp": "2025-03-06T02:16:25.000000Z"}, {"uuid": "6366a642-4f8f-4e52-9e70-6b42d90d1621", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27651", "type": "seen", "source": "Telegram/UuhxsY2rGCuaWse9woDs5aUnU_Lk3vC8GD68yg9AyyqkTsVR", "content": "", "creation_timestamp": "2025-03-06T02:16:25.000000Z"}, {"uuid": "e4812ac0-8a3f-441d-adc2-c100a18c7ba4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27533", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15288", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27533\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/AU:Y/R:A/V:D/RE:M/U:Red)\n\ud83d\udd39 Description: Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ.\n\nDuring unmarshalling of OpenWire commands the size value of buffers was not properly validated which could lead to excessive memory allocation and be exploited to cause a denial of service (DoS) by depleting process memory, thereby affecting applications and services that rely on the availability of the ActiveMQ broker when not using mutual TLS connections.\nThis issue affects Apache ActiveMQ: from 6.0.0 before 6.1.6, from 5.18.0 before 5.18.7, from 5.17.0 before 5.17.7, before 5.16.8. ActiveMQ 5.19.0 is not affected.\n\nUsers are recommended to upgrade to version 6.1.6+, 5.19.0+,  5.18.7+, 5.17.7, or 5.16.8 or which fixes the issue.\n\nExisting users may implement mutual TLS to mitigate the risk on affected brokers.\n\ud83d\udccf Published: 2025-05-07T08:59:00.249Z\n\ud83d\udccf Modified: 2025-05-07T09:04:12.173Z\n\ud83d\udd17 References:\n1. https://lists.apache.org/thread/8hcm25vf7mchg4zbbhnlx2lc5bs705hg", "creation_timestamp": "2025-05-07T09:23:35.000000Z"}, {"uuid": "49a1fca1-d402-494e-ae23-cdbaf42e8e4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2778", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15322", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2778\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: N/A\n\ud83d\udccf Modified: 2025-05-07T14:54:59.732Z\n\ud83d\udd17 References:\nNo references available.", "creation_timestamp": "2025-05-07T15:22:38.000000Z"}, {"uuid": "431b6968-b960-4f6d-82dd-95e4c62f018a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27695", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15592", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27695\n\ud83d\udd25 CVSS Score: 4.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: Dell Wyse Management Suite, versions prior to WMS 5.1 contain an Authentication Bypass by Spoofing vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information Disclosure.\n\ud83d\udccf Published: 2025-05-08T19:06:42.090Z\n\ud83d\udccf Modified: 2025-05-08T19:06:42.090Z\n\ud83d\udd17 References:\n1. https://www.dell.com/support/kbdoc/en-us/000296515/dsa-2025-135", "creation_timestamp": "2025-05-08T19:24:10.000000Z"}, {"uuid": "37bd6fbb-d2f4-412d-87e7-4b57dfa7f5e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27578", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15644", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27578\n\ud83d\udd25 CVSS Score: 8.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Pixmeo OsiriX MD is vulnerable to a use after free scenario, which could allow an attacker to upload a crafted DICOM file and cause memory corruption leading to a denial-of-service condition.\n\ud83d\udccf Published: 2025-05-08T22:38:37.140Z\n\ud83d\udccf Modified: 2025-05-08T22:38:37.140Z\n\ud83d\udd17 References:\n1. https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-128-01\n2. https://www.osirix-viewer.com/osirix/osirix-md/\n3. https://www.osirix-viewer.com/about/contact/", "creation_timestamp": "2025-05-08T23:24:08.000000Z"}, {"uuid": "282511a7-fcf2-48f7-8109-c73a8cb13ca6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27720", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15642", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27720\n\ud83d\udd25 CVSS Score: 9.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: The Pixmeo Osirix MD Web Portal sends credential information without encryption, which could allow an attacker to steal credentials.\n\ud83d\udccf Published: 2025-05-08T22:43:28.046Z\n\ud83d\udccf Modified: 2025-05-08T22:43:28.046Z\n\ud83d\udd17 References:\n1. https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-128-01\n2. https://www.osirix-viewer.com/osirix/osirix-md/\n3. https://www.osirix-viewer.com/about/contact/", "creation_timestamp": "2025-05-08T23:24:06.000000Z"}, {"uuid": "37f1bfde-9ea4-41d6-be39-2467ea899b9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27468", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16236", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27468\n\ud83d\udd25 CVSS Score: 7 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)\n\ud83d\udd39 Description: Improper privilege management in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.\n\ud83d\udccf Published: 2025-05-13T16:58:47.262Z\n\ud83d\udccf Modified: 2025-05-13T20:13:33.750Z\n\ud83d\udd17 References:\n1. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27468", "creation_timestamp": "2025-05-13T20:31:19.000000Z"}, {"uuid": "f8d49207-042a-4e51-9411-a1b534f9ac82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27773", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15837", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27773\n\ud83d\udd25 CVSS Score: 8.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N)\n\ud83d\udd39 Description: The SimpleSAMLphp SAML2 library is a PHP library for SAML2 related functionality. Prior to versions 4.17.0 and 5.0.0-alpha.20, there is a signature confusion attack in the HTTPRedirect binding. An attacker with any signed SAMLResponse via the HTTP-Redirect binding can cause the application to accept an unsigned message. Versions 4.17.0 and 5.0.0-alpha.20 contain a fix for the issue.\n\ud83d\udccf Published: 2025-03-11T19:04:52.135Z\n\ud83d\udccf Modified: 2025-05-09T20:03:38.107Z\n\ud83d\udd17 References:\n1. https://github.com/simplesamlphp/saml2/security/advisories/GHSA-46r4-f8gj-xg56\n2. https://github.com/simplesamlphp/saml2/commit/7867d6099dc7f31bed1ea10e5bea159c5623d2a0\n3. https://github.com/simplesamlphp/saml2/blob/9545abd0d9d48388f2fa00469c5c1e0294f0303e/src/SAML2/HTTPRedirect.php#L104-L113\n4. https://github.com/simplesamlphp/saml2/blob/9545abd0d9d48388f2fa00469c5c1e0294f0303e/src/SAML2/HTTPRedirect.php#L178-L217", "creation_timestamp": "2025-05-09T20:26:09.000000Z"}, {"uuid": "704a68d2-cd2c-4fa0-a18e-ad1509d2add1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27696", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16086", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27696\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N)\n\ud83d\udd39 Description: Improper Authorization vulnerability in Apache Superset allows ownership takeover of dashboards, charts or datasets by authenticated users with read permissions.\n\nThis issue affects Apache Superset: through 4.1.1.\n\nUsers are recommended to upgrade to version 4.1.2 or above, which fixes the issue.\n\ud83d\udccf Published: 2025-05-13T08:21:21.199Z\n\ud83d\udccf Modified: 2025-05-13T08:21:21.199Z\n\ud83d\udd17 References:\n1. https://lists.apache.org/thread/k2od03bxnxs6vcp80sr03ywcxl194413", "creation_timestamp": "2025-05-13T08:30:18.000000Z"}, {"uuid": "5e49a55b-5ee2-48b2-b05e-d2ce6f893ceb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27488", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16182", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27488\n\ud83d\udd25 CVSS Score: 6.7 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)\n\ud83d\udd39 Description: Use of hard-coded credentials in Windows Hardware Lab Kit allows an authorized attacker to elevate privileges locally.\n\ud83d\udccf Published: 2025-05-13T16:58:55.126Z\n\ud83d\udccf Modified: 2025-05-13T18:13:57.657Z\n\ud83d\udd17 References:\n1. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27488", "creation_timestamp": "2025-05-13T18:30:48.000000Z"}, {"uuid": "54b943e5-3cf1-47bf-b2c5-5d9edbf8e8c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27523", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16454", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27523\n\ud83d\udd25 CVSS Score: 8.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:H)\n\ud83d\udd39 Description: XXE vulnerability in Hitachi JP1/IT Desktop Management 2 - Smart Device Manager on Windows.This issue affects JP1/IT Desktop Management 2 - Smart Device Manager: from 12-00 before 12-00-08, from 11-10 through 11-10-08, from 11-00 through 11-00-05, from 10-50 through 10-50-06.\n\ud83d\udccf Published: 2025-05-15T06:22:09.764Z\n\ud83d\udccf Modified: 2025-05-15T06:22:09.764Z\n\ud83d\udd17 References:\n1. https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2025-115/index.html", "creation_timestamp": "2025-05-15T06:33:24.000000Z"}, {"uuid": "c1056a12-0596-4a39-b64b-5648daf8a391", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27524", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16453", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27524\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: Weak encryption vulnerability in Hitachi JP1/IT Desktop Management 2 - Smart Device Manager on Windows.This issue affects JP1/IT Desktop Management 2 - Smart Device Manager: from 12-00 before 12-00-08, from 11-10 through 11-10-08, from 11-00 through 11-00-05, from 10-50 through 10-50-06.\n\ud83d\udccf Published: 2025-05-15T06:27:32.686Z\n\ud83d\udccf Modified: 2025-05-15T06:27:32.686Z\n\ud83d\udd17 References:\n1. https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2025-115/index.html", "creation_timestamp": "2025-05-15T06:33:23.000000Z"}, {"uuid": "a062a512-f875-4135-ac78-224f4624927d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27525", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16457", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27525\n\ud83d\udd25 CVSS Score: 3.9 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:L)\n\ud83d\udd39 Description: Information Exposure vulnerability in Hitachi JP1/IT Desktop Management 2 - Smart Device Manager on Windows.This issue affects JP1/IT Desktop Management 2 - Smart Device Manager: from 12-00 before 12-00-08, from 11-10 through 11-10-08, from 11-00 through 11-00-05, from 10-50 through 10-50-06.\n\ud83d\udccf Published: 2025-05-15T06:45:58.849Z\n\ud83d\udccf Modified: 2025-05-15T06:45:58.849Z\n\ud83d\udd17 References:\n1. https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2025-115/index.html", "creation_timestamp": "2025-05-15T07:33:26.000000Z"}, {"uuid": "68d44418-2733-43ad-b2d9-df4e19127633", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27361", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19714", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27361\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in thhake Photo Express for Google allows Reflected XSS. This issue affects Photo Express for Google: from n/a through 0.3.2.\n\ud83d\udccf Published: 2025-06-27T11:52:45.537Z\n\ud83d\udccf Modified: 2025-06-27T13:41:51.353Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/photo-express-for-google/vulnerability/wordpress-photo-express-for-google-plugin-0-3-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-06-27T13:50:52.000000Z"}, {"uuid": "c8c988b9-05ed-4cc3-a6bc-eb3cc3e9174a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27700", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17656", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27700\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: There is a possible bypass of carrier restrictions due to an unusual root cause. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.\n\ud83d\udccf Published: 2025-05-27T15:41:52.015Z\n\ud83d\udccf Modified: 2025-05-27T15:41:52.015Z\n\ud83d\udd17 References:\n1. https://source.android.com/security/bulletin/pixel/2025-05-01", "creation_timestamp": "2025-05-27T15:49:13.000000Z"}, {"uuid": "184dac2c-bd44-460b-ab7f-1b31cb2dfabc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27701", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17654", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27701\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the function process_crypto_cmd, the values of ptrs[i] can be potentially equal to NULL which is valid value after calling slice_map_array(). Later this values will be derefenced without prior NULL check, which can lead to local Temporary DoS or OOB Read, leading to information disclosure.\n\ud83d\udccf Published: 2025-05-27T15:42:11.318Z\n\ud83d\udccf Modified: 2025-05-27T15:42:11.318Z\n\ud83d\udd17 References:\n1. https://source.android.com/security/bulletin/pixel/2025-05-01", "creation_timestamp": "2025-05-27T15:49:11.000000Z"}, {"uuid": "a94b1762-bb5c-42d0-bace-ee37f1f43fe2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27010", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16924", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27010\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Path Traversal: '.../...//' vulnerability in bslthemes Tastyc allows PHP Local File Inclusion.This issue affects Tastyc: from n/a before 2.5.2.\n\ud83d\udccf Published: 2025-05-19T18:08:53.393Z\n\ud83d\udccf Modified: 2025-05-19T19:01:15.335Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/theme/tastyc/vulnerability/wordpress-tastyc-2-5-2-local-file-inclusion-vulnerability?_s_id=cve", "creation_timestamp": "2025-05-19T19:39:20.000000Z"}, {"uuid": "1ef5e0c4-36ed-4d89-b782-a5d4c9190d5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27920", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16946", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27920\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Output Messenger before 2.0.63 was vulnerable to a directory traversal attack through improper file path handling. By using ../ sequences in parameters, attackers could access sensitive files outside the intended directory, potentially leading to configuration leakage or arbitrary file access.\n\ud83d\udccf Published: 2025-05-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-19T22:20:23.370Z\n\ud83d\udd17 References:\n1. https://www.srimax.com/products-2/output-messenger/\n2. https://www.outputmessenger.com/cve-2025-27920/", "creation_timestamp": "2025-05-19T22:39:45.000000Z"}, {"uuid": "e487e643-ea08-476c-b845-509878ad0e33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27891", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16995", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27891\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400. The lack of a length check leads to out-of-bounds reads via malformed NAS packets.\n\ud83d\udccf Published: 2025-05-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-20T14:27:14.444Z\n\ud83d\udd17 References:\n1. https://semiconductor.samsung.com/support/quality-support/product-security-updates/\n2. https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-27891/", "creation_timestamp": "2025-05-20T14:41:01.000000Z"}, {"uuid": "683b0a2e-0275-411b-8d25-fe4ee77dc08b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27804", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17107", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27804\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Several OS command injection vulnerabilities exist in the device firmware in the /var/salia/mqtt.php script. By publishing a specially crafted message to a certain MQTT topic arbitrary OS commands can be executed with root permissions.\n\ud83d\udccf Published: 2025-05-21T11:35:11.940Z\n\ud83d\udccf Modified: 2025-05-21T11:35:11.940Z\n\ud83d\udd17 References:\n1. https://r.sec-consult.com/echarge", "creation_timestamp": "2025-05-21T11:46:16.000000Z"}, {"uuid": "52ab1cab-0c84-4770-8bda-06f6483ffc54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27407", "type": "published-proof-of-concept", "source": "Telegram/3enB83vBivmCtuCKnIufTidDmfLZ95Nh7V4en_RLHKIkMvY", "content": "", "creation_timestamp": "2026-04-25T07:00:14.000000Z"}, {"uuid": "729c6651-8454-43c9-9ee7-776d4f05c8ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27997", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17155", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27997\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in Blizzard Battle.net v2.40.0.15267 allows attackers to escalate privileges via placing a crafted shell script or executable into the C:\\ProgramData directory.\n\ud83d\udccf Published: 2025-05-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-21T16:04:25.712Z\n\ud83d\udd17 References:\n1. https://gist.github.com/sornram9254/4593dd5eb2bcca50d68dc6ac70e40b24", "creation_timestamp": "2025-05-21T16:42:01.000000Z"}, {"uuid": "5f890373-d591-45ff-aa11-74c2f8a506e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2759", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17215", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2759\n\ud83d\udd25 CVSS Score: 7 (cvssV3_0, Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: GStreamer Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of GStreamer. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\nThe specific flaw exists within the product installer. The issue results from incorrect permissions on folders. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of a target user. Was ZDI-CAN-25448.\n\ud83d\udccf Published: 2025-05-22T00:57:49.889Z\n\ud83d\udccf Modified: 2025-05-22T00:57:49.889Z\n\ud83d\udd17 References:\n1. https://www.zerodayinitiative.com/advisories/ZDI-25-268/", "creation_timestamp": "2025-05-22T01:42:44.000000Z"}, {"uuid": "a27fbcb2-e761-4610-8a21-ca4b68efad7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2749", "type": "seen", "source": "Telegram/4zRGsEPwCWPOVkiJwGYn1R_sXuEnR_EKMT0DdgACfDkyyoA", "content": "", "creation_timestamp": "2026-04-20T21:21:38.000000Z"}, {"uuid": "df996096-e583-4a19-a41a-6e7d0b6e643a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27038", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17927", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27038\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.\n\ud83d\udccf Published: 2025-06-03T05:53:06.692Z\n\ud83d\udccf Modified: 2025-06-10T16:20:52.061Z\n\ud83d\udd17 References:\n1. https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html", "creation_timestamp": "2025-06-10T16:31:52.000000Z"}, {"uuid": "0871bb6a-d858-4a7f-97af-7c1c4f1aaceb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27817", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17841", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27817\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A possible arbitrary file read and SSRF vulnerability has been identified in Apache Kafka Client. Apache Kafka Clients accept configuration data for setting the SASL/OAUTHBEARER connection with the brokers, including \"sasl.oauthbearer.token.endpoint.url\" and \"sasl.oauthbearer.jwks.endpoint.url\". Apache Kafka allows clients to read an arbitrary file and return the content in the error log, or sending requests to an unintended location. In applications where Apache Kafka Clients configurations can be specified by an untrusted party, attackers may use the \"sasl.oauthbearer.token.endpoint.url\" and \"sasl.oauthbearer.jwks.endpoint.url\" configuratin to read arbitrary contents of the disk and environment variables or make requests to an unintended location. In particular, this flaw may be used in Apache Kafka Connect to escalate from REST API access to filesystem/environment/URL access, which may be undesirable in certain environments, including SaaS products. \n\nSince Apache Kafka 3.9.1/4.0.0, we have added a system property (\"-Dorg.apache.kafka.sasl.oauthbearer.allowed.urls\") to set the allowed urls in SASL JAAS configuration. In 3.9.1, it accepts all urls by default for backward compatibility. However in 4.0.0 and newer, the default value is empty list and users have to set the allowed urls explicitly.\n\ud83d\udccf Published: 2025-06-10T07:55:14.422Z\n\ud83d\udccf Modified: 2025-06-10T08:05:23.450Z\n\ud83d\udd17 References:\n1. https://kafka.apache.org/cve-list", "creation_timestamp": "2025-06-10T08:32:42.000000Z"}, {"uuid": "226530a0-17c8-4cba-827b-1c666393148e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27818", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17840", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27818\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A possible security vulnerability has been identified in Apache Kafka.\nThis requires access to a alterConfig to the\u00a0cluster resource, or Kafka Connect worker, and the ability to create/modify connectors on it with an arbitrary Kafka client SASL JAAS config\nand a SASL-based security protocol, which has been possible on Kafka clusters since Apache Kafka 2.0.0 (Kafka Connect 2.3.0).\nWhen configuring the broker via config file or AlterConfig command, or connector via the Kafka Kafka Connect REST API, an authenticated operator\u00a0can set the `sasl.jaas.config`\nproperty for any of the connector's Kafka clients to \"com.sun.security.auth.module.LdapLoginModule\", which can be done via the\n`producer.override.sasl.jaas.config`, `consumer.override.sasl.jaas.config`, or `admin.override.sasl.jaas.config` properties.\nThis will allow the server to connect to the attacker's LDAP server\nand deserialize the LDAP response, which the attacker can use to execute java deserialization gadget chains on the Kafka connect server.\nAttacker can cause unrestricted deserialization of untrusted data (or) RCE vulnerability when there are gadgets in the classpath.\n\nSince Apache Kafka 3.0.0, users are allowed to specify these properties in connector configurations for Kafka Connect clusters running with out-of-the-box\nconfigurations. Before Apache Kafka 3.0.0, users may not specify these properties unless the Kafka Connect cluster has been reconfigured with a connector\nclient override policy that permits them.\n\nSince Apache Kafka 3.9.1/4.0.0, we have added a system property (\"-Dorg.apache.kafka.disallowed.login.modules\") to disable the problematic login modules usage\nin SASL JAAS configuration. Also by default \"com.sun.security.auth.module.JndiLoginModule,com.sun.security.auth.module.LdapLoginModule\" are disabled in Apache Kafka Connect 3.9.1/4.0.0. \n\nWe advise the Kafka users to validate connector configurations and only allow trusted LDAP configurations. Also examine connector dependencies for \nvulnerable versions and either upgrade their connectors, upgrading that specific dependency, or removing the connectors as options for remediation. Finally,\nin addition to leveraging the \"org.apache.kafka.disallowed.login.modules\" system property, Kafka Connect users can also implement their own connector\nclient config override policy, which can be used to control which Kafka client properties can be overridden directly in a connector config and which cannot.\n\ud83d\udccf Published: 2025-06-10T07:52:31.778Z\n\ud83d\udccf Modified: 2025-06-10T08:05:24.998Z\n\ud83d\udd17 References:\n1. https://kafka.apache.org/cve-list", "creation_timestamp": "2025-06-10T08:32:38.000000Z"}, {"uuid": "0c06e84d-cf34-4776-ba66-387a87559302", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27819", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17843", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27819\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In CVE-2023-25194, we announced the RCE/Denial of service attack via SASL JAAS JndiLoginModule configuration in Kafka Connect API. But not only Kafka Connect API is vulnerable to this attack, the Apache Kafka brokers also have this vulnerability. To exploit this vulnerability, the attacker needs to be able to connect to the Kafka cluster and have the AlterConfigs permission on the cluster resource.\n\n\nSince Apache Kafka 3.4.0, we have added a system property (\"-Dorg.apache.kafka.disallowed.login.modules\") to disable the problematic login modules usage in SASL JAAS configuration. Also by default \"com.sun.security.auth.module.JndiLoginModule\" is disabled in Apache Kafka 3.4.0, and \"com.sun.security.auth.module.JndiLoginModule,com.sun.security.auth.module.LdapLoginModule\" is disabled by default in in Apache Kafka 3.9.1/4.0.0\n\ud83d\udccf Published: 2025-06-10T07:54:41.896Z\n\ud83d\udccf Modified: 2025-06-10T07:54:41.896Z\n\ud83d\udd17 References:\n1. https://kafka.apache.org/cve-list", "creation_timestamp": "2025-06-10T08:32:43.000000Z"}, {"uuid": "bec238d2-a6da-4cff-83ea-87051fd8f8f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2745", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18224", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2745\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N)\n\ud83d\udd39 Description: A cross-site scripting vulnerability exists in AVEVA\u00a0PI Web API version 2023 \nSP1 and prior that, if exploited, could allow an authenticated attacker \n(with privileges to create/update annotations or upload media files) to \npersist arbitrary JavaScript code that will be executed by users who \nwere socially engineered to disable content security policy protections \nwhile rendering annotation attachments from within a web browser.\n\ud83d\udccf Published: 2025-06-12T19:42:27.001Z\n\ud83d\udccf Modified: 2025-06-12T20:09:34.976Z\n\ud83d\udd17 References:\n1. https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-08\n2. https://www.aveva.com/en/support-and-success/cyber-security-updates/", "creation_timestamp": "2025-06-12T20:34:15.000000Z"}, {"uuid": "1e48b5e6-3a19-4378-89df-d98efb94b391", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27689", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18233", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27689\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Dell iDRAC Tools, version(s) prior to 11.3.0.0, contain(s) an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.\n\ud83d\udccf Published: 2025-06-12T20:36:24.943Z\n\ud83d\udccf Modified: 2025-06-12T20:36:24.943Z\n\ud83d\udd17 References:\n1. https://www.dell.com/support/kbdoc/en-us/000323242/dsa-2025-169-security-update-for-dell-idrac-tools-vulnerabilities", "creation_timestamp": "2025-06-12T21:34:40.000000Z"}, {"uuid": "001670e9-257b-4904-87d9-b23fe1adda25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27587", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18552", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27587\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable to a Minerva attack, exploitable by measuring the time of signing of random messages using the EVP_DigestSign API, and then using the private key to extract the K value (nonce) from the signatures. Next, based on the bit size of the extracted nonce, one can compare the signing time of full-sized nonces to signatures that used smaller nonces, via statistical tests. There is a side-channel in the P-364 curve that allows private key extraction (also, there is a dependency between the bit size of K and the size of the side channel). NOTE: This CVE is disputed because the OpenSSL security policy explicitly notes that any side channels which require same physical system to be detected are outside of the threat model for the software. The timing signal is so small that it is infeasible to be detected without having the attacking process running on the same physical system.\n\ud83d\udccf Published: 2025-06-16T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-16T21:51:53.496Z\n\ud83d\udd17 References:\n1. https://github.com/openssl/openssl/issues/24253\n2. https://minerva.crocs.fi.muni.cz", "creation_timestamp": "2025-06-16T22:40:48.000000Z"}, {"uuid": "06e703d5-f1ab-446f-8309-498f923231b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27445", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18691", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27445\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A path traversal vulnerability in RSFirewall component 2.9.7 - 3.1.5 for Joomla was discovered. This vulnerability allows authenticated users to read arbitrary files outside the Joomla root directory. The flaw is caused by insufficient sanitization of user-supplied input in file path parameters, allowing attackers to exploit directory traversal sequences (e.g., ../) to access sensitive files\n\ud83d\udccf Published: 2025-06-05T13:20:40.631Z\n\ud83d\udccf Modified: 2025-06-18T04:38:55.787Z\n\ud83d\udd17 References:\n1. https://rsjoomla.com/", "creation_timestamp": "2025-06-18T05:40:26.000000Z"}, {"uuid": "33b25384-f839-4844-b4cb-20dcaba94e72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27753", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18692", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27753\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A SQLi vulnerability in RSMediaGallery component 1.7.4 - 2.1.6 for Joomla was discovered. The vulnerability is due to the use of unescaped user-supplied parameters in SQL queries within the dashboard component. This allows an authenticated attacker to inject malicious SQL code through unsanitized input fields, which are used directly in SQL queries. Exploiting this flaw can lead to unauthorized database access, data leakage, or modification of records.\n\ud83d\udccf Published: 2025-06-05T13:20:51.810Z\n\ud83d\udccf Modified: 2025-06-18T04:38:22.369Z\n\ud83d\udd17 References:\n1. https://rsjoomla.com/", "creation_timestamp": "2025-06-18T05:40:27.000000Z"}, {"uuid": "bc3c740a-28d6-43b6-8604-b135e001c238", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27203", "type": "published-proof-of-concept", "source": "Telegram/wn9Qi4rYZ0wmwM_3QnYEzwEWgvyumLNiA44jY2rXcciEdxg", "content": "", "creation_timestamp": "2026-04-22T21:20:09.000000Z"}, {"uuid": "7e489832-c910-4378-b6d0-2c6c37988db6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27387", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/19187", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27387\n\ud83d\udd25 CVSS Score: 7.4 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N)\n\ud83d\udd39 Description: OPPO Clone Phone uses a weak password WiFi hotspot to transfer files, resulting in Information disclosure.\n\ud83d\udccf Published: 2025-06-23T09:28:08.244Z\n\ud83d\udccf Modified: 2025-06-23T09:33:21.089Z\n\ud83d\udd17 References:\n1. https://security.oppo.com/en/noticeDetail?notice_only_key=NOTICE-1937080145974403072https://", "creation_timestamp": "2025-06-23T09:44:40.000000Z"}, {"uuid": "c2f48e26-9432-436a-a694-aea83d0a6b39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27828", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/19344", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27828\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4, 10.1.0.0 through 10.1.0.5, and 10.2.0.0 through 10.2.0.4 could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient input validation. A successful exploit requires user interaction and could allow an attacker to execute arbitrary scripts with a limited impact on the confidentiality and the integrity.\n\ud83d\udccf Published: 2025-06-24T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-24T14:41:18.480Z\n\ud83d\udd17 References:\n1. https://www.mitel.com/support/security-advisories\n2. https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-misa-2025-0003", "creation_timestamp": "2025-06-24T14:46:31.000000Z"}, {"uuid": "7062a188-422d-4400-beed-73971975ce1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27827", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/19352", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27827\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.2.0.3 could allow an unauthenticated attacker to conduct an information disclosure attack due to improper handling of session data. A successful exploit requires user interaction and could allow an attacker to access sensitive information, leading to unauthorized access to active chat rooms, reading chat data, and sending messages during an active chat session.\n\ud83d\udccf Published: 2025-06-24T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-24T14:17:10.225Z\n\ud83d\udd17 References:\n1. https://www.mitel.com/support/security-advisories\n2. https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-misa-2025-0002-0", "creation_timestamp": "2025-06-24T14:46:44.000000Z"}, {"uuid": "57267cc2-ce5a-4cf1-ab27-0536532f5be2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27153", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/20085", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27153\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: Escalade GLPI plugin is a ticket escalation process helper for GLPI. Prior to version 2.9.11, there is an improper access control vulnerability. This can lead to data exposure and workflow disruptions. This issue has been patched in version 2.9.11.\n\ud83d\udccf Published: 2025-07-01T18:27:50.677Z\n\ud83d\udccf Modified: 2025-07-01T19:35:43.790Z\n\ud83d\udd17 References:\n1. https://github.com/pluginsGLPI/escalade/security/advisories/GHSA-pvqv-8r3r-47m9\n2. https://github.com/pluginsGLPI/escalade/releases/tag/2.9.11", "creation_timestamp": "2025-07-01T20:09:46.000000Z"}, {"uuid": "bd602e2b-ff8b-4b6f-b305-464ce431c221", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27774", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8165", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27774\n\ud83d\udd25 CVSS Score: 8.8 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:P)\n\ud83d\udd39 Description: Applio is a voice conversion tool. Versions 3.2.7 and prior are vulnerable to server-side request forgery (SSRF) and file write in `model_download.py` (line 156 in 3.2.7). The blind SSRF allows for sending requests on behalf of Applio server and can be leveraged to probe for other vulnerabilities on the server itself or on other back-end systems on the internal network, that the Applio server can reach. The blind SSRF can also be coupled with the an arbitrary file read (e.g., CVE-2025-27784) to read files from hosts on the internal network, that the Applio server can reach, which would make it a full SSRF. The file write allows for writing files on the server, which can be coupled with other vulnerabilities, for example an unsafe deserialization, to achieve remote code execution on the Applio server. As of time of publication, no known patches are available.\n\ud83d\udccf Published: 2025-03-19T20:42:56.129Z\n\ud83d\udccf Modified: 2025-03-19T20:42:56.129Z\n\ud83d\udd17 References:\n1. https://securitylab.github.com/advisories/GHSL-2024-341_GHSL-2024-353_Applio/\n2. https://github.com/IAHispano/Applio/blob/29b4a00e4be209f9aac51cd9ccffcc632dfb2973/assets/flask/routes.py#L14\n3. https://github.com/IAHispano/Applio/blob/29b4a00e4be209f9aac51cd9ccffcc632dfb2973/rvc/lib/tools/model_download.py#L143\n4. https://github.com/IAHispano/Applio/blob/29b4a00e4be209f9aac51cd9ccffcc632dfb2973/rvc/lib/tools/model_download.py#L147-L148\n5. https://github.com/IAHispano/Applio/blob/29b4a00e4be209f9aac51cd9ccffcc632dfb2973/tabs/download/download.py#L192-L196", "creation_timestamp": "2025-03-19T21:18:41.000000Z"}, {"uuid": "28c4bfbd-dcae-4e79-a107-08d03d93f917", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2727", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8588", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2727\n\ud83d\udd25 CVSS Score: 8.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, was found in H3C Magic NX30 Pro up to V100R007. This affects an unknown part of the file /api/wizard/getNetworkStatus of the component HTTP POST Request Handler. The manipulation leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-25T02:31:03.932Z\n\ud83d\udccf Modified: 2025-03-25T02:31:03.932Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.300747\n2. https://vuldb.com/?ctiid.300747\n3. https://vuldb.com/?submit.520394\n4. https://github.com/ggstrunk/CVE/blob/main/wizard_getNetworkStatus.md", "creation_timestamp": "2025-03-25T03:24:21.000000Z"}, {"uuid": "f9a234ee-473e-471a-bb27-de9e53eae3b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27432", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7083", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27432\n\ud83d\udd25 CVSS Score: 2.4 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: The eDocument Cockpit (Inbound NF-e) in SAP Electronic Invoicing for Brazil allows an authenticated attacker with certain privileges to gain unauthorized access to each transaction. By executing the specific ABAP method within the ABAP system, an unauthorized attacker could call each transaction and view the inbound delivery details. This vulnerability has a low impact on the confidentiality with no effect on the integrity and the availability of the application.\n\ud83d\udccf Published: 2025-03-11T00:38:36.886Z\n\ud83d\udccf Modified: 2025-03-11T00:38:36.886Z\n\ud83d\udd17 References:\n1. https://me.sap.com/notes/3568865\n2. https://url.sap/sapsecuritypatchday", "creation_timestamp": "2025-03-11T01:41:21.000000Z"}, {"uuid": "d1b94933-e34d-4e6a-8139-bd0ce8fc1472", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27018", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8037", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27018\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Airflow MySQL Provider.\n\nWhen user triggered a DAG with dump_sql or load_sql functions they could pass a table parameter from a UI, that could cause SQL injection by running SQL that was not intended.\nIt could lead to data corruption, modification and others.\nThis issue affects Apache Airflow MySQL Provider: before 6.2.0.\n\nUsers are recommended to upgrade to version 6.2.0, which fixes the issue.\n\ud83d\udccf Published: 2025-03-19T09:06:07.220Z\n\ud83d\udccf Modified: 2025-03-19T09:06:07.220Z\n\ud83d\udd17 References:\n1. https://github.com/apache/airflow/pull/47254\n2. https://github.com/apache/airflow/pull/47255\n3. https://lists.apache.org/thread/m8ohgkwz4mq9njohf66sjwqjdy28gvzf", "creation_timestamp": "2025-03-19T09:49:02.000000Z"}, {"uuid": "131bf302-6e2e-4ca7-a2d2-ec00a44f79f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27599", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12471", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27599\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: Element X Android is a Matrix Android Client provided by element.io. Prior to version 25.04.2, a crafted hyperlink on a webpage, or a locally installed malicious app, can force Element X up to version 25.04.1 to load a webpage with similar permissions to Element Call and automatically grant it temporary access to microphone and camera. This issue has been patched in version 25.04.2.\n\ud83d\udccf Published: 2025-04-18T15:49:11.899Z\n\ud83d\udccf Modified: 2025-04-18T15:49:11.899Z\n\ud83d\udd17 References:\n1. https://github.com/element-hq/element-x-android/security/advisories/GHSA-m5px-pwq3-4p5m\n2. https://github.com/element-hq/element-x-android/commit/dc058544d7e693c04298191c1aadd5b39c9be52e\n3. https://github.com/element-hq/element-x-android/releases/tag/v25.04.2", "creation_timestamp": "2025-04-18T15:58:53.000000Z"}, {"uuid": "47454894-7564-43fa-bd8c-15462f3e0726", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "exploited", "source": "Telegram/DKd2Gqws_szvlbVH567RCL0Q0RIZDQSoU0Q0rK7xOEDSxsg", "content": "", "creation_timestamp": "2025-10-26T04:57:35.000000Z"}, {"uuid": "d0f22c20-e4bb-4469-87b7-dc2ee69f9ee0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "exploited", "source": "Telegram/DKd2Gqws_szvlbVH567RCL0Q0RIZDQSoU0Q0rK7xOEDSxsg", "content": "", "creation_timestamp": "2025-10-26T04:57:35.000000Z"}, {"uuid": "8eb83d2c-82c9-4efd-b217-fe32d1dc8dde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2777", "type": "exploited", "source": "Telegram/DKd2Gqws_szvlbVH567RCL0Q0RIZDQSoU0Q0rK7xOEDSxsg", "content": "", "creation_timestamp": "2025-10-26T04:57:35.000000Z"}, {"uuid": "d3bc415e-aecf-4ce1-a1cc-66a010e26d33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "exploited", "source": "Telegram/WuywlTA2prep3738D0ZdlY2l1dxkLscKbaCFO22me4a6aig", "content": "", "creation_timestamp": "2025-10-26T04:57:32.000000Z"}, {"uuid": "89592ce3-ffd8-4bfa-a5c2-a006b18ae7b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "exploited", "source": "Telegram/WuywlTA2prep3738D0ZdlY2l1dxkLscKbaCFO22me4a6aig", "content": "", "creation_timestamp": "2025-10-26T04:57:32.000000Z"}, {"uuid": "bb09b51b-e1fd-4520-99ac-6c3c1ca4b166", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2777", "type": "exploited", "source": "Telegram/WuywlTA2prep3738D0ZdlY2l1dxkLscKbaCFO22me4a6aig", "content": "", "creation_timestamp": "2025-10-26T04:57:32.000000Z"}, {"uuid": "bf82ecce-775a-4eb1-ba35-e5b96287a775", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "exploited", "source": "https://t.me/thehackernews/7797", "content": "\u26a0\ufe0f ALERT: A Chrome zero-day (CVE-2025-2783) was exploited to deliver spyware built by Memento Labs \u2014 the firm behind past government surveillance tools.\n\nOne click in Chromium = full sandbox escape.\n\nRead this \u2192 https://thehackernews.com/2025/10/chrome-zero-day-exploited-to-deliver.html", "creation_timestamp": "2025-10-28T08:26:45.000000Z"}, {"uuid": "a8840e3f-c644-4c79-aac4-90024cbd44e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27817", "type": "published-proof-of-concept", "source": "Telegram/WYCMWoQh2a8amWFDZuRYNc5-yqtRSMnumOB0fqqFRkWeIok", "content": "", "creation_timestamp": "2025-10-13T09:00:05.000000Z"}, {"uuid": "0a92b90b-e4a6-47b2-b0b5-75afe94b3817", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27237", "type": "seen", "source": "https://t.me/ics_cert/1333", "content": "\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u062c\u0632\u0627\u06cc Zabbix Agent \u0648 Agent2 \u062f\u0631 \u0633\u06cc\u0633\u062a\u0645 \u0646\u0638\u0627\u0631\u062a \u0628\u0631 \u0632\u06cc\u0631\u0633\u0627\u062e\u062a \u0641\u0646\u0627\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a Zabbix \u0628\u0647 \u0646\u0642\u0635\u200c\u0647\u0627\u06cc \u0645\u06a9\u0627\u0646\u06cc\u0632\u0645 \u06a9\u0646\u062a\u0631\u0644 \u0628\u0627\u0631\u06af\u0630\u0627\u0631\u06cc \u0641\u0627\u06cc\u0644 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc OpenSSL \u0645\u0631\u0628\u0648\u0637 \u0645\u06cc\u200c\u0634\u0648\u062f. \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0646\u0641\u0648\u0630\u06af\u0631 \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u0627\u0645\u062a\u06cc\u0627\u0632\u0627\u062a \u062e\u0648\u062f \u0631\u0627 \u0628\u0627 \u0648\u0627\u0631\u062f \u06a9\u0631\u062f\u0646 \u0641\u0627\u06cc\u0644 DLL \u0628\u0647\u200c\u0637\u0648\u0631 \u062e\u0627\u0635 \u0633\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u0627\u0641\u0632\u0627\u06cc\u0634 \u062f\u0647\u062f.\n\nBDU:2025-12554\nCVE-2025-27237\n\n\u0646\u0635\u0628 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627 \u0627\u0632 \u0645\u0646\u0627\u0628\u0639 \u0645\u0639\u062a\u0628\u0631\u060c \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627\u06cc \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u06cc \u062a\u0646\u0647\u0627 \u067e\u0633 \u0627\u0632 \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u062a\u0645\u0627\u0645\u06cc \u0631\u06cc\u0633\u06a9\u200c\u0647\u0627\u06cc \u0645\u0631\u062a\u0628\u0637 \u0646\u0635\u0628 \u0634\u0648\u0646\u062f.\n\n\u0627\u0642\u062f\u0627\u0645\u0627\u062a \u062c\u0628\u0631\u0627\u0646\u06cc:\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0622\u0646\u062a\u06cc\u200c\u0648\u06cc\u0631\u0648\u0633 \u0628\u0631\u0627\u06cc \u0628\u0631\u0631\u0633\u06cc \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u062f\u0631\u06cc\u0627\u0641\u062a \u0634\u062f\u0647 \u0627\u0632 \u0645\u0646\u0627\u0628\u0639 \u0646\u0627\u0645\u0639\u062a\u0628\u0631\u061b\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0645\u062d\u06cc\u0637 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u06cc \u0628\u0633\u062a\u0647 \u0628\u0631\u0627\u06cc \u06a9\u0627\u0631 \u0628\u0627 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u062f\u0631\u06cc\u0627\u0641\u062a \u0634\u062f\u0647 \u0627\u0632 \u0645\u0646\u0627\u0628\u0639 \u0646\u0627\u0645\u0639\u062a\u0628\u0631\u061b\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc SIEM \u0628\u0631\u0627\u06cc \u0631\u0635\u062f \u0631\u0648\u06cc\u062f\u0627\u062f\u0647\u0627\u06cc \u0645\u0631\u062a\u0628\u0637 \u0628\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u0641\u0627\u06cc\u0644 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc OpenSSL\u061b\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u062a\u0634\u062e\u06cc\u0635 \u0648 \u067e\u06cc\u0634\u06af\u06cc\u0631\u06cc \u0627\u0632 \u0646\u0641\u0648\u0630 \u0628\u0631\u0627\u06cc \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc (\u06a9\u0634\u0641\u060c \u062b\u0628\u062a) \u0648 \u0648\u0627\u06a9\u0646\u0634 \u0628\u0647 \u062a\u0644\u0627\u0634\u200c\u0647\u0627\u06cc \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627.\n\n\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u062a\u0648\u0635\u06cc\u0647\u200c\u0647\u0627:\nhttps://support.zabbix.com/browse/ZBX-27061\n\ud83d\udca1\u0627\u06af\u0631 \u0627\u06cc\u0646 \u0645\u062a\u0646 \u062f\u06cc\u062f\u06af\u0627\u0647 \u0634\u0645\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\u0628\u06cc\u0627\u06cc\u06cc\u062f \u0628\u0627 \u0647\u0645 \u0627\u0633\u062a\u0627\u0646\u062f\u0627\u0631\u062f\u0647\u0627 \u0631\u0627 \u0628\u0627\u0644\u0627 \u0628\u0628\u0631\u06cc\u0645.\u00a0 \n\ud83c\udfed\u00a0 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n@pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645 :\nhttps://t.me/ICSCERT_IR\n\u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2\n\u06af\u0631\u0648\u0647 \u062a\u062e\u0635\u0635\u06cc \u0648\u0627\u062a\u0633 \u0627\u067e:\nhttps://chat.whatsapp.com/BZu1yr1aeHpCDxiIXotzyW?mode=ac_t\n\u0628\u0647 \u0627\u0646\u062c\u0645\u0646 \u062a\u062e\u0635\u0635\u06cc AI.Sec \u0628\u067e\u06cc\u0648\u0646\u062f\u06cc\u062f:\nhttps://chat.whatsapp.com/KRPUA6WM4f6AdS727vRBmM?mode=ems_copy_t", "creation_timestamp": "2025-10-06T17:33:28.000000Z"}, {"uuid": "6e423a9b-8326-444f-83e6-2549f91c0b6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27915", "type": "exploited", "source": "https://t.me/hackyourmom/12837", "content": "\ud83d\udca5 \u0425\u0430\u043a\u0435\u0440\u0438 \u0437\u043b\u0430\u043c\u0430\u043b\u0438 Zimbra Collaboration Suite, \u0432\u0438\u043a\u043e\u0440\u0438\u0441\u0442\u0430\u0432\u0448\u0438 zero-day \u0443\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c CVE-2025-27915 \u0447\u0435\u0440\u0435\u0437 \u0444\u0430\u0439\u043b\u0438 iCalendar (.ICS). \u0426\u0435 \u0434\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u0457\u043c \u0432\u043f\u0440\u043e\u0432\u0430\u0434\u0436\u0443\u0432\u0430\u0442\u0438 \u0448\u043a\u0456\u0434\u043b\u0438\u0432\u0438\u0439 JavaScript, \u0432\u0438\u043a\u0440\u0430\u0434\u0430\u0442\u0438 \u043b\u0438\u0441\u0442\u0438, \u043b\u043e\u0433\u0456\u043d\u0438, \u043a\u043e\u043d\u0442\u0430\u043a\u0442\u0438 \u0439 \u043f\u0435\u0440\u0435\u0441\u0438\u043b\u0430\u0442\u0438 \u0434\u0430\u043d\u0456 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0456 \u0430\u0434\u0440\u0435\u0441\u0438. \u041a\u043e\u043c\u043f\u0430\u043d\u0456\u044f StrikeReady \u0432\u0438\u044f\u0432\u0438\u043b\u0430 \u0430\u0442\u0430\u043a\u0443, \u043a\u043e\u043b\u0438 \u043f\u043e\u043c\u0456\u0442\u0438\u043b\u0430 \u0432\u0435\u043b\u0438\u043a\u0456 ICS-\u0444\u0430\u0439\u043b\u0438 \u0437 \u0443\u043c\u0456\u0449\u0435\u043d\u0438\u043c \u043a\u043e\u0434\u043e\u043c, \u044f\u043a\u0438\u0439 \u043e\u0431\u0445\u043e\u0434\u0438\u0432 \u043f\u0435\u0440\u0435\u0432\u0456\u0440\u043a\u0443 HTML \u0443 \u0432\u0435\u0440\u0441\u0456\u044f\u0445 ZCS 9.0\u201310 \ud83d\udc7e \u0411\u0456\u043b\u044c\u0448\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u0438\u0446\u044c \ud83d\udc48 #cybernews", "creation_timestamp": "2025-10-06T15:24:16.000000Z"}, {"uuid": "04eeb96b-2b5f-477b-807b-4f46b48a705d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27515", "type": "seen", "source": "Telegram/njw-SNmCnbbXLCSpNl5uy3bNGXnaRITwKMK2nK-7tXRcVmk", "content": "", "creation_timestamp": "2025-09-10T00:16:42.000000Z"}, {"uuid": "88ae60fc-62a0-4a9f-b34e-e8ea0e3e375c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/44083", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-27591\nURL\uff1ahttps://github.com/DarksBlackSk/CVE-2025-27591-Proof-Of-Concept\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-07-15T05:17:07.000000Z"}, {"uuid": "872d7bf1-3f77-4426-b4da-0f448ac2bbae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27410", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/20301", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aUpdated PoC for CVE-2025-27410, since the one publicly available in the security advisory is prone to failing.\nURL\uff1ahttps://github.com/shreyas-malhotra/CVE-2025-27410\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-03-18T13:13:37.000000Z"}, {"uuid": "be7d9e31-ab94-4ab1-a3cd-8edd15f1af21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27152", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/27242", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aDemonstration of CVE-2025-27152\nURL\uff1ahttps://github.com/andreglock/axios-ssrf\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-03-30T08:39:20.000000Z"}, {"uuid": "ea4e5fc8-ee80-4805-b7bd-18735aa4d411", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/30569", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aA Work-In-Progress for CVE-2025-27840 \nURL\uff1ahttps://github.com/ladyg00se/CVE-2025-27840-WIP\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-04-08T14:32:36.000000Z"}, {"uuid": "976da769-c31d-4c2f-b429-6e399f3696d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/27430", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aBitcoin Cryptanalysis: CVE-2025-27840 Vulnerability in ESP32 Microcontrollers Puts Billions of IoT Devices at Risk via Wi-Fi & Bluetooth\nURL\uff1ahttps://github.com/demining/Bluetooth-Attacks-CVE-2025-27840\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-03-30T16:16:24.000000Z"}, {"uuid": "7fa04ecb-6bfb-4246-8880-6821d7f78666", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27152", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/39523", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aAxios CVE-2025-27152 PoC\nURL\uff1ahttps://github.com/davidblakecoe/axios-CVE-2025-27152-PoC\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-06-06T21:24:39.000000Z"}, {"uuid": "05a93e68-c027-46d8-944b-cd0810d5bed7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27817", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/40156", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-27817\nURL\uff1ahttps://github.com/kk12-30/CVE-2025-27817\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-06-12T02:36:35.000000Z"}, {"uuid": "4d5fbdb5-5e71-484a-8c83-66ef3711520a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2703", "type": "seen", "source": "https://t.me/ics_cert/1187", "content": "\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u0648\u062c\u0648\u062f \u062f\u0631 \u067e\u0644\u062a\u0641\u0631\u0645 \u0646\u0638\u0627\u0631\u062a \u0648 \u067e\u0627\u06cc\u0634 \u06af\u0631\u0627\u0641\u0627\u0646\u0627 (Grafana) \u0628\u0647 \u062f\u0644\u06cc\u0644 \u0646\u0642\u0635 \u062f\u0631 \u0645\u06a9\u0627\u0646\u06cc\u0633\u0645 \u0645\u062c\u0648\u0632\u062f\u0647\u06cc \u0627\u0633\u062a. \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u06cc \u06a9\u0647 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0639\u0645\u0644 \u0645\u06cc\u200c\u06a9\u0646\u062f\u060c \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u062a\u0627 \u0645\u062d\u062f\u0648\u062f\u06cc\u062a\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0645\u0648\u062c\u0648\u062f \u0631\u0627 \u062f\u0648\u0631 \u0628\u0632\u0646\u062f.\nCVE-2025-3260\n\n\u0646\u0635\u0628 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627 \u0627\u0632 \u0645\u0646\u0627\u0628\u0639 \u0645\u0639\u062a\u0628\u0631. \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627\u06cc \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u06cc \u0631\u0627 \u062a\u0646\u0647\u0627 \u067e\u0633 \u0627\u0632 \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u062a\u0645\u0627\u0645 \u062e\u0637\u0631\u0627\u062a \u0645\u0631\u062a\u0628\u0637 \u0646\u0635\u0628 \u06a9\u0646\u06cc\u062f.\n\n\u0627\u0642\u062f\u0627\u0645\u0627\u062a \u062c\u0628\u0631\u0627\u0646\u06cc:\n- \u063a\u06cc\u0631\u0641\u0639\u0627\u0644 \u06a9\u0631\u062f\u0646 \u0645\u06a9\u0627\u0646\u06cc\u0632\u0645 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0646\u0627\u0634\u0646\u0627\u0633 \u0628\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u067e\u0644\u062a\u0641\u0631\u0645\u061b\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u0644\u0627\u06cc\u0647 \u06a9\u0627\u0631\u0628\u0631\u062f (WAF) \u0628\u0631\u0627\u06cc \u0641\u06cc\u0644\u062a\u0631 \u06a9\u0631\u062f\u0646 \u062a\u0631\u0627\u0641\u06cc\u06a9 \u0634\u0628\u06a9\u0647\u061b\n- \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u067e\u0644\u062a\u0641\u0631\u0645 \u0627\u0632 \u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc \u062e\u0627\u0631\u062c\u06cc (\u0627\u06cc\u0646\u062a\u0631\u0646\u062a)\u061b\n- \u063a\u06cc\u0631\u0641\u0639\u0627\u0644 \u06a9\u0631\u062f\u0646/\u062d\u0630\u0641 \u062d\u0633\u0627\u0628\u200c\u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u06cc \u067e\u0644\u062a\u0641\u0631\u0645 \u06a9\u0647 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0646\u0645\u06cc\u200c\u0634\u0648\u0646\u062f\u061b\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc \u062e\u0635\u0648\u0635\u06cc \u0645\u062c\u0627\u0632\u06cc \u0628\u0631\u0627\u06cc \u0633\u0627\u0632\u0645\u0627\u0646\u062f\u0647\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 (VPN) \u0628\u0647 \u067e\u0644\u062a\u0641\u0631\u0645.\n\n\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u062a\u0648\u0635\u06cc\u0647\u200c\u0647\u0627:\nhttps://grafana.com/blog/2025/04/22/grafana-security-release-medium-and-high-severity-fixes-for-cve-2025-3260-cve-2025-2703-cve-2025-3454/\n\ud83c\udfed \u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\ud83d\udc6e\ud83c\udffd\u200d\u2640\ufe0f\u0647\u0631\u06af\u0648\u0646\u0647 \u0627\u0646\u062a\u0634\u0627\u0631 \u0648 \u0630\u06a9\u0631 \u0645\u0637\u0627\u0644\u0628 \u0628\u062f\u0648\u0646 \u0630\u06a9\u0631 \u062f\u0642\u06cc\u0642 \u0645\u0646\u0628\u0639 \u0648 \u0622\u062f\u0631\u0633 \u0644\u06cc\u0646\u06a9 \u0622\u0646 \u0645\u0645\u0646\u0648\u0639 \u0627\u0633\u062a. \n\u0627\u062f\u0645\u06cc\u0646:\n\u200fhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u0648\u0627\u062a\u0633 \u0622\u067e :\nhttps://chat.whatsapp.com/FpB620AWEeSKvd8U6cFh33\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ICSCERT_IR", "creation_timestamp": "2025-06-07T18:27:26.000000Z"}, {"uuid": "5e61e459-de46-48cb-bf7a-92a441c24318", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27533", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/36093", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aexploit for CVE-2025-27533, a Denial of Service (DoS) vulnerability in Apache ActiveMQ\nURL\uff1ahttps://github.com/absholi7ly/CVE-2025-27533-Exploit-for-Apache-ActiveMQ\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-05-09T02:47:54.000000Z"}, {"uuid": "ec111b71-a8ae-486a-950e-34f867b620ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2748", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/36177", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aPoC for CVE-2025-2748 - Unauthenticated ZIP file upload with embedded SVG for XSS\nURL\uff1ahttps://github.com/xirtam2669/Kentico-Xperience-before-13.0.178---XSS-POC\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-05-09T18:53:15.000000Z"}, {"uuid": "326b33c2-5cff-447d-960c-379685b3e10c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2704", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/35747", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-2704 Vulnerability Testing Script\nURL\uff1ahttps://github.com/KernelKraze/CVE-2025-2704\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-05-06T08:09:19.000000Z"}, {"uuid": "36f505bd-4f3a-49a1-8a63-1c32e7e008b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/38432", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aAdvanced AI-Powered Exploitation Framework  |  CVE-2025-4664 & CVE-2025-2783 & CVE-2025-2857 & CVE-2025-30397  |  \nURL\uff1ahttps://github.com/Leviticus-Triage/ChromSploit-Framework\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-05-28T14:37:55.000000Z"}, {"uuid": "e1585c76-9b89-4e07-bc98-3ce649752951", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/40618", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-32433 https://github.com/erlang/otp/security/advisories/GHSA-37cp-fgq5-7wc2\nURL\uff1ahttps://github.com/byteReaper77/CVE-2025-2783-SandboxEscape\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-06-16T01:38:12.000000Z"}, {"uuid": "3e437418-017d-4d26-9fbe-fcd7801f6ed3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "seen", "source": "https://t.me/GithubRedTeam/49741", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-7771: Arbitrary physical memory and I/O port read/write via ThrottleStop driver\nURL\uff1ahttps://github.com/mrk336/From-EternalBlue-to-CVE-2025-2776-The-Evolution-of-an-SMB-Attack\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-08-31T13:24:48.000000Z"}, {"uuid": "f0911fec-031c-4348-acd1-1f810261449c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/50140", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aLocal Privilege Escalation vai `below` (CVE-2025-27591) - PoC Exploit\nURL\uff1ahttps://github.com/HOEUN-Visai/CVE-2025-27591-below-\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-09-03T16:20:53.000000Z"}, {"uuid": "8ec7daaa-278c-49cc-a7ab-76997025d49b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27210", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/44202", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aThis repository contains POC scenarios as part of CVE-2025-0411 MotW bypass.\nURL\uff1ahttps://github.com/absholi7ly/CVE-2025-27210_NodeJS_Path_Traversal_Exploit\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-07-16T05:35:35.000000Z"}, {"uuid": "c146e8d2-e214-4198-aeac-c2a9af964784", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/43876", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-27591 is a privilege escalation vulnerability that affected the Below service before version 0.9.0\nURL\uff1ahttps://github.com/BridgerAlderson/CVE-2025-27591-PoC\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-07-13T08:56:45.000000Z"}, {"uuid": "1b7e9c5d-e4d6-4ae6-9e1f-558ac1138e40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/44088", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-27591 is a known privilege escalation vulnerability in the Below service (version < v0.9.0)\nURL\uff1ahttps://github.com/dollarboysushil/Linux-Privilege-Escalation-CVE-2025-27591\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-07-15T06:25:38.000000Z"}, {"uuid": "c0f84a37-2b38-434f-9ca8-b98f53ea337d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/44872", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1a\ud83d\udd25 Local Privilege Escalation Exploit for CVE-2025-27591 | Abuses world-writable log dir in Below to gain root via /etc/passwd injection\nURL\uff1ahttps://github.com/00xCanelo/CVE-2025-27591-PoC\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-07-21T19:06:46.000000Z"}, {"uuid": "f45386bf-91ba-4bee-adab-4e9cc57f16ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/49863", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aPoC for CVE-2025-27591 \u2013 Local privilege escalation in the below monitoring tool. By symlinking its log file to /etc/passwd, an attacker can inject a root account and gain full system compromise.\nURL\uff1ahttps://github.com/danil-koltsov/below-log-race-poc\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-09-01T12:25:21.000000Z"}, {"uuid": "5ab7908a-fda9-4af3-9936-4e7d2f9b1f8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27581", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/45977", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aExploit scripts for CVE-2025-27581\nURL\uff1ahttps://github.com/Henryisnotavailable/CVE-2025-27581\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-07-30T21:15:38.000000Z"}, {"uuid": "30257e99-714e-4bdd-b212-c5f0d55bf42e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/48659", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aPoC exploit for Below privilege escalation (CVE-2025-27591) allowing local root access via symlink manipulation in world-writable log directory.\nURL\uff1ahttps://github.com/Diabl0xE/CVE-2025-27519\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-08-22T12:34:40.000000Z"}, {"uuid": "64365ecc-9084-484c-975c-f28c1112eeaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27480", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/49855", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aLetting attackers run malicious code without needing a cracked password, user interaction, or even a foothold in your network. That\u2019s CVE-2025-27480\nURL\uff1ahttps://github.com/mrk336/CVE-2025-27480-The-Silent-Gateway-Risk\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-09-01T11:34:26.000000Z"}, {"uuid": "216e10f3-b692-4370-803b-83afb45a0f47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27210", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/51815", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1a2 web apps vulnerable to CVE-2025-27210\nURL\uff1ahttps://github.com/mindeddu/Vulnerable-CVE-2025-27210\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-09-16T08:35:30.000000Z"}, {"uuid": "d984591e-586d-4631-aadd-937bd29c634f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27520", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/52650", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aay 09 \u2014 CVE-2025-27520 (BentoML-style insecure deserialization) \u2014 Local Docker lab\nURL\uff1ahttps://github.com/amalpvatayam67/day09-bentoml-deser-lab\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-09-22T12:59:47.000000Z"}, {"uuid": "b9607b1f-6b45-47c3-9d86-a680b1ca2dc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://t.me/NinjaSec/298", "content": "Certainly! Below is a curated list of critical CVEs from 2025 that involve code execution, browser bypasses, and internal service exposure. These are provided strictly for educational purposes to aid in understanding and mitigating such vulnerabilities.\n\n\n\ud83d\udd10 Critical CVEs from 2025 (Educational Use Only)\n\n1. CVE-2025-47241\n\nDescription: Whitelist bypass in the Browser Use automation tool allows attackers to access internal services via crafted URLs.\n\nCVSS Score: 9.3\n\nReference: \n\n\n\n2. CVE-2025-25014\n\nDescription: Prototype pollution in Kibana leads to arbitrary code execution through crafted HTTP requests to machine learning and reporting endpoints.\n\nCVSS Score: 9.1\n\nReference: \n\n\n\n3. CVE-2025-29927\n\nDescription: Authorization bypass in Next.js middleware allows attackers to access protected routes by manipulating internal headers.\n\nCVSS Score: 9.1\n\nReference: \n\n\n\n4. CVE-2025-24813\n\nDescription: \n\nCVSS Score: \n\nReference: \n\n\n\n5. CVE-2025-2783\n\nDescription: \n\nCVSS Score: High\n\nReference: \n\n\n\n6. CVE-2025-2636\n\nDescription: \n\nCVSS Score: High\n\nReference: \n\n\n\n7. CVE-2025-2505\n\nDescription: \n\nCVSS Score: High\n\nReference: \n\n\n\n8. CVE-2025-2746 & CVE-2025-2747\n\nDescription: \n\nCVSS Score: \n\nReference: \n\n\n\n9. CVE-2025-3066\n\nDescription: \n\nCVSS Score: High\n\nReference: \n\n\n\n10. CVE-2025-46728\n\nDescription: Denial of Service vulnerability in cpp-httplib, potentially exposing servers to service disruptions.\n\nCVSS Score: High\n\nReference: \n\n#HackersFactory", "creation_timestamp": "2025-05-19T12:58:14.000000Z"}, {"uuid": "34b7c400-5564-4ec1-8b25-c9b8ecd26303", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27920", "type": "exploited", "source": "Telegram/pIfBoPNQae3N2kDiJCGUZ_PYe0KzyAyRE0UZTvbsqGW5lkra", "content": "", "creation_timestamp": "2025-09-13T12:50:26.000000Z"}, {"uuid": "2521ca4d-440d-47f0-a033-a7ae70f810d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27515", "type": "seen", "source": "Telegram/bwVzUQfKSxu5nCl33CD_LUzO1KudwUst0NGX-dgwqjNGVZk", "content": "", "creation_timestamp": "2025-09-10T11:52:35.000000Z"}, {"uuid": "2c68a8a6-89cc-4071-ba4d-64c2e0d38655", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27127", "type": "seen", "source": "https://t.me/ics_cert/1241", "content": "\u0632\u06cc\u0645\u0646\u0633 \u06af\u0632\u0627\u0631\u0634 \u0645\u06cc\u200c\u062f\u0647\u062f \u06a9\u0647 \u0645\u062d\u0635\u0648\u0644\u0627\u062a \u0632\u06cc\u0631 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647\u200c\u0627\u0646\u062f:\n\nTIA Project-Server: \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0642\u0628\u0644 \u0627\u0632 V2.1.1\nTIA Project-Server V17: \u0647\u0645\u0647 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\nTotally Integrated Automation Portal (TIA Portal) V17: \u0647\u0645\u0647 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\nTotally Integrated Automation Portal (TIA Portal) V18: \u0647\u0645\u0647 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\nTotally Integrated Automation Portal (TIA Portal) V19: \u0647\u0645\u0647 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\nTotally Integrated Automation Portal (TIA Portal) V20: \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0642\u0628\u0644 \u0627\u0632 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06f3 V20\n\n\u0622\u067e\u0644\u0648\u062f \u0646\u0627\u0645\u062d\u062f\u0648\u062f \u0641\u0627\u06cc\u0644 \u0628\u0627 \u0646\u0648\u0639 \u062e\u0637\u0631\u0646\u0627\u06a9 CWE-434\n\u0628\u0631\u0646\u0627\u0645\u0647 \u0622\u0633\u06cc\u0628\u200c\u062f\u06cc\u062f\u0647 \u0628\u0647 \u0637\u0648\u0631 \u0646\u0627\u0645\u0646\u0627\u0633\u0628 \u067e\u0631\u0648\u0698\u0647\u200c\u0647\u0627\u06cc \u0622\u067e\u0644\u0648\u062f \u0634\u062f\u0647 \u062f\u0631 \u0631\u06cc\u0634\u0647 \u0633\u0646\u062f \u0631\u0627 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0627\u06cc\u0646 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u06cc \u0628\u0627 \u0627\u0645\u062a\u06cc\u0627\u0632\u0627\u062a \u0645\u0634\u0627\u0631\u06a9\u062a\u200c\u06a9\u0646\u0646\u062f\u0647 \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u062a\u0627 \u0628\u0627 \u0622\u067e\u0644\u0648\u062f \u06cc\u06a9 \u067e\u0631\u0648\u0698\u0647 \u0645\u062e\u0631\u0628 \u0628\u0627\u0639\u062b \u0627\u0646\u06a9\u0627\u0631 \u0633\u0631\u0648\u06cc\u0633 \u0634\u0648\u062f.  \u0647\u0645\u0686\u0646\u06cc\u0646 \u0627\u0645\u062a\u06cc\u0627\u0632 CVSS \u0646\u0633\u062e\u0647 \u06f4 \u0628\u0631\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2025-27127 \u0645\u062d\u0627\u0633\u0628\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a. \u0627\u0645\u062a\u06cc\u0627\u0632 \u067e\u0627\u06cc\u0647 \u06f5.\u06f3 \u0645\u062d\u0627\u0633\u0628\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a\u061b \u0631\u0634\u062a\u0647 \u0628\u0631\u062f\u0627\u0631 CVSS \u0628\u0647 \u0635\u0648\u0631\u062a (CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N) \u0627\u0633\u062a.\n\n\ud83c\udfed \u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\u0627\u062f\u0645\u06cc\u0646:\n\u200fhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ICSCERT_IR\n\u06af\u0631\u0648\u0647 \u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2", "creation_timestamp": "2025-07-17T17:32:46.000000Z"}, {"uuid": "2c900cef-46ed-482f-a4ce-d23dc079afa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2746", "type": "seen", "source": "https://t.me/NinjaSec/298", "content": "Certainly! Below is a curated list of critical CVEs from 2025 that involve code execution, browser bypasses, and internal service exposure. These are provided strictly for educational purposes to aid in understanding and mitigating such vulnerabilities.\n\n\n\ud83d\udd10 Critical CVEs from 2025 (Educational Use Only)\n\n1. CVE-2025-47241\n\nDescription: Whitelist bypass in the Browser Use automation tool allows attackers to access internal services via crafted URLs.\n\nCVSS Score: 9.3\n\nReference: \n\n\n\n2. CVE-2025-25014\n\nDescription: Prototype pollution in Kibana leads to arbitrary code execution through crafted HTTP requests to machine learning and reporting endpoints.\n\nCVSS Score: 9.1\n\nReference: \n\n\n\n3. CVE-2025-29927\n\nDescription: Authorization bypass in Next.js middleware allows attackers to access protected routes by manipulating internal headers.\n\nCVSS Score: 9.1\n\nReference: \n\n\n\n4. CVE-2025-24813\n\nDescription: \n\nCVSS Score: \n\nReference: \n\n\n\n5. CVE-2025-2783\n\nDescription: \n\nCVSS Score: High\n\nReference: \n\n\n\n6. CVE-2025-2636\n\nDescription: \n\nCVSS Score: High\n\nReference: \n\n\n\n7. CVE-2025-2505\n\nDescription: \n\nCVSS Score: High\n\nReference: \n\n\n\n8. CVE-2025-2746 & CVE-2025-2747\n\nDescription: \n\nCVSS Score: \n\nReference: \n\n\n\n9. CVE-2025-3066\n\nDescription: \n\nCVSS Score: High\n\nReference: \n\n\n\n10. CVE-2025-46728\n\nDescription: Denial of Service vulnerability in cpp-httplib, potentially exposing servers to service disruptions.\n\nCVSS Score: High\n\nReference: \n\n#HackersFactory", "creation_timestamp": "2025-05-19T12:58:14.000000Z"}, {"uuid": "5a5a942b-5313-4c3b-adc2-3a6eb8ec9cbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2747", "type": "seen", "source": "https://t.me/NinjaSec/298", "content": "Certainly! Below is a curated list of critical CVEs from 2025 that involve code execution, browser bypasses, and internal service exposure. These are provided strictly for educational purposes to aid in understanding and mitigating such vulnerabilities.\n\n\n\ud83d\udd10 Critical CVEs from 2025 (Educational Use Only)\n\n1. CVE-2025-47241\n\nDescription: Whitelist bypass in the Browser Use automation tool allows attackers to access internal services via crafted URLs.\n\nCVSS Score: 9.3\n\nReference: \n\n\n\n2. CVE-2025-25014\n\nDescription: Prototype pollution in Kibana leads to arbitrary code execution through crafted HTTP requests to machine learning and reporting endpoints.\n\nCVSS Score: 9.1\n\nReference: \n\n\n\n3. CVE-2025-29927\n\nDescription: Authorization bypass in Next.js middleware allows attackers to access protected routes by manipulating internal headers.\n\nCVSS Score: 9.1\n\nReference: \n\n\n\n4. CVE-2025-24813\n\nDescription: \n\nCVSS Score: \n\nReference: \n\n\n\n5. CVE-2025-2783\n\nDescription: \n\nCVSS Score: High\n\nReference: \n\n\n\n6. CVE-2025-2636\n\nDescription: \n\nCVSS Score: High\n\nReference: \n\n\n\n7. CVE-2025-2505\n\nDescription: \n\nCVSS Score: High\n\nReference: \n\n\n\n8. CVE-2025-2746 & CVE-2025-2747\n\nDescription: \n\nCVSS Score: \n\nReference: \n\n\n\n9. CVE-2025-3066\n\nDescription: \n\nCVSS Score: High\n\nReference: \n\n\n\n10. CVE-2025-46728\n\nDescription: Denial of Service vulnerability in cpp-httplib, potentially exposing servers to service disruptions.\n\nCVSS Score: High\n\nReference: \n\n#HackersFactory", "creation_timestamp": "2025-05-19T12:58:14.000000Z"}, {"uuid": "8eb977b8-4c0a-4bc4-8b4a-8d4e2ad0105d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2747", "type": "seen", "source": "https://t.me/NinjaSec/299", "content": "Code execution, and bypass vulnerabilities \u2014 for educational purposes only:\n\n\n1. CVE-2025-47241 \u2013 Whitelist bypass in Browser Use tool (CVSS 9.3)\n2. CVE-2025-25014 \u2013 Prototype pollution in Kibana (CVSS 9.1)\n3. CVE-2025-29927 \u2013 Next.js middleware authorization bypass (CVSS 9.1)\n4. CVE-2025-24813 \u2013 Apache Tomcat path traversal RCE (Critical)\n5. CVE-2025-2783 \u2013 Chrome Mojo use-after-free (High)\n6. CVE-2025-2636 \u2013 WordPress InstaWP plugin LFI (High)\n7. CVE-2025-2505 \u2013 WordPress Age Gate plugin LFI (High)\n8. CVE-2025-2746 \u2013 Kentico CMS auth bypass (CVSS 9.8)\n9. CVE-2025-2747 \u2013 Kentico CMS staging sync auth bypass (CVSS 9.8)\n10. CVE-2025-3066 \u2013 Chrome Site Isolation use-after-free (High)\n11. CVE-2025-46728 \u2013 cpp-httplib DoS vulnerability\n12. CVE-2025-12345 \u2013 Buffer overflow in XYZ app (CVSS 9.0)\n13. CVE-2025-12346 \u2013 SQL injection in ABC web app (CVSS 8.5)\n14. CVE-2025-12347 \u2013 XSS in DEF platform (CVSS 7.8)\n15. CVE-2025-12348 \u2013 Auth bypass in GHI system (CVSS 9.2)\n16. CVE-2025-12349 \u2013 RCE in JKL service via crafted packets (CVSS 9.5)\n17. CVE-2025-12350 \u2013 Privilege escalation in MNO app (CVSS 8.7)\n18. CVE-2025-12351 \u2013 Info disclosure in PQR system (CVSS 7.5)\n19. CVE-2025-12352 \u2013 DoS in STU server (CVSS 6.8)\n20. CVE-2025-12353 \u2013 Directory traversal in VWX app (CVSS 8.0)\n21. CVE-2025-12354 \u2013 Command injection in YZA tool (CVSS 9.1)\n22. CVE-2025-12355 \u2013 Insecure deserialization in BCD lib (CVSS 9.3)\n23. CVE-2025-12356 \u2013 CSRF in EFG portal (CVSS 7.2)\n24. CVE-2025-12357 \u2013 Memory corruption in HIJ driver (CVSS 8.9)\n25. CVE-2025-12358 \u2013 Improper auth in KLM API (CVSS 9.0)\n\n#HackersFactory", "creation_timestamp": "2025-05-07T15:48:27.000000Z"}, {"uuid": "0d190acf-d650-4007-ab3f-c08e9c3be6e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://t.me/NinjaSec/299", "content": "Code execution, and bypass vulnerabilities \u2014 for educational purposes only:\n\n\n1. CVE-2025-47241 \u2013 Whitelist bypass in Browser Use tool (CVSS 9.3)\n2. CVE-2025-25014 \u2013 Prototype pollution in Kibana (CVSS 9.1)\n3. CVE-2025-29927 \u2013 Next.js middleware authorization bypass (CVSS 9.1)\n4. CVE-2025-24813 \u2013 Apache Tomcat path traversal RCE (Critical)\n5. CVE-2025-2783 \u2013 Chrome Mojo use-after-free (High)\n6. CVE-2025-2636 \u2013 WordPress InstaWP plugin LFI (High)\n7. CVE-2025-2505 \u2013 WordPress Age Gate plugin LFI (High)\n8. CVE-2025-2746 \u2013 Kentico CMS auth bypass (CVSS 9.8)\n9. CVE-2025-2747 \u2013 Kentico CMS staging sync auth bypass (CVSS 9.8)\n10. CVE-2025-3066 \u2013 Chrome Site Isolation use-after-free (High)\n11. CVE-2025-46728 \u2013 cpp-httplib DoS vulnerability\n12. CVE-2025-12345 \u2013 Buffer overflow in XYZ app (CVSS 9.0)\n13. CVE-2025-12346 \u2013 SQL injection in ABC web app (CVSS 8.5)\n14. CVE-2025-12347 \u2013 XSS in DEF platform (CVSS 7.8)\n15. CVE-2025-12348 \u2013 Auth bypass in GHI system (CVSS 9.2)\n16. CVE-2025-12349 \u2013 RCE in JKL service via crafted packets (CVSS 9.5)\n17. CVE-2025-12350 \u2013 Privilege escalation in MNO app (CVSS 8.7)\n18. CVE-2025-12351 \u2013 Info disclosure in PQR system (CVSS 7.5)\n19. CVE-2025-12352 \u2013 DoS in STU server (CVSS 6.8)\n20. CVE-2025-12353 \u2013 Directory traversal in VWX app (CVSS 8.0)\n21. CVE-2025-12354 \u2013 Command injection in YZA tool (CVSS 9.1)\n22. CVE-2025-12355 \u2013 Insecure deserialization in BCD lib (CVSS 9.3)\n23. CVE-2025-12356 \u2013 CSRF in EFG portal (CVSS 7.2)\n24. CVE-2025-12357 \u2013 Memory corruption in HIJ driver (CVSS 8.9)\n25. CVE-2025-12358 \u2013 Improper auth in KLM API (CVSS 9.0)\n\n#HackersFactory", "creation_timestamp": "2025-05-07T15:48:27.000000Z"}, {"uuid": "9cc9939f-42d7-45db-a750-0b27a3d41d3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27210", "type": "seen", "source": "Telegram/Qdzz1AKJLgYA5qbpq7wsXtyO5OathArotee-YC8gAHuem3o", "content": "", "creation_timestamp": "2025-09-16T15:00:07.000000Z"}, {"uuid": "d61ebb55-69a8-412e-a23e-c728250f9636", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27210", "type": "published-proof-of-concept", "source": "Telegram/jRURtxCEElEMkgqmd8ZNYvoL0-ejCrNrkstBRYQ-hK-7NgE", "content": "", "creation_timestamp": "2025-09-16T11:00:07.000000Z"}, {"uuid": "7c702af6-d60c-4ac5-93a2-25e9cbdefffa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "Telegram/J-MU9h__yUr48mGKh3TVGdgnh_XJPBeWUPz7BxIj2w4uV5ef", "content": "", "creation_timestamp": "2025-09-21T01:51:26.000000Z"}, {"uuid": "705804ed-ab15-41f8-9507-4d7788a1815e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27920", "type": "exploited", "source": "Telegram/vQlXfq_zkDIDjaOIRwbEuOP61_RVXkpHGWTmhrQUlvKSx2yd", "content": "", "creation_timestamp": "2025-09-15T16:00:59.000000Z"}, {"uuid": "e8cecd74-347c-4dde-b605-2d51fe74cfce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27520", "type": "published-proof-of-concept", "source": "Telegram/MguaS5r-EyylvOlTVZ1yTvUY5Xb2heobFtfXT1V_kSngV2U", "content": "", "creation_timestamp": "2025-09-22T21:00:04.000000Z"}, {"uuid": "1e192b96-6b84-4eea-a561-b5e476d69111", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2748", "type": "published-proof-of-concept", "source": "https://t.me/realcodeb0ss/69", "content": "", "creation_timestamp": "2025-08-30T01:05:55.000000Z"}, {"uuid": "4aae0647-a413-49b4-b867-eb0109923b33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://t.me/true_secator/7435", "content": "Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f 4 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Chrome, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 0-day, \u0448\u0435\u0441\u0442\u043e\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 \u0433\u043e\u0434\u0430, \u043d\u0430\u0440\u044f\u0434\u0443 \u0441 CVE-2025-2783, CVE-2025-4664, CVE-2025-5419, CVE-2025-6554 \u0438 CVE-2025-6558.\n\n\u0412 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2025-1058, \u043d\u043e \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0434\u043b\u044f \u043d\u0435\u0435 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 - \u043d\u0430 \u0441\u0430\u043c\u043e\u043c \u0434\u0435\u043b\u0435, \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0439 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n0-day \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u043c \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b \u044d \u0442\u0438\u043f\u043e\u0432\u00a0\u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8 JavaScript \u0438 WebAssembly, \u0435\u0435\u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0413\u0440\u0443\u043f\u043f\u0430 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u0433\u0440\u043e\u0437 Google (TAG) \u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u043d\u0435\u0439 16 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2025 \u0433\u043e\u0434\u0430.\n\n\u041e\u0448\u0438\u0431\u043a\u0438 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b \u0442\u0438\u043f\u043e\u0432 -  \u044d\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u043e\u0435 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a DoS, RCE \u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u0442\u0438\u043f\u0430\u043c \u0430\u0442\u0430\u043a.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b \u0442\u0438\u043f\u043e\u0432 \u0432 V8 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u0447\u0442\u0435\u043d\u0438\u044f/\u0437\u0430\u043f\u0438\u0441\u0438.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b Google TAG, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u043c\u043e\u0433\u043b\u0438 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0440\u0430\u0445\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e \u0438\u043b\u0438 APT.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 Dawn (CVE-2025-10500) \u0438 WebRTC (CVE-2025-10501), \u0437\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 Google \u0432\u044b\u043f\u043b\u0430\u0442\u0438\u043b\u0430 \u043d\u0430\u0433\u0440\u0430\u0434\u044b \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 15 000 \u0438 10 000 \u0434\u043e\u043b\u043b. \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0432 \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u0432\u0438\u0436\u043a\u0435 ANGLE (CVE-2025-10502), \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0433\u043e Big Sleep AI, \u043a\u043e\u0442\u043e\u0440\u044b\u0439, \u043f\u043e \u0441\u043b\u043e\u0432\u0430\u043c Google, \u043c\u043e\u0436\u0435\u0442 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u044c \u0434\u0435\u0444\u0435\u043a\u0442\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0443\u0436\u0435 \u0437\u043d\u0430\u044e\u0442 \u0438 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u044e\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u0434\u0435\u043d\u044c \u043f\u043e\u0437\u0436\u0435, \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0432 \u0432\u0435\u0440\u0441\u0438\u0438 140.0.7339.185/.186 \u0434\u043b\u044f Windows/Mac \u0438 140.0.7339.185 \u0434\u043b\u044f Linux, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0441\u0442\u0443\u043f\u044f\u0442 \u0432 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u0434\u043b\u044f \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u0432 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0438\u0445 \u043d\u0435\u0434\u0435\u043b\u044c.", "creation_timestamp": "2025-09-18T11:08:39.000000Z"}, {"uuid": "db149f6a-32a5-4588-bd89-7e157a1af9f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27888", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/10243", "content": "XBOW - CVE-2025-27888:  Server-Side Request Forgery via URL Parsing Confusion in Apache Druid Proxy Endpoint\n\nhttps://xbow.com/blog/apache-druid-proxy", "creation_timestamp": "2025-09-23T15:31:59.000000Z"}, {"uuid": "2569e44b-b93d-46bf-975c-2e0270459bdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27515", "type": "published-proof-of-concept", "source": "Telegram/t1LhqdJOG1EFy6jlM73bhz_qlF1T-sLBuRLYxQFOHpc1fDqB", "content": "", "creation_timestamp": "2025-09-10T09:39:10.000000Z"}, {"uuid": "0979b05d-2c1b-4911-87d7-ef4bcfcc784e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27515", "type": "seen", "source": "Telegram/qnVR2SX41ef1kt-yWW971_--D-c1QbD0TjF0HQIOIn_BSoof", "content": "", "creation_timestamp": "2025-09-10T11:52:34.000000Z"}, {"uuid": "c4361114-bf44-43af-9d12-bc1bbed7f0fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27920", "type": "published-proof-of-concept", "source": "https://t.me/SpiderCodeCommunity1/225", "content": "Zero-Day Attack Targets Sensitive Kurdish Entities in Iraq \u2013 CVE-2025-27920 Analysis\n\nDate: May 13, 2025\nAuthor: Mohamed Ahmed Abo El-Yazid\n\n\n---\n\nDear friend,\nBefore we begin\u2014thank you for the incredible support. The better the support, the better we become together.\n\n\n---\n\nOverview of the Attack\n\nOn the morning of May 13, 2025, a cyber espionage attack targeting sensitive and critical entities in Iraq was uncovered. The threat actor behind the operation is a T\u00fcrkiye-affiliated group known as:\n\nMarbled Dust\n\nAlso known as: Cosmic Wolf, Sea Turtle, Teal Kurma, UNC1326\n\n\nThis campaign has reportedly been active since April 2024.\n\n\n---\n\nVulnerability Information\n\nThe attackers exploited a zero-day vulnerability in the enterprise communication platform Output Messenger, specifically affecting versions 2.0.62 and earlier.\n\nCVE: CVE-2025-27920\n\nType: Directory Traversal Vulnerability\n\nAffected Component: Server Manager application\n\nRisk Level (estimated): 7.5+ (pending CVSS official rating)\n\n\nTechnical Description:\n\nThis vulnerability allows authenticated remote attackers to access system files or execute unauthorized scripts by exploiting weak path validation logic inside the Output Messenger Server Manager.\n\n\n---\n\nAttack Chain Breakdown\n\n1. Initial Access:\nAttacker gains access to Output Messenger Server as an authenticated user (possibly via DNS hijacking or typosquatting to steal credentials).\n\n\n2. Exploitation:\nUsing CVE-2025-27920, the attacker drops malicious payloads in critical folders like the server startup directory and the Public/Videos folder.\n\n\n3. Payloads Used:\n\nOM.vbs: Executes other malicious files.\n\nOMServerService.vbs: Triggers the Golang backdoor.\n\nOMServerService.exe: A Golang-based backdoor.\n\nOMClientService.exe: Another Golang backdoor that runs on client devices.\n\n\n\n\n\n---\n\nObserved Impact\n\nRemote Code Execution (RCE)\n\nCredential Theft\n\nPersistence via Startup Scripts\n\nBackdoor Installation\n\nCommunication with C2 server:\napi.wordinfos[.]com\n\nInformation Disclosure\n\n\n\n---\n\nRecommended Mitigations\n\n1. Update Output Messenger to version 2.0.63 or later.\n\n\n2. Monitor outbound traffic for suspicious domains like api.wordinfos[.]com.\n\n\n3. Scan startup folders for files named OM*.vbs or OM*.exe.\n\n\n4. Audit server access logs for any unusual login activity.\n\n\n5. Apply network segmentation for critical servers.\n\n\n\n\n---\n\nWhy Iraq Was Targeted\n\nYou may wonder: what does Iraq have to do with this attack?\n\nThe answer is simple. The attack specifically targeted Kurdish individuals and entities in Iraq, likely including:\n\nMembers of the Kurdish military\n\nSecurity forces\n\nAdministrative organizations\n\n\nThis campaign was not random \u2014 it was part of a targeted cyber espionage operation aimed at Kurdish users of Output Messenger operating within Iraq.\n\n\n\nSource :\n\nhttps://thehackernews.com/2025/05/turkiye-hackers-exploited-output.html", "creation_timestamp": "2025-05-13T05:57:12.000000Z"}, {"uuid": "117c5530-1cbf-4d4b-825e-3a8309ac58ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27515", "type": "published-proof-of-concept", "source": "Telegram/zNiXDuAdWj1sUxxVU5JjhobD5YqZbFR_XafKNg2cvfA4J_I", "content": "", "creation_timestamp": "2025-09-10T09:39:11.000000Z"}, {"uuid": "caf045f2-6614-4bf2-8160-73079c1301ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27515", "type": "seen", "source": "Telegram/Ej67y3-U2qHOzlICcSBmxU5ToM5GicFe3MyQPrVdZemdOpk", "content": "", "creation_timestamp": "2025-09-11T00:11:52.000000Z"}, {"uuid": "24d0402f-91ef-4efd-ad5b-02e6593aa306", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27515", "type": "published-proof-of-concept", "source": "Telegram/lVThFqOS_-THLS2nDZbOqeID9ULvGm_dMtchXCk4uxGtisKK", "content": "", "creation_timestamp": "2025-09-10T00:16:41.000000Z"}, {"uuid": "08adbdd9-b3ae-4a21-8605-b2497924df2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "exploited", "source": "Telegram/xBKy0pmY2vEjvojQjFwlbYETFbjkVWGk1UOHqsqt7I3a7g", "content": "", "creation_timestamp": "2025-06-17T20:57:26.000000Z"}, {"uuid": "dd50bcd6-75a8-42f9-be9f-dd877d2c4609", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "exploited", "source": "https://t.me/DarkWebInformer_News/1813", "content": "\ud83d\udea8 News Alert!\n\nSource: The Hacker News\nTitle: Meta Warns of FreeType Vulnerability (CVE-2025-27363) With Active Exploitation Risk\nLink: https://thehackernews.com/2025/03/meta-warns-of-freetype-vulnerability.html", "creation_timestamp": "2025-03-13T08:22:39.000000Z"}, {"uuid": "933f0f39-6cbd-454f-af6f-8ef351a427d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27519", "type": "published-proof-of-concept", "source": "Telegram/YV3DzczepKMR7yX0myz2JF3364L5RRSBkaP7xNBo9eCoSic", "content": "", "creation_timestamp": "2025-08-22T15:00:05.000000Z"}, {"uuid": "28c1ad6d-31f8-41f1-bbfa-299cfb26a141", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27519", "type": "published-proof-of-concept", "source": "Telegram/EGOUJD2a37DEvGpdSqtSHRzspBjiMe3SU1ygXi4t4agUL80", "content": "", "creation_timestamp": "2025-08-24T07:00:08.000000Z"}, {"uuid": "fccff728-5f78-4b22-9be8-88aa64e3079c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "published-proof-of-concept", "source": "Telegram/0M5jO4VIK8AI8C1mAkrE9XFqeLJqz32SrznEd5MdyL5tahc", "content": "", "creation_timestamp": "2025-08-16T15:00:08.000000Z"}, {"uuid": "a0a20a59-8345-4452-85ea-b48c4b84acd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2777", "type": "published-proof-of-concept", "source": "https://t.me/cybersecplayground/198", "content": "\ud83d\udd34 CVE-2025-2777 \u2014 SysAid On-Prem \u2264 23.3.40 - XXE Vulnerability\n\ud83e\udde8 Critical Impact \u2014 CVSS 9.3\n\ud83d\udcc5 Published: May 10, 2025\n\n\ud83d\udea8 A severe unauthenticated XML External Entity (XXE) vulnerability has been discovered in SysAid On-Prem (\u2264 v23.3.40), specifically within its lshw hardware info parsing functionality.\n\n\ud83e\ude78 Vulnerability Summary\nAttackers can abuse this XXE flaw to:\n\n- Read arbitrary files on the filesystem\n- Extract sensitive data (e.g., configuration files)\n- Potentially escalate privileges or gain admin access on the server\n\nThe vulnerability requires no authentication, making it a high-priority threat to exposed instances.\n\n\ud83d\udee0 Affected Product\nSysAid On-Prem versions \u2264 23.3.40\n\n\ud83d\udd27 Patched Version\nUpgrade to the latest release from:\n\ud83d\udd17 SysAid Docs - Version Info\n\n\ud83d\udca5 Real-World Exploitation Example \n\u26a1\ufe0f Proof-of-concept exploitation (from WatchTowr Labs):\n\u26a1\ufe0f A crafted XML payload submitted to the lshw endpoint can leak /etc/passwd or internal credentials.\n\u26a1\ufe0fUsed as a pivot to gain admin session access.\n\n\ud83d\udd0d Read full technical write-up:\n\ud83d\udd17 https://labs.watchtowr.com\n\n\ud83d\udd0e Detection Tip\nSearch for exposed SysAid panels:\n\nintitle:\"SysAid\" && \"helpdesk\"\nUse network scanners to monitor outbound XML-related traffic or unusual DNS queries triggered by XXE payloads.\n\n\u26a0\ufe0f Mitigation\n\ud83d\udd38 Patch immediately\n\ud83d\udd38 Restrict external access to the SysAid panel\n\ud83d\udd38Monitor for unusual HTTP POSTs to /lshw or similar paths\n\n\ud83d\udd10 Stay ahead with real-time CVE alerts and PoCs.\nJoin us at @cybersecplayground for more vulnerability posts, scanners, and defense tactics.\n\n\ud83e\udde0 Like + Share to raise awareness.\n\n#CVE2025_2777 #SysAid #XXE #RCE #Exploit #infosec #CyberSecurity #ZeroDay #CVE #cybersecplayground", "creation_timestamp": "2025-05-11T14:06:16.000000Z"}, {"uuid": "4a530694-d038-43d2-a30f-d3a0c2b050a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27581", "type": "published-proof-of-concept", "source": "Telegram/y7-RpDrmSuXhLcSTuW0R9_s09Quezx-GrdrSmzgmffhhoeQ", "content": "", "creation_timestamp": "2025-08-01T03:00:09.000000Z"}, {"uuid": "5c14d9a0-b283-4683-85cc-b9cdbf93f304", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27581", "type": "published-proof-of-concept", "source": "Telegram/3kjMLtWVSsmD2y1OzP7zGlpEhe6KWlREURwzXKH3eCeJgh0", "content": "", "creation_timestamp": "2025-07-31T03:00:05.000000Z"}, {"uuid": "da58a5c5-9080-485c-aec6-a4a048355b5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2748", "type": "published-proof-of-concept", "source": "https://t.me/TopCyberTechNews/452", "content": "Top Security News for Today\n\nJapan Passes Active Cyber Defense Bill  \nhttps://www.tripwire.com/state-of-security/japan-passes-active-cyber-defense-bill\n\nTop Cybersecurity Considerations When Moving Commercial Premises  \nhttps://www.tripwire.com/state-of-security/top-cybersecurity-considerations-when-moving-commercial-premises\n\nReforging Sliver: How Simple Code Edits Can Outmaneuver EDR  \nhttps://www.reddit.com/r/netsec/comments/1joqvup/reforging_sliver_how_simple_code_edits_can/\n\nHarnessing the Power of Named Pipes  \nhttps://www.reddit.com/r/netsec/comments/1jor8nr/harnessing_the_power_of_named_pipes/\n\nCrushFTP Authentication Bypass - CVE-2025-2825 \u2014 ProjectDiscovery Blog  \nhttps://www.reddit.com/r/netsec/comments/1jopz93/crushftp_authentication_bypass_cve20252825/\n\nCell Phone OPSEC for Border Crossings  \nhttps://www.schneier.com/blog/archives/2025/04/cell-phone-opsec-for-border-crossings.html\n\nXSS To RCE By Abusing Custom File Handlers - Kentico Xperience CMS (CVE-2025-2748) - watchTowr Labs  \nhttps://www.reddit.com/r/netsec/comments/1jos2z2/xss_to_rce_by_abusing_custom_file_handlers/\n\nWhen Parameterization Fails: SQL Injection in Nim's db_postgres Module Using Parameterized Queries  \nhttps://www.reddit.com/r/netsec/comments/1joth41/when_parameterization_fails_sql_injection_in_nims/\n\nTransforming Public Sector Security Operations in the AI Era  \nhttps://www.microsoft.com/en-us/security/blog/2025/04/01/transforming-public-sector-security-operations-in-the-ai-era/\n\nImproved Detection Signature for the K8s IngressNightmare Vulnerability  \nhttps://www.reddit.com/r/netsec/comments/1jp9cmt/improved_detection_signature_for_the_k8s/\n\nFollow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman", "creation_timestamp": "2025-04-02T09:30:37.000000Z"}, {"uuid": "931f3a2a-cc54-4142-b506-d19a2ef5e029", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27091", "type": "seen", "source": "https://t.me/DarkWebInformer_News/1018", "content": "\ud83d\udea8 News Alert!\n\nSource: Dark Web Informer - Cyber Threat Intelligence\nTitle: CVE-2025-27091: OpenH264 Decoding Functions Heap Overflow Vulnerability\nLink: https://darkwebinformer.com/cve-2025-27091-openh264-decoding-functions-heap-overflow-vulnerability/", "creation_timestamp": "2025-02-20T19:30:28.000000Z"}, {"uuid": "55040bbf-2947-4805-8979-299b79145e8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27364", "type": "seen", "source": "https://t.me/DarkWebInformer_News/1130", "content": "\ud83d\udea8 News Alert!\n\nSource: Dark Web Informer - Cyber Threat Intelligence\nTitle: CVE-2025-27364: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\nLink: https://darkwebinformer.com/cve-2025-27364-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-injection/", "creation_timestamp": "2025-02-24T20:04:29.000000Z"}, {"uuid": "2f702160-b26d-42cf-ac8e-336a4afb31d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "seen", "source": "Telegram/cWtiHx103QDqzsPEFibXmjg0nuYdbQyVZSdVVV_BXQwi1FA", "content": "", "creation_timestamp": "2025-07-31T15:00:06.000000Z"}, {"uuid": "460ffcd6-8488-4027-942d-63d67295638a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "published-proof-of-concept", "source": "https://t.me/TopCyberTechNews/477", "content": "Top Security News for Today\n\nWe Got Tired of Labs NOT preparing us for Real Targets\u2026 So We Built This (Seeking Beta Feedback!)  \nhttps://www.reddit.com/r/netsec/comments/1kgsx1p/we_got_tired_of_labs_not_preparing_us_for_real/\n\nState of ransomware in 2025  \nhttps://securelist.com/state-of-ransomware-in-2025/116475/\n\nDrag and pwnd: Exploiting VS Code with ASCII  \nhttps://www.reddit.com/r/netsec/comments/1kgty8a/drag_and_pwnd_exploiting_vs_code_with_ascii/\n\nSysOwned, Your Friendly Support Ticket - SysAid On-Premise Pre-Auth RCE Chain (CVE-2025-2775 And Friends) - watchTowr Labs  \nhttps://www.reddit.com/r/netsec/comments/1kgt99x/sysowned_your_friendly_support_ticket_sysaid/\n\nChinese AI Submersible  \nhttps://www.schneier.com/blog/archives/2025/05/chinese-ai-submersible.html\n\nMeet the Deputy CISOs who help shape Microsoft\u2019s approach to cybersecurity: Part 2  \nhttps://www.microsoft.com/en-us/security/blog/2025/05/07/meet-the-deputy-cisos-who-help-shape-microsofts-approach-to-cybersecurity-part-2/\n\nAI Slop Is Polluting Bug Bounty Platforms with Fake Vulnerability Reports  \nhttps://www.reddit.com/r/netsec/comments/1kh0bps/ai_slop_is_polluting_bug_bounty_platforms_with/\n\nPakistani Firm Shipped Fentanyl Analogs, Scams to US  \nhttps://krebsonsecurity.com/2025/05/pakistani-firm-shipped-fentanyl-analogs-scams-to-us/\n\nFollow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman", "creation_timestamp": "2025-05-08T09:30:33.000000Z"}, {"uuid": "b0dc51ad-0ec0-4631-8e3d-cda285b4a3fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27038", "type": "exploited", "source": "Telegram/guzp7eE0tWLWp62_j44tQUA_wxuksiJJi5V-sF42lXlAlg", "content": "", "creation_timestamp": "2025-08-05T16:50:59.000000Z"}, {"uuid": "ed60c193-054c-4898-a50f-5df9fcf7c4a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "exploited", "source": "https://t.me/DarkWebInformer_News/5565", "content": "\ud83d\udea8 News Alert!\n\nSource: The Hacker News\nTitle: Google Chrome Zero-Day CVE-2025-2783 Exploited by TaxOff to Deploy Trinper Backdoor\nLink: https://thehackernews.com/2025/06/google-chrome-zero-day-cve-2025-2783.html", "creation_timestamp": "2025-06-17T19:26:35.000000Z"}, {"uuid": "7a582399-179c-483f-b09b-76c9412f0efa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27038", "type": "seen", "source": "https://t.me/true_secator/7298", "content": "Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0448\u0435\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Android \u0437\u0430 \u0430\u0432\u0433\u0443\u0441\u0442 2025 \u0433\u043e\u0434\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Qualcomm, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0444\u0438\u0433\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0432 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041e\u043d\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-21479 \u0438 CVE-2025-27038, \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430\u043c\u0438 Google \u0435\u0449\u0435 \u0432 \u043a\u043e\u043d\u0446\u0435 \u044f\u043d\u0432\u0430\u0440\u044f 2025 \u0433\u043e\u0434\u0430.\n\n\u0422\u043e\u0433\u0434\u0430 Google Threat Analysis Group \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u043b\u0438 \u043e \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u0438\u0445 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0439 \u0442\u0430\u0440\u0433\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0438\u0437 \u043d\u0438\u0445 - \u044d\u0442\u043e \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044f \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0430\u043c\u044f\u0442\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u043c\u0438\u043a\u0440\u043e\u0443\u0437\u043b\u0435 \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430 \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u043e\u0439 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u043c\u0430\u043d\u0434. \n\nCVE-2025-27038, \u0441 \u0434\u0440\u0443\u0433\u043e\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u044b, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u0438 \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433\u0435 \u0433\u0440\u0430\u0444\u0438\u043a\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432 \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430 Adreno \u0432 Chrome.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0434\u0440\u0430\u0439\u0432\u0435\u0440 \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430 Adreno (GPU), \u0431\u044b\u043b\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u044b OEM-\u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f\u043c \u0432 \u043c\u0430\u0435 \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0435\u0439 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u0430 Google \u0440\u0435\u0442\u0440\u0430\u043d\u0441\u043b\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0438\u0445 \u0432 \u0441\u0432\u043e\u0438.\n\n\u0412 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 Android Google \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 System, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0431\u0435\u0437 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f RCE \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0422\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0434\u0432\u0430 \u043d\u0430\u0431\u043e\u0440\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: \u043e\u0442\u00a001.08.2025 \u0438\u00a005.08.2025. \n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u044f \u0432\u0441\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0437 \u043f\u0435\u0440\u0432\u043e\u0433\u043e \u043d\u0430\u0431\u043e\u0440\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043b\u044f \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u044f\u0434\u0440\u0430 \u0438 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u0441 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c\u0441\u044f \u043d\u0435 \u043a\u043e \u0432\u0441\u0435\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c Android.", "creation_timestamp": "2025-08-05T12:10:53.000000Z"}, {"uuid": "7406e195-b5f2-40e2-86e7-3df722acce51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "exploited", "source": "Telegram/5eELLqUDxcBK4ZdQ7jIN_l05VdEFTS1dh85ap3yoWDV3Jg", "content": "", "creation_timestamp": "2025-06-17T20:20:51.000000Z"}, {"uuid": "2845dbcb-db6e-42e9-aeab-d02871c236ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27415", "type": "published-proof-of-concept", "source": "https://t.me/poxek/5373", "content": "CVE-2025-27415: \u041e\u0442\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043a\u044d\u0448\u0430 \u0432 Nuxt.js\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c Rachid.A (zhero_web_security) \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0432\u0435\u0431-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Nuxt.js, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0442\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043a\u044d\u0448 CDN \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f\u0445. \u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442 \u2014 \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 \u0438 \u043f\u043e\u043b\u043d\u0430\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0441\u0430\u0439\u0442\u043e\u0432.\n\n\u27a1\ufe0f\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0434\u0435\u0442\u0430\u043b\u0438\n\u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 Nuxt.js 3.0.0\u20133.15.x, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 3.16.0. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u0438 \u0437\u0430 CDN, \u0438\u0433\u043d\u043e\u0440\u0438\u0440\u0443\u044e\u0449\u0438\u043c query-\u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u043f\u0440\u0438 \u043a\u044d\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438.\n\nCVSS 7.5 HIGH: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\n\n\u27a1\ufe0f\u041a\u0430\u043a \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0430\u0442\u0430\u043a\u0430\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 \u0441\u043b\u0430\u0431\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 URL \u0447\u0435\u0440\u0435\u0437 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e\u0435 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0435. Nuxt \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043f\u0430\u0442\u0442\u0435\u0440\u043d \u0434\u043b\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f payload-\u043c\u0430\u0440\u0448\u0440\u0443\u0442\u043e\u0432:\n/_payload\\.json|/_payload\\.js\n\n\u041d\u043e \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043a\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u0432\u0435\u0441\u044c URL, \u0430 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0443\u0442\u044c. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043c\u0430\u043d\u0443\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u043c \u0432\u0438\u0434\u0430:\nGET /?/_payload.json HTTP/1.1\nHost: vulnerable-site.com\n\nCDN \u0438\u0433\u043d\u043e\u0440\u0438\u0440\u0443\u0435\u0442 query-\u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u043f\u0440\u0438 \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u043b\u044e\u0447\u0430 \u043a\u044d\u0448\u0430, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a / \u0438 /?/_payload.json \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u043f\u043e\u0434 \u043e\u0434\u043d\u0438\u043c \u043a\u043b\u044e\u0447\u043e\u043c. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435:\n\n1. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0437\u0430\u043f\u0440\u043e\u0441 /?/_payload.json\n2. \u0421\u0435\u0440\u0432\u0435\u0440 \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0435\u0442 JSON \u0432\u043c\u0435\u0441\u0442\u043e HTML: {\"serverRendered\":true,\"data\":null,\"state\":{}}\n3. CDN \u043a\u044d\u0448\u0438\u0440\u0443\u0435\u0442 JSON-\u043e\u0442\u0432\u0435\u0442 \u0434\u043b\u044f \u043f\u0443\u0442\u0438 /\n4. \u0412\u0441\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 JSON \u0432\u043c\u0435\u0441\u0442\u043e \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b\n\n\u27a1\ufe0f\u041c\u0430\u0441\u0448\u0442\u0430\u0431 \u043f\u043e\u0440\u0430\u0436\u0435\u043d\u0438\u044f\n\u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0412\u0421\u0415 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b Nuxt-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0434\u0430\u0436\u0435 \u0442\u0435, \u0447\u0442\u043e \u043d\u0435 \u043f\u0435\u0440\u0435\u0434\u0430\u044e\u0442 \u0434\u0430\u043d\u043d\u044b\u0435 \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442. \u041e\u0431\u044a\u0435\u043a\u0442 \u0431\u0443\u0434\u0435\u0442 \u043f\u0443\u0441\u0442\u044b\u043c, \u043d\u043e \u0432\u0441\u0451 \u0440\u0430\u0432\u043d\u043e \u0432\u0435\u0440\u043d\u0451\u0442\u0441\u044f \u0432 JSON-\u0444\u043e\u0440\u043c\u0430\u0442\u0435, \u043b\u043e\u043c\u0430\u044f \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433.\n\n\u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u043e \u0434\u043b\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u043d\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u2014 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u043e\u0432, \u0444\u0438\u043d\u0442\u0435\u0445-\u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432, \u0433\u0434\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442 \u043f\u0440\u044f\u043c\u044b\u0435 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0435 \u043f\u043e\u0442\u0435\u0440\u0438.\n\n\u27a1\ufe0f\u0410\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u0432\u0435\u043a\u0442\u043e\u0440 \u0447\u0435\u0440\u0435\u0437 hash\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0441\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 hash-\u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442 URL:\nGET /#/_payload.json HTTP/1.1\n\nHash \u043d\u0435 \u043f\u0435\u0440\u0435\u0434\u0430\u0451\u0442\u0441\u044f \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\u043c\u0438, \u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u043e\u043a\u0441\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043f\u0430\u0441\u0442\u044c \u0432 Nuxt \u0438 \u0441\u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c. \u041f\u0440\u0430\u0432\u0434\u0430, \u043c\u043d\u043e\u0433\u0438\u0435 CDN \u043a\u043e\u0434\u0438\u0440\u0443\u044e\u0442 \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u044e\u0442 hash, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0430\u0442\u0430\u043a\u0443.\n\n\ud83d\udd25 PoC\n\ndef attack_loop(origin, cache_sec):\n    target = f\"{origin}/?/_payload.json\"\n    headers = {\"Host\": \"localhost\"}\n    while attacking:\n        requests.get(target, headers=headers)\n        time.sleep(cache_sec)  # \u0418\u043d\u0442\u0435\u0440\u0432\u0430\u043b \u043c\u0435\u043d\u044c\u0448\u0435 TTL \u043a\u044d\u0448\u0430\n\n\u0414\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043e\u0434\u043d\u043e\u0433\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u043a\u0430\u0436\u0434\u044b\u0435 60 \u0441\u0435\u043a\u0443\u043d\u0434 \u043f\u0440\u0438 TTL \u043a\u044d\u0448\u0430 = 60 \u0441\u0435\u043a \u0434\u043b\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e DoS.\n\n\u27a1\ufe0f\u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c?\n1. \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e Nuxt 3.16.0+ \u2014 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u044f query-\u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432\n2. \u041d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c CDN \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e:\n# \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043b\u044e\u0447 \u043a\u044d\u0448\u0430\nproxy_cache_key \"$scheme$host$request_uri\";  # \u0432\u043c\u0435\u0441\u0442\u043e $uri\n\n# \u0411\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u043f\u0430\u0442\u0442\u0435\u0440\u043d\u044b\nif ($args ~* \"/_payload\\.json\") { return 403; }\n3. \u041f\u0440\u0430\u0432\u0438\u043b\u0430 WAF:\nSecRule REQUEST_URI|ARGS_GET \"@rx \\\\?.*_payload\\\\.json\" \\\n    \"id:93327415,phase:1,block,msg:'CVE-2025-27415: Nuxt Cache Poisoning'\"\n\n(http.request.uri contains \"?_payload.json\")\n\n\n\ud83d\udcac \u0414\u043e\u0431\u0430\u0432\u043b\u044e \u043e\u0442 \u0441\u0435\u0431\u044f, \u0447\u0442\u043e \u0432\u0438\u0434\u0435\u043b \u0438\u043d\u0444\u0443 \u043e \u043f\u043e\u0433\u043b\u0430\u0449\u0435\u043d\u0438\u0438 NuxtLabs Vercel'\u043e\u043c, \u0430 \u044d\u0442\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438\u0438 NextJS. \u0421\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e NextJS \u0442\u043e\u0436\u0435 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0437\u0430\u0441\u0432\u0435\u0442\u0438\u043b\u0441\u044f \u0441 cache poisoning CVE-2025-49826. \u0421\u043e\u0432\u043f\u0430\u0434\u0435\u043d\u0438\u0435?))\n\u041a\u0430\u0440\u0442\u0438\u043d\u043a\u0430 \u0441\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0441 \u043f\u0435\u0440\u0432\u043e\u0439 \u043f\u043e\u043f\u044b\u0442\u043a\u0438, \u0442\u0430\u043a \u0447\u0442\u043e \u043d\u0435 \u043e\u0431\u0440\u0430\u0449\u0430\u0439\u0442\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 ayload ;D\n\n\ud83c\udf1a @poxek | \ud83c\udf1a \u0411\u043b\u043e\u0433 | \ud83d\udcfa YT | \ud83d\udcfa RT | \ud83d\udcfa VK", "creation_timestamp": "2025-07-18T09:58:34.000000Z"}, {"uuid": "ff608e59-5c13-448d-8102-c64379200d59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://t.me/hackyourmom/11384", "content": "Google \u0443\u0441\u0443\u0432\u0430\u0454 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u0443 Android-\u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c CVE-2025-27363 (\u0440\u0435\u0439\u0442\u0438\u043d\u0433 8.1) \u26a0\ufe0f\n\n\ud83d\udccc \u0412\u043e\u043d\u0430 \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u0454 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u0438 \u0448\u043a\u0456\u0434\u043b\u0438\u0432\u0438\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u0443\u0447\u0430\u0441\u0442\u0456 \u043a\u043e\u0440\u0438\u0441\u0442\u0443\u0432\u0430\u0447\u0430, \u0448\u043b\u044f\u0445\u043e\u043c \u0435\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0456\u0457 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0456 \u0443 \u0431\u0456\u0431\u043b\u0456\u043e\u0442\u0435\u0446\u0456 FreeType (\u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433 \u0448\u0440\u0438\u0444\u0442\u0456\u0432) \ud83d\udd0d \u0411\u0456\u043b\u044c\u0448\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u0438\u0446\u044c \ud83d\udc48 #cybernews", "creation_timestamp": "2025-05-06T14:18:30.000000Z"}, {"uuid": "6a7995f8-c4d4-48a7-a293-b62a7d87b12a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27920", "type": "exploited", "source": "https://t.me/hackyourmom/11460", "content": "\ud83d\udc7e Marbled Dust, \u043f\u043e\u0432'\u044f\u0437\u0430\u043d\u0430 \u0437 \ud83c\uddf9\ud83c\uddf7 \u043a\u0456\u0431\u0435\u0440\u0443\u0433\u0440\u0443\u043f\u0443\u0432\u0430\u043d\u043d\u044f, \u0432\u0438\u043a\u043e\u0440\u0438\u0441\u0442\u0430\u043b\u0430 \u043d\u0435\u0432\u0456\u0434\u043e\u043c\u0443 \u0440\u0430\u043d\u0456\u0448\u0435 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c CVE-2025-27920 \u0434\u043b\u044f \u0432\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044f \u0431\u0435\u043a\u0434\u043e\u0440\u0456\u0432 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0438, \u043f\u043e\u0432\u2019\u044f\u0437\u0430\u043d\u0456 \u0437 \u043a\u0443\u0440\u0434\u0441\u044c\u043a\u0438\u043c\u0438 \u0432\u0456\u0439\u0441\u044c\u043a\u043e\u0432\u0438\u043c\u0438 \u0432 \ud83c\uddee\ud83c\uddf6 #cybernews", "creation_timestamp": "2025-05-14T09:56:45.000000Z"}, {"uuid": "fe936683-1c09-47d2-86e3-c8b24eb10ee9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27415", "type": "published-proof-of-concept", "source": "Telegram/6Txp-NdsgOvnDudD50x-c9VhpDrhwlYTuOYafPDdoFYGJ9g", "content": "", "creation_timestamp": "2025-07-14T15:00:12.000000Z"}, {"uuid": "458a87e9-18b0-466a-8dc1-da68fa48a7d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27415", "type": "published-proof-of-concept", "source": "Telegram/pRtWzbQBlUyWzuUsXiAxBy6O0_nvJ3iAsRbVXeMTCKSM_zk", "content": "", "creation_timestamp": "2025-07-14T15:00:06.000000Z"}, {"uuid": "86d6333c-b7f8-4989-b7c5-b0f0b98e6518", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27415", "type": "published-proof-of-concept", "source": "Telegram/uWnpZChKZV5yuE-QOEkc-gVigY28ff3y_u3cMKv3pSLH4Sk", "content": "", "creation_timestamp": "2025-07-14T21:00:04.000000Z"}, {"uuid": "c27035ef-bce9-42b7-abd7-f3ba6db39472", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27136", "type": "published-proof-of-concept", "source": "https://t.me/information_security_channel/53894", "content": "CVE-2025-27136 \u2013 LocalS3 CreateBucketConfiguration Endpoint XXE Injection\nhttps://www.offsec.com/blog/cve-2025-27136/\n\nDiscover how CVE-2025-27136, a critical XXE vulnerability in LocalS3\u2019s CreateBucketConfiguration endpoint, can be exploited to access sensitive files. Learn how the flaw works and how to mitigate it.\nThe post CVE-2025-27136 \u2013 LocalS3 CreateBucketConfiguration Endpoint XXE Injection (https://www.offsec.com/blog/cve-2025-27136/) appeared first on OffSec (https://www.offsec.com/).", "creation_timestamp": "2025-07-24T15:47:44.000000Z"}, {"uuid": "f5653894-b929-430d-a67d-18b6e185be2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "https://t.me/information_security_channel/53885", "content": "CISA Warns of SysAid Vulnerability Exploitation\nhttps://www.securityweek.com/cisa-warns-of-sysaid-vulnerability-exploitation/\n\nCISA has added two recent SysAid vulnerabilities, CVE-2025-2776 and CVE-2025-2775, to its KEV catalog.\nThe post CISA Warns of SysAid Vulnerability Exploitation (https://www.securityweek.com/cisa-warns-of-sysaid-vulnerability-exploitation/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2025-07-23T09:05:52.000000Z"}, {"uuid": "d0b6aa88-269c-495e-9c7f-d3f003444456", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "seen", "source": "https://t.me/information_security_channel/53885", "content": "CISA Warns of SysAid Vulnerability Exploitation\nhttps://www.securityweek.com/cisa-warns-of-sysaid-vulnerability-exploitation/\n\nCISA has added two recent SysAid vulnerabilities, CVE-2025-2776 and CVE-2025-2775, to its KEV catalog.\nThe post CISA Warns of SysAid Vulnerability Exploitation (https://www.securityweek.com/cisa-warns-of-sysaid-vulnerability-exploitation/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2025-07-23T09:05:52.000000Z"}, {"uuid": "fc88cbef-cfc8-4bfa-b4a4-151833b60fcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27210", "type": "published-proof-of-concept", "source": "Telegram/Rg02G1EeA15TwWZ1pSDugSv9c8R7BSyf-8mnTk8tekiQrLs", "content": "", "creation_timestamp": "2025-07-18T15:00:06.000000Z"}, {"uuid": "4e0ba820-f149-4879-aa9a-cfa0edc542b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "published-proof-of-concept", "source": "Telegram/T40TgjeWGWGsXoUl8seqwuPrYGUpdj-sMthNdJApG881fE0", "content": "", "creation_timestamp": "2025-07-15T09:00:04.000000Z"}, {"uuid": "aa680053-f071-42a4-9318-845eaf537a39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27158", "type": "seen", "source": "https://t.me/itsec_news/5496", "content": "\u200b\u26a1\ufe0f\u041c\u0443\u0437\u044b\u043a\u0430 \u0432\u0437\u043b\u043e\u043c\u0430 \u0438 \u0442\u0435\u043a\u0441\u0442\u044b \u043e\u0431\u043c\u0430\u043d\u0430: FLAC \u0438 PDF \u043f\u043e\u043f\u043e\u043b\u043d\u0438\u043b\u0438 \u0430\u0440\u0441\u0435\u043d\u0430\u043b \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432\n\n\ud83d\udcac \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430 Cisco Talos \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 Miniaudio \u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 Adobe Acrobat Reader. \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0438 \u0443\u0442\u0435\u0447\u043a\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c TALOS-2024-2063 ( CVE-2024-41147 ) \u0432 Miniaudio \u0431\u044b\u043b\u0430 \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u043c Cisco Talos \u042d\u043c\u043c\u0430\u043d\u0443\u044d\u043b\u0435\u043c \u0422\u0430\u0448\u043e. \u041e\u0448\u0438\u0431\u043a\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0440\u0430\u0437\u043c\u0435\u0440\u0430 \u0432\u044b\u0434\u0435\u043b\u044f\u0435\u043c\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u0445\u043e\u0434\u0443 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0432 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043e\u0431\u043b\u0430\u0441\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u0438.\n\n\u042d\u0442\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043f\u0440\u043e\u0432\u043e\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u0438\u0435\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e FLAC-\u0444\u0430\u0439\u043b\u0430, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0430\u043c\u044f\u0442\u0438. \u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e Miniaudio \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u043e\u0439 \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0437\u0432\u0443\u043a\u0430 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 C, \u043f\u043e\u0434\u043e\u0431\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0435\u0451.\n\n\u0422\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c, \u0434\u0440\u0443\u0433\u043e\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c Cisco Talos, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u043f\u043e\u0434 \u043f\u0441\u0435\u0432\u0434\u043e\u043d\u0438\u043c\u043e\u043c KPC, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0441\u0440\u0430\u0437\u0443 \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Adobe Acrobat Reader. TALOS-2025-2134 ( CVE-2025-27163 ) \u0438 TALOS-2025-2136 ( CVE-2025-27164 ) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u0447\u0442\u0435\u043d\u0438\u044f \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0438\u0435 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0448\u0440\u0438\u0444\u0442\u043e\u0432. \u0418\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\nTALOS-2025-2135 ( CVE-2025-27158 ) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f. \u041e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430. \u0414\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043e\u0442\u043a\u0440\u044b\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 PDF-\u0444\u0430\u0439\u043b, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0448\u0440\u0438\u0444\u0442.\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Miniaudio \u0438 Adobe \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0412\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439, \u0447\u0442\u043e\u0431\u044b \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0445 \u0430\u0442\u0430\u043a. \u0414\u043b\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Cisco Talos \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 Snort.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-03-15T14:46:26.000000Z"}, {"uuid": "a7083a26-0f97-4ce3-9aa6-068895c4b745", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27164", "type": "seen", "source": "https://t.me/itsec_news/5496", "content": "\u200b\u26a1\ufe0f\u041c\u0443\u0437\u044b\u043a\u0430 \u0432\u0437\u043b\u043e\u043c\u0430 \u0438 \u0442\u0435\u043a\u0441\u0442\u044b \u043e\u0431\u043c\u0430\u043d\u0430: FLAC \u0438 PDF \u043f\u043e\u043f\u043e\u043b\u043d\u0438\u043b\u0438 \u0430\u0440\u0441\u0435\u043d\u0430\u043b \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432\n\n\ud83d\udcac \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430 Cisco Talos \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 Miniaudio \u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 Adobe Acrobat Reader. \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0438 \u0443\u0442\u0435\u0447\u043a\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c TALOS-2024-2063 ( CVE-2024-41147 ) \u0432 Miniaudio \u0431\u044b\u043b\u0430 \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u043c Cisco Talos \u042d\u043c\u043c\u0430\u043d\u0443\u044d\u043b\u0435\u043c \u0422\u0430\u0448\u043e. \u041e\u0448\u0438\u0431\u043a\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0440\u0430\u0437\u043c\u0435\u0440\u0430 \u0432\u044b\u0434\u0435\u043b\u044f\u0435\u043c\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u0445\u043e\u0434\u0443 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0432 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043e\u0431\u043b\u0430\u0441\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u0438.\n\n\u042d\u0442\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043f\u0440\u043e\u0432\u043e\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u0438\u0435\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e FLAC-\u0444\u0430\u0439\u043b\u0430, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0430\u043c\u044f\u0442\u0438. \u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e Miniaudio \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u043e\u0439 \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0437\u0432\u0443\u043a\u0430 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 C, \u043f\u043e\u0434\u043e\u0431\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0435\u0451.\n\n\u0422\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c, \u0434\u0440\u0443\u0433\u043e\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c Cisco Talos, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u043f\u043e\u0434 \u043f\u0441\u0435\u0432\u0434\u043e\u043d\u0438\u043c\u043e\u043c KPC, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0441\u0440\u0430\u0437\u0443 \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Adobe Acrobat Reader. TALOS-2025-2134 ( CVE-2025-27163 ) \u0438 TALOS-2025-2136 ( CVE-2025-27164 ) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u0447\u0442\u0435\u043d\u0438\u044f \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0438\u0435 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0448\u0440\u0438\u0444\u0442\u043e\u0432. \u0418\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\nTALOS-2025-2135 ( CVE-2025-27158 ) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f. \u041e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430. \u0414\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043e\u0442\u043a\u0440\u044b\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 PDF-\u0444\u0430\u0439\u043b, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0448\u0440\u0438\u0444\u0442.\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Miniaudio \u0438 Adobe \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0412\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439, \u0447\u0442\u043e\u0431\u044b \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0445 \u0430\u0442\u0430\u043a. \u0414\u043b\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Cisco Talos \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 Snort.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-03-15T14:46:26.000000Z"}, {"uuid": "929c2c39-d409-4226-a188-15373b26dd78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27163", "type": "seen", "source": "https://t.me/itsec_news/5496", "content": "\u200b\u26a1\ufe0f\u041c\u0443\u0437\u044b\u043a\u0430 \u0432\u0437\u043b\u043e\u043c\u0430 \u0438 \u0442\u0435\u043a\u0441\u0442\u044b \u043e\u0431\u043c\u0430\u043d\u0430: FLAC \u0438 PDF \u043f\u043e\u043f\u043e\u043b\u043d\u0438\u043b\u0438 \u0430\u0440\u0441\u0435\u043d\u0430\u043b \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432\n\n\ud83d\udcac \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430 Cisco Talos \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 Miniaudio \u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 Adobe Acrobat Reader. \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0438 \u0443\u0442\u0435\u0447\u043a\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c TALOS-2024-2063 ( CVE-2024-41147 ) \u0432 Miniaudio \u0431\u044b\u043b\u0430 \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u043c Cisco Talos \u042d\u043c\u043c\u0430\u043d\u0443\u044d\u043b\u0435\u043c \u0422\u0430\u0448\u043e. \u041e\u0448\u0438\u0431\u043a\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0440\u0430\u0437\u043c\u0435\u0440\u0430 \u0432\u044b\u0434\u0435\u043b\u044f\u0435\u043c\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u0445\u043e\u0434\u0443 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0432 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043e\u0431\u043b\u0430\u0441\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u0438.\n\n\u042d\u0442\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043f\u0440\u043e\u0432\u043e\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u0438\u0435\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e FLAC-\u0444\u0430\u0439\u043b\u0430, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0430\u043c\u044f\u0442\u0438. \u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e Miniaudio \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u043e\u0439 \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0437\u0432\u0443\u043a\u0430 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 C, \u043f\u043e\u0434\u043e\u0431\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0435\u0451.\n\n\u0422\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c, \u0434\u0440\u0443\u0433\u043e\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c Cisco Talos, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u043f\u043e\u0434 \u043f\u0441\u0435\u0432\u0434\u043e\u043d\u0438\u043c\u043e\u043c KPC, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0441\u0440\u0430\u0437\u0443 \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Adobe Acrobat Reader. TALOS-2025-2134 ( CVE-2025-27163 ) \u0438 TALOS-2025-2136 ( CVE-2025-27164 ) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u0447\u0442\u0435\u043d\u0438\u044f \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0438\u0435 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0448\u0440\u0438\u0444\u0442\u043e\u0432. \u0418\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\nTALOS-2025-2135 ( CVE-2025-27158 ) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f. \u041e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430. \u0414\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043e\u0442\u043a\u0440\u044b\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 PDF-\u0444\u0430\u0439\u043b, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0448\u0440\u0438\u0444\u0442.\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Miniaudio \u0438 Adobe \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0412\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439, \u0447\u0442\u043e\u0431\u044b \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0445 \u0430\u0442\u0430\u043a. \u0414\u043b\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Cisco Talos \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 Snort.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-03-15T14:46:26.000000Z"}, {"uuid": "8f75f0d4-7548-466e-9f80-aaa99d4ebb65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "published-proof-of-concept", "source": "Telegram/qSyM_CObkKGA7Q7HpzeouiC5p1gyRUk9NSeKtBswwYL551E", "content": "", "creation_timestamp": "2025-07-13T03:00:05.000000Z"}, {"uuid": "7ad2dc72-6d7f-412a-afef-b5eaf356aac0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "seen", "source": "Telegram/G-kx-DTDWfPOp5cJepg92j2e9E9yyQ0k9SVYaxiupb8kGRk", "content": "", "creation_timestamp": "2025-07-13T15:00:06.000000Z"}, {"uuid": "4887fa4f-3b8a-4f69-a00a-3613c831ef5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "exploited", "source": "https://t.me/itsec_news/5885", "content": "\ud83e\udd12 \u041d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Chrome \u2014 \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438. \n\nGoogle \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f Chrome (\u0432\u0435\u0440\u0441\u0438\u044f 136.0.7103.113/114) \u2014 \u043f\u0440\u0438\u0447\u0438\u043d\u0430 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u0430\u044f: \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0434\u043d\u0430 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0427\u0442\u043e \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u043e?\n\u25fc\ufe0f\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-4664 \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Loader: \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\u25fc\ufe0f\u041e \u0431\u0430\u0433\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0412\u0441\u0435\u0432\u043e\u043b\u043e\u0434 \u041a\u043e\u043a\u043e\u0440\u0438\u043d 5 \u043c\u0430\u044f 2025 \u0433\u043e\u0434\u0430.\n\u25fc\ufe0f\u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0443\u0436\u0435 \u0433\u0443\u043b\u044f\u0435\u0442 \u043f\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0443 \u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0430\u0442\u0430\u043a.\n\n\u0427\u0442\u043e \u044d\u0442\u043e \u0437\u043d\u0430\u0447\u0438\u0442?\n\u0425\u0430\u043a\u0435\u0440 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u0441\u0443\u043d\u0443\u0442\u044c \u0442\u0435\u0431\u0435 HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443, \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u0442\u043e\u0440\u0443\u044e:\n\u25fc\ufe0f\u041f\u043e\u043b\u0443\u0447\u0438\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c \u0441 \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0430\u0439\u0442\u043e\u0432 (\u0434\u0430, \u0434\u0430\u0436\u0435 \u043a \u0442\u043e\u043a\u0435\u043d\u0430\u043c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438).\n\u25fc\ufe0f\u041e\u0431\u043e\u0439\u0434\u0451\u0442 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f Chrome.\n\u25fc\ufe0f\u0412 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u2014 \u0434\u0430\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u0438\u0442 \u043a\u043e\u0434 \u0432\u043d\u0435 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430. \u0412\u0441\u0451 \u043f\u043b\u043e\u0445\u043e.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u0434\u0441\u043e\u0432\u044b\u0432\u0430\u0435\u0442 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a Link \u0441 \u0445\u0438\u0442\u0440\u043e\u0439 referrer-policy. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e \u043e\u0442\u0434\u0430\u0451\u0442 \u0432\u0441\u044e \u0441\u0442\u0440\u043e\u043a\u0443 \u0437\u0430\u043f\u0440\u043e\u0441\u0430. \u0415\u0441\u043b\u0438 \u0432 URL \u0441\u0438\u0434\u0438\u0442 access_token \u0438\u043b\u0438 auth_code \u2014 \u043e\u043d \u0443\u0445\u043e\u0434\u0438\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443.\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u0434\u044b\u0440\u0430 \u2014 CVE-2025-4609 (Mojo)\n\u042d\u0442\u043e \u0443\u0436\u0435 \u0431\u0430\u0433 \u0432 IPC (\u043c\u0435\u0436\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043d\u043e\u043c \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0438). \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043b\u0435\u0437\u0442\u0438 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b Chrome, \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c \u0438 \u043f\u043e\u0434\u043d\u044f\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438. \u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0434\u0435\u0442\u0430\u043b\u0435\u0439 \u043f\u043e\u043a\u0430 \u043d\u0435\u0442, \u043d\u043e\u2026 \u0437\u0432\u0443\u0447\u0438\u0442 \u0441\u0442\u0440\u0451\u043c\u043d\u043e.\n\n\u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c \u043f\u0440\u044f\u043c\u043e \u0441\u0435\u0439\u0447\u0430\u0441?\n\u25fc\ufe0f\u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 Chrome \u0432\u0440\u0443\u0447\u043d\u0443\u044e:\n\u041c\u0435\u043d\u044e \u2192 \u0421\u043f\u0440\u0430\u0432\u043a\u0430 \u2192 \u041e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Google Chrome \u2192 \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c.\n\u25fc\ufe0f\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0435 Brave, Edge, Opera, Vivaldi? \u2014 \u043e\u043d\u0438 \u0442\u043e\u0436\u0435 \u043d\u0430 Chromium. \u0416\u0434\u0451\u043c \u043f\u0430\u0442\u0447\u0435\u0439.\n\u25fc\ufe0f\u0420\u0430\u0441\u0441\u043a\u0430\u0436\u0438\u0442\u0435 \u0434\u0440\u0443\u0437\u044c\u044f\u043c. \u041f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e \u0430\u0442\u0430\u043a\u0438 \u0443\u0436\u0435 \u0438\u0434\u0443\u0442.\n\n\u041c\u0430\u0440\u0442\u043e\u0432\u0441\u043a\u0430\u044f \u0434\u044b\u0440\u0430 \u0432 Chrome (CVE-2025-2783) \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u0421\u041c\u0418, \u0432\u0443\u0437\u044b \u0438 \u0433\u043e\u0441\u043e\u0440\u0433\u0430\u043d\u044b. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0442 \u0431\u044b\u0441\u0442\u0440\u043e. \u041d\u0435 \u043d\u0430\u0434\u043e \u0436\u0434\u0430\u0442\u044c, \u043f\u043e\u043a\u0430 \u0431\u0443\u0434\u0435\u0442 \u043f\u043e\u0437\u0434\u043d\u043e.\n\n\u0411\u0430\u0433 \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442. \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435\u0441\u044c. \u041f\u0435\u0440\u0435\u0441\u0442\u0430\u043d\u044c\u0442\u0435 \u0436\u0438\u0442\u044c \u043d\u0430 \u0430\u0432\u0442\u043e\u043f\u0438\u043b\u043e\u0442\u0435.\n\nITsec NEWS", "creation_timestamp": "2025-05-15T10:48:39.000000Z"}, {"uuid": "ce8a84af-6e98-46a8-b2b7-2f13452df18c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "published-proof-of-concept", "source": "https://t.me/information_security_channel/53821", "content": "CVE-2025-27636 \u2013 Remote Code Execution in Apache Camel via Case-Sensitive Header Filtering Bypass\nhttps://www.offsec.com/blog/cve-2025-27636/\n\nDiscover the critical Apache Camel vulnerability (CVE-2025-27636) that allows remote code execution via case-sensitive HTTP header manipulation in the exec component. Learn how attackers exploit this flaw and how to mitigate it.\nThe post CVE-2025-27636 \u2013 Remote Code Execution in Apache Camel via Case-Sensitive Header Filtering Bypass (https://www.offsec.com/blog/cve-2025-27636/) appeared first on OffSec (https://www.offsec.com/).", "creation_timestamp": "2025-07-10T17:45:03.000000Z"}, {"uuid": "ab087e9d-cf61-44d0-9486-06397af1b443", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27817", "type": "published-proof-of-concept", "source": "Telegram/zjpS5O5pgCt8maWAaOuHWxccKj7wUs1tT4M9oy_Y1o38DLE", "content": "", "creation_timestamp": "2025-07-04T09:00:05.000000Z"}, {"uuid": "4a80e1c0-43c2-49a2-943a-c026663684dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27817", "type": "published-proof-of-concept", "source": "Telegram/89WmP_gC2SHosMsiUrRK7pT8KuQvaqUcBa2DausPuvIklXc", "content": "", "creation_timestamp": "2025-07-04T15:00:11.000000Z"}, {"uuid": "b5e39d64-7fd9-4993-aa2e-e111bea4e3ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://t.me/itsec_news/5646", "content": "\u200b\u26a1\ufe0f\u041f\u043e\u0447\u0435\u043c\u0443 Firefox \u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0438 \u2014 \u0438 \u043f\u0440\u0438 \u0447\u0451\u043c \u0442\u0443\u0442 \u0432\u0437\u043b\u043e\u043c Chrome\n\n\ud83d\udcacMozilla \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f Firefox, \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0432 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c , \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u0443\u044e \u0442\u043e\u0439, \u0447\u0442\u043e \u0440\u0430\u043d\u0435\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0431\u0440\u0430\u0443\u0437\u0435\u0440 Chrome. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2025-2857 \u0438 \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u0435\u0440\u0441\u0438\u0438 Firefox \u0434\u043b\u044f Windows. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u0443 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0431\u043e\u043b\u0435\u0435 \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c Mozilla, \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e.\n\n\u0418\u043d\u0436\u0435\u043d\u0435\u0440\u044b Firefox \u043d\u0430\u0448\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a Google \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0444\u0430\u043a\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c\u0438 \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u043e\u0433\u043e \u0431\u0430\u0433\u0430 \u0432 Chrome \u2014 CVE-2025-2783 \u2014 \u0434\u043b\u044f \u0432\u044b\u0445\u043e\u0434\u0430 \u0438\u0437 \u0437\u0430\u0449\u0438\u0442\u043d\u043e\u0433\u043e \u0440\u0435\u0436\u0438\u043c\u0430 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430. \u0412 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u043c \u043e\u0442\u0447\u0451\u0442\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438, \u0447\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0441\u044f \u0432 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u043c\u0435\u0434\u0438\u0430 \u0438 \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0439 \u0432 \u0420\u043e\u0441\u0441\u0438\u0438. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0430\u0437\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0445 \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u2014 \u0445\u0430\u043a\u0435\u0440\u044b \u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 \u0430\u043a\u043a\u0443\u0440\u0430\u0442\u043d\u043e, \u043e\u0431\u0445\u043e\u0434\u044f \u0437\u0430\u0449\u0438\u0442\u0443 Chrome \u0442\u0430\u043a, \u043a\u0430\u043a \u0431\u0443\u0434\u0442\u043e \u0435\u0451 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u043e \u0432\u043e\u0432\u0441\u0435.\n\n\u041f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0430 \u2014 \u044d\u0442\u043e \u0432\u0430\u0436\u043d\u044b\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043e\u0442 \u0434\u0440\u0443\u0433\u0438\u0445 \u0447\u0430\u0441\u0442\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0412 \u0434\u0430\u043d\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043e\u043d\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0431\u0435\u0441\u0441\u0438\u043b\u044c\u043d\u0430. \u0421\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u044c, \u0447\u0442\u043e \u0437\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0435\u0439 \u0441\u0442\u043e\u044f\u0442 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b, \u0445\u043e\u0442\u044f \u043f\u0440\u044f\u043c\u043e\u0439 \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0438 \u043a \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u0441\u0442\u0440\u0430\u043d\u0435 \u0441\u0434\u0435\u043b\u0430\u043d\u043e \u043d\u0435 \u0431\u044b\u043b\u043e.\n\n\u0410\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u043e\u0435 \u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0437\u0430\u0449\u0438\u0442\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b (CISA) \u0443\u0436\u0435 \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u043e CVE-2025-2783 \u0432 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u043d\u0443\u0432, \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u0431\u0430\u0433\u0438 \u0447\u0430\u0441\u0442\u043e \u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442\u0441\u044f \u0442\u043e\u0447\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438 \u043d\u0435\u0441\u0443\u0442 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0435 \u0440\u0438\u0441\u043a\u0438 \u0434\u043b\u044f \u0444\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440.\n\n\u042d\u0442\u043e \u0443\u0436\u0435 \u043d\u0435 \u043f\u0435\u0440\u0432\u044b\u0439 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442 \u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0433\u043e \u0440\u043e\u0434\u0430 \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f. \u0412 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 Mozilla \u0443\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0430 \u0434\u0440\u0443\u0433\u0443\u044e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u2014 CVE-2024-9680. \u0422\u043e\u0433\u0434\u0430 \u0431\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043f\u0440\u044f\u043c\u043e \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0432\u0435\u0431-\u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430, \u043f\u0440\u0438\u0447\u0451\u043c \u0431\u0435\u0437 \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u0441 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0443\u0441\u0438\u043b\u0438\u044f\u043c\u0438 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-03-29T06:07:38.000000Z"}, {"uuid": "cea83c26-6d17-499c-8216-81447216bf5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "exploited", "source": "https://t.me/itsec_news/5606", "content": "\u200b\u26a1\ufe0fCVE-2025-2783: \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u0440\u043e\u0431\u0438\u043b\u0438 Chrome \u0447\u0435\u0440\u0435\u0437 \u0444\u0435\u0439\u043b \u0432 Windows\n\n\ud83d\udcac \u0412 \u043c\u0430\u0440\u0442\u0435 2025 \u0433\u043e\u0434\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u00ab\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e\u00bb \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0446\u0435\u043b\u0435\u0432\u0443\u044e \u0430\u0442\u0430\u043a\u0443 \u0441 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0441\u043b\u043e\u0436\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e. \u0420\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u043b\u043e \u0447\u0435\u0440\u0435\u0437 \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u043f\u0438\u0441\u044c\u043c\u0430, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0435 \u0441\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u0430\u0439\u0442\u044b. \u041f\u0440\u0438 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0435 \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Google Chrome \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u043b\u043e \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u2014 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u043e\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043d\u0435 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u043e\u0441\u044c.\n\n\u0412\u0441\u0435 \u0441\u0441\u044b\u043b\u043a\u0438 \u0431\u044b\u043b\u0438 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u0435\u043b\u044f \u0438 \u0438\u043c\u0435\u043b\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u0439 \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f. \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u044d\u0442\u043e, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0432\u044b\u044f\u0432\u0438\u0442\u044c \u0444\u0430\u043a\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Chrome. \u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0434\u043b\u044f \u043f\u043e\u0431\u0435\u0433\u0430 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430.\n\n\u041f\u043e\u0441\u043b\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0438 \u043b\u043e\u0433\u0438\u043a\u0443 \u0435\u0433\u043e \u0440\u0430\u0431\u043e\u0442\u044b \u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438, \u0447\u0442\u043e \u043e\u043d \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044e\u044e \u0432\u0435\u0440\u0441\u0438\u044e Chrome. \u0423\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u0431\u044b\u043b\u043e \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Google, \u043a\u043e\u0442\u043e\u0440\u0430\u044f 25 \u043c\u0430\u0440\u0442\u0430 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0430\u0442\u0447, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-2783 (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432\u043e\u0448\u043b\u043e \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 Chrome 134.0.6998.177/.178).\n\nCVE-2025-2783 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0434\u0435\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0440\u043e\u0432 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Mojo \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Windows. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u0443 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0431\u0435\u0437 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u044f\u0432\u043d\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439, \u043a\u0430\u043a \u0431\u0443\u0434\u0442\u043e \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430 \u0432\u043e\u0432\u0441\u0435. \u041f\u0440\u0438\u0447\u0438\u043d\u043e\u0439 \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u0432\u043e \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0438 \u043c\u0435\u0436\u0434\u0443 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0435\u0439 Chrome \u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439. \u041f\u043e \u043e\u0446\u0435\u043d\u043a\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u044d\u0442\u043e \u043e\u0434\u0438\u043d \u0438\u0437 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u043b\u043e\u0436\u043d\u044b\u0445 \u0438 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f.\n\n\u0426\u0435\u043b\u0435\u0432\u043e\u0439 \u0430\u0442\u0430\u043a\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043b\u0438\u0441\u044c \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u0438 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0435 \u0421\u041c\u0418. \u0412\u0441\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u0438\u0441\u044c\u043c\u0430 \u0431\u044b\u043b\u0438 \u0441\u0442\u0438\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u043f\u043e\u0434 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u0438\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044f \u043d\u0430 \u043c\u0435\u0436\u0434\u0443\u043d\u0430\u0440\u043e\u0434\u043d\u044b\u0439 \u0444\u043e\u0440\u0443\u043c \u00ab\u041f\u0440\u0438\u043c\u0430\u043a\u043e\u0432\u0441\u043a\u0438\u0435 \u0447\u0442\u0435\u043d\u0438\u044f\u00bb \u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043b\u0438 \u0441\u0441\u044b\u043b\u043a\u0438, \u0432\u0435\u0434\u0443\u0449\u0438\u0435 \u043d\u0430 \u0441\u0430\u0439\u0442 \u0441 \u0434\u043e\u043c\u0435\u043d\u043e\u043c, \u0432\u043d\u0435\u0448\u043d\u0435 \u0438\u0434\u0435\u043d\u0442\u0438\u0447\u043d\u044b\u043c \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u2014 primakovreadings[.]info.\n\n\u041d\u0430 \u043c\u043e\u043c\u0435\u043d\u0442 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u0441\u0441\u044b\u043b\u043a\u0430 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0430 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0430\u0439\u0442 \u0444\u043e\u0440\u0443\u043c\u0430, \u043e\u0434\u043d\u0430\u043a\u043e \u043f\u0435\u0440\u0435\u0445\u043e\u0434 \u043f\u043e \u043d\u0435\u0439 \u043e\u0441\u0442\u0430\u0451\u0442\u0441\u044f \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0431\u044b\u043b\u0430 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432. \u041e\u0434\u0438\u043d \u0438\u0437 \u043d\u0438\u0445 \u2014 \u0434\u043b\u044f \u043f\u043e\u0431\u0435\u0433\u0430 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b, \u0432\u0442\u043e\u0440\u043e\u0439 \u2014 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430. \u041f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0432\u0442\u043e\u0440\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043d\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c: \u044d\u0442\u043e \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u043e \u0431\u044b \u0434\u043e\u0436\u0438\u0434\u0430\u0442\u044c\u0441\u044f \u043d\u043e\u0432\u043e\u0439 \u0432\u043e\u043b\u043d\u044b \u0430\u0442\u0430\u043a, \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u044f \u0440\u0438\u0441\u043a\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u041f\u0430\u0442\u0447 \u043e\u0442 Google \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u0435\u0442 \u0432\u0441\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043d\u0430 \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0442\u0430\u0434\u0438\u0438.\n\n\u0410\u0442\u0430\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0435 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u00ab\u0424\u043e\u0440\u0443\u043c\u043d\u044b\u0439 \u0442\u0440\u043e\u043b\u043b\u044c\u00bb. \u0412\u0441\u0435 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u043d\u0430 \u0432\u044b\u0441\u043e\u043a\u043e\u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u043d\u0443\u044e APT -\u0433\u0440\u0443\u043f\u043f\u0443 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0439 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439. \u0425\u0430\u0440\u0430\u043a\u0442\u0435\u0440 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0438 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0439 \u0430\u0442\u0430\u043a\u0438 \u0441\u0432\u0438\u0434\u0435\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0443\u044e\u0442 \u043e \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0438\u0445 \u0446\u0435\u043b\u044f\u0445.\n\n\u0418\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0434\u043e\u043c\u0435\u043d primakovreadings[.]info \u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0434\u0435\u0442\u0435\u043a\u0442\u043e\u0440\u044b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438:\n\nExploit.Win32.Generic\n\nTrojan.Win64.Agent\n\nTrojan.Win64.Convagent.gen\n\nPDM:Exploit.Win32.Generic\n\nPDM:Trojan.Win32.Generic\n\nUDS:DangerousObject.Multi.Generic\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-03-26T10:43:14.000000Z"}, {"uuid": "1c303ffa-4828-4212-9585-e542d902ce54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "published-proof-of-concept", "source": "https://t.me/CyberBulletin/10789", "content": "\u26a1\ufe0fCVE-2025-2775: PoC Released for SysAid On-Premises Pre-Auth RCE Vulnerability.\n\n#CyberBulletin", "creation_timestamp": "2025-05-08T04:32:12.000000Z"}, {"uuid": "b62bff7b-781c-4ba9-acd4-d5ba846b5caa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2774", "type": "seen", "source": "https://t.me/CyberBulletin/10744", "content": "\u26a1\ufe0fCVE-2025-2774: Webmin Vulnerability Allows Root-Level Privilege Escalation.\n\n#CyberBulletin", "creation_timestamp": "2025-05-04T04:40:43.000000Z"}, {"uuid": "9492d37c-c98a-4475-beb7-e43b8f9e621c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27210", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/44466", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-27210\nURL\uff1ahttps://github.com/Sam-2805/cve-analysis-2\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-07-18T12:33:53.000000Z"}, {"uuid": "ad8c5ed8-c074-4634-8e23-c22c80217d48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27210", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/51814", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1a2 web apps vulnerable to CVE-2025-27210\nURL\uff1ahttps://github.com/mindeddu/Vulnerable-CVE-2025-27210\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-09-16T08:30:31.000000Z"}, {"uuid": "99250444-0732-46c3-8f09-dc46977967e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27515", "type": "seen", "source": "Telegram/yPqQ91miaB-2D89EM1FeuaCQM9WzAEZThEuC_Ossz7SbN555", "content": "", "creation_timestamp": "2025-09-11T00:11:51.000000Z"}, {"uuid": "c0d1a234-bf62-4dc0-97c2-f98285f9af22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2746", "type": "seen", "source": "https://t.me/NinjaSec/299", "content": "Code execution, and bypass vulnerabilities \u2014 for educational purposes only:\n\n\n1. CVE-2025-47241 \u2013 Whitelist bypass in Browser Use tool (CVSS 9.3)\n2. CVE-2025-25014 \u2013 Prototype pollution in Kibana (CVSS 9.1)\n3. CVE-2025-29927 \u2013 Next.js middleware authorization bypass (CVSS 9.1)\n4. CVE-2025-24813 \u2013 Apache Tomcat path traversal RCE (Critical)\n5. CVE-2025-2783 \u2013 Chrome Mojo use-after-free (High)\n6. CVE-2025-2636 \u2013 WordPress InstaWP plugin LFI (High)\n7. CVE-2025-2505 \u2013 WordPress Age Gate plugin LFI (High)\n8. CVE-2025-2746 \u2013 Kentico CMS auth bypass (CVSS 9.8)\n9. CVE-2025-2747 \u2013 Kentico CMS staging sync auth bypass (CVSS 9.8)\n10. CVE-2025-3066 \u2013 Chrome Site Isolation use-after-free (High)\n11. CVE-2025-46728 \u2013 cpp-httplib DoS vulnerability\n12. CVE-2025-12345 \u2013 Buffer overflow in XYZ app (CVSS 9.0)\n13. CVE-2025-12346 \u2013 SQL injection in ABC web app (CVSS 8.5)\n14. CVE-2025-12347 \u2013 XSS in DEF platform (CVSS 7.8)\n15. CVE-2025-12348 \u2013 Auth bypass in GHI system (CVSS 9.2)\n16. CVE-2025-12349 \u2013 RCE in JKL service via crafted packets (CVSS 9.5)\n17. CVE-2025-12350 \u2013 Privilege escalation in MNO app (CVSS 8.7)\n18. CVE-2025-12351 \u2013 Info disclosure in PQR system (CVSS 7.5)\n19. CVE-2025-12352 \u2013 DoS in STU server (CVSS 6.8)\n20. CVE-2025-12353 \u2013 Directory traversal in VWX app (CVSS 8.0)\n21. CVE-2025-12354 \u2013 Command injection in YZA tool (CVSS 9.1)\n22. CVE-2025-12355 \u2013 Insecure deserialization in BCD lib (CVSS 9.3)\n23. CVE-2025-12356 \u2013 CSRF in EFG portal (CVSS 7.2)\n24. CVE-2025-12357 \u2013 Memory corruption in HIJ driver (CVSS 8.9)\n25. CVE-2025-12358 \u2013 Improper auth in KLM API (CVSS 9.0)\n\n#HackersFactory", "creation_timestamp": "2025-05-07T15:48:27.000000Z"}, {"uuid": "4fd58a50-2549-4bff-b451-bb7543304f01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2777", "type": "published-proof-of-concept", "source": "https://t.me/cybersecplayground/199", "content": "Nuclei Template : \nhttps://cloud.projectdiscovery.io/library/CVE-2025-2777", "creation_timestamp": "2025-05-11T14:07:50.000000Z"}, {"uuid": "fdb586ec-5413-41bf-9a52-b725d0f425da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "seen", "source": "https://t.me/kasperskylab_ru/6003", "content": "\u0412 \u043d\u043e\u0432\u043e\u043c #kaspersky_securityweek:\n\n\ud83d\udfe3 \u0412 Bluetooth-\u043c\u043e\u0434\u0443\u043b\u0435 ESP32 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Espressif \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u0440\u044f\u0434 \u0441\u043a\u0440\u044b\u0442\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043d\u0430\u0447\u0430\u043b\u0443 \u043f\u0440\u0438\u043d\u044f\u043b\u0438 \u0437\u0430 \u0431\u044d\u043a\u0434\u043e\u0440. \u041e\u043d\u0438 \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u043d\u0430\u0431\u043e\u0440\u043e\u043c vendor-specific commands \u2014 \u0444\u0438\u0447\u0430\u043c\u0438 \u0434\u043b\u044f \u043e\u0431\u043c\u0435\u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u043c\u0435\u0436\u0434\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c \u0438 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u043c \u043c\u043e\u0434\u0443\u043b\u0435\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435\u043b\u044c\u0437\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u00ab\u0441\u043d\u0430\u0440\u0443\u0436\u0438\u00bb. \u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u043e\u0447\u043b\u0438 \u0438\u0445 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u043e\u0439, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043d\u0435\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043a\u043e\u043c\u0430\u043d\u0434\u0430\u043c \u0432 ESP32 \u0431\u044b\u043b \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-27840.\n\n\ud83d\udfe3 \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u00ab\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e\u00bb \u0438\u0437\u0443\u0447\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0435 \u0441\u043b\u0443\u0447\u0430\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u043f\u043e\u0434 \u0432\u0438\u0434\u043e\u043c \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u043e\u0433\u043e. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u0430\u0441\u043a\u0438\u0440\u0443\u044e\u0442 \u0442\u0440\u043e\u044f\u043d\u0441\u043a\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u043f\u043e\u0434 Windows-\u043a\u043b\u0438\u0435\u043d\u0442\u044b \u0434\u043b\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0447\u0430\u0442-\u0431\u043e\u0442\u043e\u0432 DeepSeek \u0438 Grok, \u0430 \u043c\u0430\u0439\u043d\u0435\u0440 SilentCryptoMiner \u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u0432\u043d\u0443\u0442\u0440\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043e\u043a.\n\n\ud83d\udfe3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0430\u0442\u0430\u043a\u0438, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u0438\u0440\u0430\u0442\u0441\u043a\u0438\u0445 \u0441\u0442\u0440\u0438\u043c\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u043e\u0432. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u0440\u0435\u043a\u043b\u0430\u043c\u0430 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u043b\u0430 \u0436\u0435\u0440\u0442\u0432 \u043d\u0430 GitHub \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b, \u0433\u0434\u0435 \u0431\u044b\u043b \u0440\u0430\u0437\u043c\u0435\u0449\u0451\u043d \u0434\u0440\u043e\u043f\u043f\u0435\u0440.", "creation_timestamp": "2025-03-11T15:15:17.000000Z"}, {"uuid": "64dfbdeb-2040-4256-9e64-35c855d2b3a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27558", "type": "published-proof-of-concept", "source": "Telegram/ZQhPX1V8GYQ5EYOevxB04s5FpxIRBluCF7hhQG6fyoTGOeU", "content": "", "creation_timestamp": "2025-06-25T15:00:05.000000Z"}, {"uuid": "9ec5790c-df0f-483a-a237-f987ece1605c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "exploited", "source": "https://t.me/ptescalator/341", "content": "Team46 \u0438 TaxOff: \u0434\u0432\u0435 \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u043e\u0434\u043d\u043e\u0439 \u043c\u0435\u0434\u0430\u043b\u0438 \ud83d\ude11\n\n\u0412 \u043c\u0430\u0440\u0442\u0435 2025 \u0433\u043e\u0434\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b TI-\u0434\u0435\u043f\u0430\u0440\u0442\u0430\u043c\u0435\u043d\u0442\u0430 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043d\u043e\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Positive Technologies (PT Expert Security Center, PT ESC) \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u0438 \u0430\u0442\u0430\u043a\u0443, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0432 \u044d\u0442\u043e \u0436\u0435 \u0432\u0440\u0435\u043c\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f CVE-2025-2783 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0441\u0430\u043c\u0443 \u0430\u0442\u0430\u043a\u0443 \u043e\u043f\u0438\u0441\u0430\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u00ab\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e\u00bb, \u043e\u0434\u043d\u0430\u043a\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u043e\u0441\u0442\u0430\u043b\u0430\u0441\u044c \u0431\u0435\u0437 \u0430\u0442\u0440\u0438\u0431\u0443\u0446\u0438\u0438.\n\n\ud83e\ude9e \u0412 \u043e\u0442\u0447\u0435\u0442\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u0430\u0442\u0440\u0438\u0431\u0443\u0446\u0438\u044f \u0434\u0430\u043d\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043a \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0435 TaxOff, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u0440\u0430\u043d\u0435\u0435. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442\u0441\u044f \u0434\u0430\u043d\u043d\u044b\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0441\u0447\u0438\u0442\u0430\u0442\u044c \u0435\u0449\u0435 \u043e\u0434\u043d\u0443 \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u0443\u044e \u043d\u0430\u043c\u0438 \u0440\u0430\u043d\u0435\u0435 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0443 Team46 \u0438 TaxOff \u043e\u0434\u043d\u043e\u0439 \u0438 \u0442\u043e\u0439 \u0436\u0435 \u0433\u0440\u0443\u043f\u043f\u043e\u0439.\n\n\u041d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u043c \u0432\u0435\u043a\u0442\u043e\u0440\u043e\u043c \u0430\u0442\u0430\u043a\u0438 \u0431\u044b\u043b\u043e \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u043e\u0435 \u043f\u0438\u0441\u044c\u043c\u043e, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0435\u0435 \u0441\u0441\u044b\u043b\u043a\u0443, \u043f\u0440\u0438 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0435 \u043f\u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0436\u0435\u0440\u0442\u0432\u0430 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043b\u0430 one-click exploit, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u0439 \u043a \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0431\u044d\u043a\u0434\u043e\u0440\u0430 Trinper \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 TaxOff \u0432 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0412 \u044d\u0442\u043e\u0439 \u0430\u0442\u0430\u043a\u0435 \u0431\u044b\u043b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u0431\u044d\u043a\u0434\u043e\u0440 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 Team46.\n\n\u0413\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 Team46 \u0431\u044b\u043b\u0430 \u0440\u0430\u043d\u0435\u0435 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u0430 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 DLL-Hijacking \u0434\u043b\u044f \u042f\u043d\u0434\u0435\u043a\u0441 \u0411\u0440\u0430\u0443\u0437\u0435\u0440\u0430 (CVE-2024-6473).\n\n\ud83d\udcd6 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 \u0447\u0438\u0442\u0430\u0439\u0442\u0435 \u043d\u0430 \u043d\u0430\u0448\u0435\u043c \u0441\u0430\u0439\u0442\u0435.\n\n#TI #APT #cve\n@ptescalator", "creation_timestamp": "2025-04-18T10:08:08.000000Z"}, {"uuid": "6dcafdb7-97b8-40db-bfd9-e5cbe0067722", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27480", "type": "seen", "source": "https://t.me/cyberbannews_ir/16404", "content": "\u2b55\u0647\u0634\u062f\u0627\u0631 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a: \u062f\u0648 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc Critical RCE \u062f\u0631 \u0633\u0631\u0648\u06cc\u0633 Remote Desktop\n\n\ud83d\udd3a\u0627\u062e\u06cc\u0631\u0627\u064b \u062f\u0648 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u0627\u0632 \u0646\u0648\u0639 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 (RCE) \u062f\u0631 \u0633\u0631\u0648\u06cc\u0633\u200c\u0647\u0627\u06cc Windows Remote Desktop \u06a9\u0634\u0641 \u0634\u062f\u0647 \u06a9\u0647 \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 \u0647\u0627\u06cc CVE-2025-27480 \u0648 CVE-2025-27482 \u062b\u0628\u062a \u0634\u062f\u0647\u200c\u0627\u0646\u062f. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u0646\u062f \u0628\u062f\u0648\u0646 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a\u060c \u06a9\u0646\u062a\u0631\u0644 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0631\u0627 \u062f\u0631 \u062f\u0633\u062a \u0628\u06af\u06cc\u0631\u0646\u062f \u0648 \u06a9\u062f\u0647\u0627\u06cc \u0645\u062e\u0631\u0628 \u0631\u0627 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0627\u062c\u0631\u0627 \u06a9\u0646\u0646\u062f.\n\n\u2b55\ufe0f \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0628\u0647 \u062f\u0644\u06cc\u0644 \u0645\u0627\u0647\u06cc\u062a \u0628\u062f\u0648\u0646 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a\u060c \u062a\u0647\u062f\u06cc\u062f\u06cc \u062c\u062f\u06cc \u0628\u0631\u0627\u06cc \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627 \u0648 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0645\u062d\u0633\u0648\u0628 \u0645\u06cc\u200c\u0634\u0648\u0646\u062f. \u063a\u0641\u0644\u062a \u0627\u0632 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0645\u0646\u062c\u0631 \u0628\u0647 \u0646\u0641\u0648\u0630 \u06af\u0633\u062a\u0631\u062f\u0647\u060c \u0633\u0631\u0642\u062a \u062f\u0627\u062f\u0647\u200c\u0647\u0627 \u06cc\u0627 \u0627\u062e\u062a\u0644\u0627\u0644 \u062f\u0631 \u0633\u0631\u0648\u06cc\u0633\u200c\u0647\u0627 \u0634\u0648\u062f. \u062d\u062a\u0645\u0627\u064b \u062f\u0631 \u0627\u0633\u0631\u0639 \u0648\u0642\u062a \u0686\u0631\u062e\u0647 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0648\u0635\u0644\u0647\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc (Patch Management) \u0631\u0627 \u0641\u0639\u0627\u0644 \u06a9\u0646\u06cc\u062f!\n\n#\u0622\u0633\u06cc\u0628_\u067e\u0630\u06cc\u0631\u06cc #\u0627\u062e\u062a\u0644\u0627\u0644 #\u0633\u0631\u0642\u062a_\u062f\u0627\u062f\u0647 #\u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a #\u0647\u06a9\n\n\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\n\ud83d\udd39\ud83d\udd39 @cyberbannews_ir", "creation_timestamp": "2025-04-22T12:45:18.000000Z"}, {"uuid": "4640545f-8592-4514-9236-6aeb729757a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27580", "type": "seen", "source": "Telegram/0HYLGhUKfOaz0jB50dGhU2fq-G_e7X2GSHNTYyogkSMsgQo", "content": "", "creation_timestamp": "2025-06-06T21:00:09.000000Z"}, {"uuid": "3aac62b8-8236-481d-af2b-4806fa3f9aef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27482", "type": "seen", "source": "https://t.me/cyberbannews_ir/16404", "content": "\u2b55\u0647\u0634\u062f\u0627\u0631 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a: \u062f\u0648 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc Critical RCE \u062f\u0631 \u0633\u0631\u0648\u06cc\u0633 Remote Desktop\n\n\ud83d\udd3a\u0627\u062e\u06cc\u0631\u0627\u064b \u062f\u0648 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u0627\u0632 \u0646\u0648\u0639 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 (RCE) \u062f\u0631 \u0633\u0631\u0648\u06cc\u0633\u200c\u0647\u0627\u06cc Windows Remote Desktop \u06a9\u0634\u0641 \u0634\u062f\u0647 \u06a9\u0647 \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 \u0647\u0627\u06cc CVE-2025-27480 \u0648 CVE-2025-27482 \u062b\u0628\u062a \u0634\u062f\u0647\u200c\u0627\u0646\u062f. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u0646\u062f \u0628\u062f\u0648\u0646 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a\u060c \u06a9\u0646\u062a\u0631\u0644 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0631\u0627 \u062f\u0631 \u062f\u0633\u062a \u0628\u06af\u06cc\u0631\u0646\u062f \u0648 \u06a9\u062f\u0647\u0627\u06cc \u0645\u062e\u0631\u0628 \u0631\u0627 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0627\u062c\u0631\u0627 \u06a9\u0646\u0646\u062f.\n\n\u2b55\ufe0f \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0628\u0647 \u062f\u0644\u06cc\u0644 \u0645\u0627\u0647\u06cc\u062a \u0628\u062f\u0648\u0646 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a\u060c \u062a\u0647\u062f\u06cc\u062f\u06cc \u062c\u062f\u06cc \u0628\u0631\u0627\u06cc \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627 \u0648 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0645\u062d\u0633\u0648\u0628 \u0645\u06cc\u200c\u0634\u0648\u0646\u062f. \u063a\u0641\u0644\u062a \u0627\u0632 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0645\u0646\u062c\u0631 \u0628\u0647 \u0646\u0641\u0648\u0630 \u06af\u0633\u062a\u0631\u062f\u0647\u060c \u0633\u0631\u0642\u062a \u062f\u0627\u062f\u0647\u200c\u0647\u0627 \u06cc\u0627 \u0627\u062e\u062a\u0644\u0627\u0644 \u062f\u0631 \u0633\u0631\u0648\u06cc\u0633\u200c\u0647\u0627 \u0634\u0648\u062f. \u062d\u062a\u0645\u0627\u064b \u062f\u0631 \u0627\u0633\u0631\u0639 \u0648\u0642\u062a \u0686\u0631\u062e\u0647 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0648\u0635\u0644\u0647\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc (Patch Management) \u0631\u0627 \u0641\u0639\u0627\u0644 \u06a9\u0646\u06cc\u062f!\n\n#\u0622\u0633\u06cc\u0628_\u067e\u0630\u06cc\u0631\u06cc #\u0627\u062e\u062a\u0644\u0627\u0644 #\u0633\u0631\u0642\u062a_\u062f\u0627\u062f\u0647 #\u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a #\u0647\u06a9\n\n\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\n\ud83d\udd39\ud83d\udd39 @cyberbannews_ir", "creation_timestamp": "2025-04-22T12:45:18.000000Z"}, {"uuid": "76a083fe-08d7-45e0-91c1-18c25d33f605", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27038", "type": "exploited", "source": "https://t.me/cyberbannews_ir/16950", "content": "\ud83e\ude99 \u0628\u0631\u0637\u0631\u0641 \u0634\u062f\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0631\u0648\u0632\u0635\u0641\u0631 \u06a9\u0648\u0627\u0644\u06a9\u0627\u0645\n\n\ud83d\udd3a\u0634\u0631\u06a9\u062a \u06a9\u0648\u0627\u0644\u06a9\u0627\u0645 (Qualcomm) \u067e\u0686\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0631\u0627 \u0628\u0631\u0627\u06cc 3 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0648\u0632 \u0635\u0641\u0631 \u062f\u0631 \u062f\u0631\u0627\u06cc\u0648\u0631 \u0648\u0627\u062d\u062f \u067e\u0631\u062f\u0627\u0632\u0634 \u06af\u0631\u0627\u0641\u06cc\u06a9\u06cc (GPU) \u0622\u062f\u0631\u0646\u0648 \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f \u06a9\u0647 \u062f\u0647\u200c\u0647\u0627 \u0686\u06cc\u067e\u0633\u062a \u0631\u0627 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u0646\u062f \u0648 \u0628\u0647\u200c\u0637\u0648\u0631 \u0641\u0639\u0627\u0644 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0647\u062f\u0641\u0645\u0646\u062f \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u06af\u06cc\u0631\u0646\u062f.\n\n\ud83d\udd3b\u0627\u06cc\u0646 \u0634\u0631\u06a9\u062a \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f \u06a9\u0647 2 \u0646\u0642\u0635 \u0628\u062d\u0631\u0627\u0646\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647\u200c\u0647\u0627\u06cc \u00abCVE-2025-21479\u00bb \u0648 \u00abCVE-2025-21480\u00bb \u0627\u0648\u0627\u062e\u0631 \u0698\u0627\u0646\u0648\u06cc\u0647 \u06af\u0630\u0634\u062a\u0647 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u062a\u06cc\u0645 \u0627\u0645\u0646\u06cc\u062a \u0627\u0646\u062f\u0631\u0648\u06cc\u062f \u06af\u0648\u06af\u0644 \u06af\u0632\u0627\u0631\u0634 \u0634\u062f\u0646\u062f \u0648 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0634\u062f\u062a \u0628\u0627\u0644\u0627 \u00abCVE-2025-27038\u00bb \u062f\u0631 \u0645\u0627\u0647 \u0645\u0627\u0631\u0633 \u0627\u0645\u0633\u0627\u0644 \u06af\u0632\u0627\u0631\u0634 \u0634\u062f.\n\n\u2764\ufe0f \u06af\u0632\u0627\u0631\u0634 \u06a9\u0627\u0645\u0644\n\n#\u0627\u0645\u0646\u06cc\u062a_\u0633\u0627\u06cc\u0628\u0631\u06cc #\u0631\u0648\u0632_\u0635\u0641\u0631 #\u062a\u0647\u062f\u06cc\u062f_\u0633\u0627\u06cc\u0628\u0631\u06cc #\u0622\u0633\u06cc\u0628_\u067e\u0630\u06cc\u0631\u06cc #\u062a\u0631\u0627\u0634\u0647\n\n\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\n\ud83d\udd39\ud83d\udd39 @cyberbannews_ir", "creation_timestamp": "2025-06-04T08:04:44.000000Z"}, {"uuid": "0137e00b-a3f8-4cae-a470-a2c58b674024", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "published-proof-of-concept", "source": "Telegram/mhw-Fb7V0TI2S7erfI6zzwc3-EpxErsGm94DK7PXQIjbk2U", "content": "", "creation_timestamp": "2025-06-16T03:00:06.000000Z"}, {"uuid": "add67ed7-6174-4ed7-8c61-df7b4d55ca46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27387", "type": "published-proof-of-concept", "source": "Telegram/G_Dm1H2yMsUWi0B2hrQwSaQ-hj0W8UNWimUdimX7TtAl1LE", "content": "", "creation_timestamp": "2025-06-23T10:03:28.000000Z"}, {"uuid": "cd92888f-fb71-4faa-82d7-ce1c22b22661", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27580", "type": "published-proof-of-concept", "source": "Telegram/qoq8gL3XX5UbnTPnnKQ1Em6OVDYVUdjE8vvAbgQVpdGtopE", "content": "", "creation_timestamp": "2025-06-07T07:00:06.000000Z"}, {"uuid": "e4e6cc64-ad5a-4dab-8755-6f24e60acfe6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27152", "type": "published-proof-of-concept", "source": "Telegram/t2mOu0CqYZ5qLLxESiGoH_sUvRUlHAHlqkD_UKh-Uep6sL0", "content": "", "creation_timestamp": "2025-06-07T03:00:07.000000Z"}, {"uuid": "eb3eedc6-c726-4886-b653-d279c6f9d526", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/13962", "content": "Google Chrome Zero-Day CVE-2025-2783 Exploited by TaxOff to Deploy Trinper Backdoor \u2013 thehackernews.com\n\nWed, 18 Jun 2025 03:16:00", "creation_timestamp": "2025-06-17T20:04:23.000000Z"}, {"uuid": "951bf3f3-0ba5-48df-a707-45435ff7350e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "exploited", "source": "https://t.me/cibsecurity/85403", "content": "\ud83d\udd8b\ufe0f Google Chrome Zero-Day CVE-2025-2783 Exploited by TaxOff to Deploy Trinper Backdoor \ud83d\udd8b\ufe0f\n\nA nowpatched security flaw in Google Chrome was exploited as a zeroday by a threat actor known as TaxOff to deploy a backdoor codenamed Trinper. The attack, observed in midMarch 2025 by Positive Technologies, involved the use of a sandbox escape vulnerability tracked as CVE20252783 CVSS score 8.3. Google addressed the flaw later that month after Kaspersky reported inthewild.\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"The Hacker News\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "creation_timestamp": "2025-06-18T02:33:02.000000Z"}, {"uuid": "bda0c244-4e09-4b5a-a0d7-851475b6ab21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://t.me/true_secator/7148", "content": "\u041f\u043e\u0434\u043a\u0430\u0442\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 FreeType, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-27363.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0434\u0430\u043d\u043d\u044b\u043c WhatsApp, \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0438\u0439 Meta (\u043f\u0440\u0438\u0437\u043d\u0430\u043d\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043c\u0438\u0441\u0442\u0441\u043a\u043e\u0439), \u043d\u0435\u0434\u0430\u0432\u043d\u044f\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c FreeType, \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u043d\u0430\u044f \u043d\u0430 \u043c\u043e\u043c\u0435\u043d\u0442 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043a\u0430\u043a \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f, \u0431\u044b\u043b\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u043c \u0438\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u043e\u0439 Paragon.\n\n\u0412 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 \u043c\u0430\u0440\u0442\u0430 Meta \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044e, \u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u0443\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e\u00a0CVE-2025-27363\u00a0- \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c FreeType, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0433\u043b\u0430 \u0431\u044b\u0442\u044c\u00a0\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\u0412 \u043d\u0430\u0447\u0430\u043b\u0435 \u043c\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u00a0\u0432 Android \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0438 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 CISA \u0432\u00a0\u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043d\u0438\u043a\u0430\u043a\u043e\u0439 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c CVE-2025-27363 \u043d\u0435 \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u043b\u043e.\n\n\u041d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0447\u0442\u043e \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2025-27363 \u0431\u044b\u043b \u0437\u0430\u043f\u0440\u043e\u0448\u0435\u043d \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 WhatsApp \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u043c Paragon.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430 Citizen Lab \u0432 \u043c\u0430\u0440\u0442\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0430, \u0447\u0442\u043e\u00a00-day WhatsApp\u00a0\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e Paragon.\n\n\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 WhatsApp \u0442\u043e\u0433\u0434\u0430 \u043e\u0442\u043c\u0435\u0447\u0430\u043b\u0438, \u0447\u0442\u043e 0-day \u0430\u0442\u0430\u043a\u0438 \u0432\u043a\u043b\u044e\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0433\u0440\u0443\u043f\u043f \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 PDF-\u0444\u0430\u0439\u043b\u043e\u0432, \u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0430.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c CVE-2025-27363 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u0445\u043e\u0434\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u043a\u0430\u043d\u0430\u043b\u043e\u0432 (\u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 WhatsApp), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438-\u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e, \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e.\n\n\u0412 WhatsApp \u0437\u0430\u044f\u0432\u0438\u043b\u0438, \u0447\u0442\u043e \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0438\u0441\u044c \u0441\u0432\u043e\u0438\u043c\u0438 \u0432\u044b\u0432\u043e\u0434\u0430\u043c\u0438 \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0446\u0438\u0438 \u043e\u0431\u0449\u0438\u0445 \u0443\u0441\u0438\u043b\u0438\u0439 \u043f\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u0437\u0430\u0449\u0438\u0442\u044b \u0432 \u043e\u0442\u0440\u0430\u0441\u043b\u0438.\n\nFreeType - \u044d\u0442\u043e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u0430\u044f \u0434\u043b\u044f \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433\u0430 \u0442\u0435\u043a\u0441\u0442\u0430 \u043d\u0430 \u0440\u0430\u0441\u0442\u0440\u043e\u0432\u044b\u0445 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 \u0434\u0440\u0443\u0433\u0438\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441\u043e \u0448\u0440\u0438\u0444\u0442\u0430\u043c\u0438.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 CVE-2025-27363, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 FreeType 2.13.0 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438, Meta \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u043f\u0440\u0438 \u043f\u043e\u043f\u044b\u0442\u043a\u0435 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0441\u0443\u0431\u0433\u043b\u0438\u0444\u043e\u0432 \u0448\u0440\u0438\u0444\u0442\u0430, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 TrueType GX \u0438 \u0444\u0430\u0439\u043b\u0430\u043c\u0438 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0448\u0440\u0438\u0444\u0442\u043e\u0432.\u00a0\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u043a\u043e\u0434 \u043f\u0440\u0438\u0441\u0432\u0430\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u0440\u043e\u0442\u043a\u043e\u0435 \u0437\u043d\u0430\u043a\u043e\u0432\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0434\u043b\u0438\u043d\u043d\u043e\u043c\u0443 \u0431\u0435\u0437\u0437\u043d\u0430\u043a\u043e\u0432\u043e\u043c\u0443 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044e, \u0430 \u0437\u0430\u0442\u0435\u043c \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435, \u0437\u0430\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u0435\u0433\u043e \u043f\u0435\u0440\u0435\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u0438 \u0432\u044b\u0434\u0435\u043b\u044f\u0442\u044c \u0441\u043b\u0438\u0448\u043a\u043e\u043c \u043c\u0430\u043b\u0435\u043d\u044c\u043a\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438.\n\n\u0417\u0430\u0442\u0435\u043c \u043a\u043e\u0434 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u0434\u043e 6 \u0434\u043b\u0438\u043d\u043d\u044b\u0445 \u0437\u043d\u0430\u043a\u043e\u0432\u044b\u0445 \u0446\u0435\u043b\u044b\u0445 \u0447\u0438\u0441\u0435\u043b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u044d\u0442\u043e\u0433\u043e \u0431\u0443\u0444\u0435\u0440\u0430, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\nParagon \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u043d\u0438\u043a\u0430\u043a\u043e\u0433\u043e \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0430 \u0435\u0435 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0435 \u041f\u041e Graphite Paragon \u0432 \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0431\u044b\u043b\u043e \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043e \u0432 \u0410\u0432\u0441\u0442\u0440\u0430\u043b\u0438\u0438, \u041a\u0430\u043d\u0430\u0434\u0435, \u0414\u0430\u043d\u0438\u0438, \u0418\u0442\u0430\u043b\u0438\u0438, \u041a\u0438\u043f\u0440\u0435, \u0421\u0438\u043d\u0433\u0430\u043f\u0443\u0440\u0435 \u0438 \u0418\u0437\u0440\u0430\u0438\u043b\u0435.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0434\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438\u00a0\u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0433\u043b\u0430 \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u0442\u044c \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 iPhone. \n\n\u041f\u0440\u0430\u0432\u0434\u0430, \u0441 \u0442\u0435\u0445 \u043f\u043e\u0440, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430, \u043a\u0430\u043a \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0438 \u0441 CVE-2025-27363.\n\n\u041d\u043e \u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c \u043f\u0440\u043e\u0439\u0434\u0435\u0442 \u043d\u0435 \u043c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438, \u043f\u0440\u0435\u0436\u0434\u0435 \u0447\u0435\u043c \u0432 Paragon \u0441\u043c\u043e\u0433\u0443\u0442 \u0432\u043e\u043e\u0440\u0443\u0436\u0438\u0442\u044c\u0441\u044f \u043d\u043e\u0432\u044b\u043c\u0438 \u043d\u0443\u043b\u044f\u043c\u0438, \u0442\u0435\u043c \u0431\u043e\u043b\u0435\u0435, \u0447\u0442\u043e \u043e\u0431\u043e\u0440\u043e\u0442\u043a\u0438 \u0437\u0430\u043c\u0435\u0442\u043d\u043e \u043f\u0440\u0438\u0431\u0430\u0432\u0438\u043b\u043e\u0441\u044c \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u043e\u0441\u043b\u0435 \u0444\u0438\u043d\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430.", "creation_timestamp": "2025-06-20T13:47:00.000000Z"}, {"uuid": "8b41f843-fdc8-4c4d-9fc7-6d1ae1926674", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "exploited", "source": "https://t.me/thehackernews/7014", "content": "\ud83d\udea8 A Chrome zero-day (CVE-2025-2783) was used in a live attack to drop a stealthy backdoor.\n\nThe hacker group TaxOff tricked targets with fake forum invites\u2014one click, full compromise.\n\nHere\u2019s how the Trinper malware quietly hijacked systems \u2193 https://thehackernews.com/2025/06/google-chrome-zero-day-cve-2025-2783.html", "creation_timestamp": "2025-06-17T19:18:36.000000Z"}, {"uuid": "3e2b0309-5194-4587-ae8a-e90efa3bd374", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "exploited", "source": "https://t.me/true_secator/7141", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Positive Technologies \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u0430\u0442\u0430\u043a TaxOff, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 0-day \u0432 Google Chrome, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043f\u043e\u0441\u043b\u0435 \u0435\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0435\u0439 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0435\u0435 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0445\u043e\u0434\u0435 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438  \u00ab\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u044f ForumTroll\u00bb.\n\n\u0410\u0442\u0430\u043a\u0430, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u041f\u043e\u0437\u0438\u0442\u0438\u0432\u0430\u043c\u0438 \u0432 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 \u043c\u0430\u0440\u0442\u0430 2025 \u0433\u043e\u0434\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0445\u043e\u0434\u0430 \u0438\u0437 \u00ab\u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b\u00bb, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u043a\u0430\u043a CVE-2025-2783 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS: 8,3.\n\n\u041f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u043c \u0432\u0435\u043a\u0442\u043e\u0440\u043e\u043c \u0430\u0442\u0430\u043a\u0438 \u0432\u044b\u0441\u0442\u0443\u043f\u0430\u0435\u0442 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u043e\u0435 \u043f\u0438\u0441\u044c\u043c\u043e \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u043e\u0439.\n\n\u041f\u0440\u0438 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0435 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043b\u0441\u044f Zero-Click \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 (CVE-2025-2783), \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043b\u043e \u043a \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0431\u044d\u043a\u0434\u043e\u0440\u0430 Trinper, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e TaxOff.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u043e\u0435 \u043f\u0438\u0441\u044c\u043c\u043e \u0431\u044b\u043b\u043e \u0437\u0430\u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u043f\u043e\u0434 \u043f\u0440\u0438\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u0435 \u043d\u0430 \u0444\u043e\u0440\u0443\u043c \u00ab\u041f\u0440\u0438\u043c\u0430\u043a\u043e\u0432\u0441\u043a\u0438\u0435 \u0447\u0442\u0435\u043d\u0438\u044f\u00bb (\u0442\u0430 \u0436\u0435 \u043f\u0440\u0438\u043c\u0430\u043d\u043a\u0430, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u044b), \u043f\u0440\u0438\u0437\u044b\u0432\u0430\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0430\u0436\u0430\u0442\u044c \u043d\u0430 \u0441\u0441\u044b\u043b\u043a\u0443, \u0432\u0435\u0434\u0443\u0449\u0443\u044e \u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u043b\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442.\n\nTaxOff \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0431\u044b\u043b\u0430 \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u041f\u043e\u0437\u0438\u0442\u0438\u0432\u0430\u043c\u0438 \u0432 \u043a\u043e\u043d\u0446\u0435 \u043d\u043e\u044f\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430 \u043a\u0430\u043a \u0433\u0440\u0443\u043f\u043f\u0430, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u0430\u044f \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u043f\u0438\u0441\u0435\u043c \u044e\u0440\u0438\u0434\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0438 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u043e\u0433\u043e \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u0430 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e Trinper.\n\n\u041d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 C++, \u0431\u044d\u043a\u0434\u043e\u0440 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043c\u043d\u043e\u0433\u043e\u043f\u043e\u0442\u043e\u0447\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0445\u043e\u0441\u0442\u0435 \u0436\u0435\u0440\u0442\u0432\u044b, \u0437\u0430\u043f\u0438\u0441\u0438 \u043d\u0430\u0436\u0430\u0442\u0438\u0439 \u043a\u043b\u0430\u0432\u0438\u0448, \u0441\u0431\u043e\u0440\u0430 \u0444\u0430\u0439\u043b\u043e\u0432 c \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u043cb \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f\u043cb (.doc, .xls, .ppt, .rtf \u0438 .pdf), \u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0441 C2 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0438 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u0432 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f.\n\n\u0418\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0435 \u0441 C2, \u0440\u0430\u0441\u0448\u0438\u0440\u044f\u044e\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0435\u043c\u0443 \u0447\u0438\u0442\u0430\u0442\u044c/\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e cmd.exe, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043e\u0431\u0440\u0430\u0442\u043d\u0443\u044e \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0443 \u0438 \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u041f\u043e\u0437\u0438\u0442\u0438\u0432\u044b, \u043c\u043d\u043e\u0433\u043e\u043f\u043e\u0442\u043e\u0447\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0432\u044b\u0441\u043e\u043a\u0443\u044e \u0441\u0442\u0435\u043f\u0435\u043d\u044c \u043f\u0430\u0440\u0430\u043b\u043b\u0435\u043b\u0438\u0437\u043c\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0441\u043a\u0440\u044b\u0442\u044c \u0431\u044d\u043a\u0434\u043e\u0440, \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u044f \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c \u0438 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435, \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043c\u043e\u0434\u0443\u043b\u0438 \u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c \u0441\u0432\u044f\u0437\u044c \u0441 C2.\n\n\u0420\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043c\u0430\u0440\u0442\u043e\u0432\u0441\u043a\u043e\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430 \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044e \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438, \u0434\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u043e\u0439 \u043e\u043a\u0442\u044f\u0431\u0440\u0435\u043c 2024, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c \u0441 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u043e\u0433\u043e \u043f\u0438\u0441\u044c\u043c\u0430 \u0441 \u0444\u0435\u0439\u043a\u043e\u0432\u044b\u043c \u043f\u0440\u0438\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u0435\u043c \u043d\u0430 \u043c\u0435\u0436\u0434\u0443\u043d\u0430\u0440\u043e\u0434\u043d\u0443\u044e \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u044e \u00ab\u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0421\u043e\u044e\u0437\u043d\u043e\u0433\u043e \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0430 \u0432 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u043c \u043c\u0438\u0440\u0435\u00bb.\n\n\u0412 \u044d\u0442\u043e\u043c \u043f\u0438\u0441\u044c\u043c\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043b\u0430\u0441\u044c \u0441\u0441\u044b\u043b\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u043b\u0430 \u0444\u0430\u0439\u043b \u0430\u0440\u0445\u0438\u0432\u0430 ZIP \u0441 \u044f\u0440\u043b\u044b\u043a\u043e\u043c Windows, \u043a\u043e\u0442\u043e\u0440\u044b\u0439, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u043b \u043a\u043e\u043c\u0430\u043d\u0434\u0443 PowerShell, \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0430\u044f \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442-\u043f\u0440\u0438\u043c\u0430\u043d\u043a\u0443 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044f \u0431\u044d\u043a\u0434\u043e\u0440 Trinper \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430\u00a0Donut\u00a0\u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0440\u0430\u0437\u043d\u043e\u0432\u0438\u0434\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u043c\u0435\u043d\u044f\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a Donut \u043d\u0430 Cobalt Strike.\n\n\u0414\u0430\u043d\u043d\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u0430\u0442\u0430\u043a \u0438\u043c\u0435\u0435\u0442 \u0440\u044f\u0434 \u0442\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0445\u043e\u0434\u0441\u0442\u0432 \u0441 killchain \u0434\u0440\u0443\u0433\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u044b, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u043a\u0430\u043a\u00a0Team46, \u0447\u0442\u043e \u043f\u043e\u0432\u044b\u0448\u0430\u0435\u0442 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u044d\u0442\u0438 \u0434\u0432\u0430 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430 \u0443\u0433\u0440\u043e\u0437 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043e\u0434\u043d\u0438\u043c \u0438 \u0442\u0435\u043c \u0436\u0435 \u0441\u0443\u0431\u044a\u0435\u043a\u0442\u043e\u043c.\n\n\u041f\u0440\u0438\u0447\u0435\u043c, \u0434\u0440\u0443\u0433\u0430\u044f \u0441\u0435\u0440\u0438\u044f \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u043f\u0438\u0441\u0435\u043c, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 Team46 \u043c\u0435\u0441\u044f\u0446\u0435\u043c \u0440\u0430\u043d\u0435\u0435, \u0431\u044b\u043b\u0430 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u0430 \u044f\u043a\u043e\u0431\u044b \u043e\u0442 \u0420\u043e\u0441\u0442\u0435\u043b\u0435\u043a\u043e\u043c\u0430, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u0435\u043b\u0435\u0439 \u043e \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u044b\u0445 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f\u0445 \u0438\u0437-\u0437\u0430 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443.\n\n\u0412 \u043f\u0438\u0441\u044c\u043c\u0430\u0445 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043b\u0441\u044f ZIP-\u0430\u0440\u0445\u0438\u0432, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u044b\u043b \u0432\u0441\u0442\u0440\u043e\u0435\u043d \u044f\u0440\u043b\u044b\u043a, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0432\u0448\u0438\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 PowerShell \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u043d\u0435\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u0432 \u0445\u043e\u0434\u0435 \u0430\u0442\u0430\u043a\u0438, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u043d\u0435\u043d\u0430\u0437\u0432\u0430\u043d\u043d\u0443\u044e \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0443\u044e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044e \u0432 \u0441\u0444\u0435\u0440\u0435 \u0416/\u0414-\u0433\u0440\u0443\u0437\u043e\u043f\u0435\u0440\u0435\u0432\u043e\u0437\u043e\u043a.\n\n\u042d\u0442\u0430 \u0433\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 0-day \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0435\u0439 \u0431\u043e\u043b\u0435\u0435 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e \u043f\u0440\u043e\u043d\u0438\u043a\u0430\u0442\u044c \u0432 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b.\n\n\u0413\u0440\u0443\u043f\u043f\u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0441\u043b\u043e\u0436\u043d\u043e\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e, \u043f\u0440\u0435\u0441\u043b\u0435\u0434\u0443\u044f \u0434\u043e\u043b\u0433\u043e\u0441\u0440\u043e\u0447\u043d\u0443\u044e \u0441\u0442\u0440\u0430\u0442\u0435\u0433\u0438\u044e \u0438 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u044f \u0443\u0441\u0442\u043e\u0439\u0447\u0438\u0432\u043e\u0441\u0442\u044c \u0432 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445.", "creation_timestamp": "2025-06-18T18:32:49.000000Z"}, {"uuid": "dab58e59-a070-4ee0-90d5-c0c7ac2e7e38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27752", "type": "seen", "source": "https://t.me/kasperskyb2b/1694", "content": "\ud83d\udd2c \u0410\u043f\u0440\u0435\u043b\u044c\u0441\u043a\u0438\u0439 Patch Tuesday: \u043b\u0443\u0447\u0448\u0435\u0435, \u043a\u043e\u043d\u0435\u0447\u043d\u043e, \u0432\u043f\u0435\u0440\u0435\u0434\u0438!\n\nMicrosoft \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043a\u0440\u0443\u043f\u043d\u044b\u0439 \u043f\u0430\u043a\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0432 134 \u0434\u0435\u0444\u0435\u043a\u0442\u0430 (\u0438\u0437 \u043d\u0438\u0445 10 \u2014 \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445). \u041e\u0434\u043d\u0430 \u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0437\u0438\u0440\u043e\u0434\u0435\u0435\u043c, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u043c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 ransomware, \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0435\u0444\u0435\u043a\u0442\u044b \u0440\u0430\u043d\u0435\u0435 \u043d\u0435 \u0431\u044b\u043b\u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b. \u041d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u043e\u0439 \u043d\u043e\u0432\u0438\u043d\u043a\u043e\u0439 \u044d\u0442\u043e\u0433\u043e \u0432\u0442\u043e\u0440\u043d\u0438\u043a\u0430 \u0441\u0442\u0430\u043b\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f Windows 11, \u0434\u043b\u044f \u043c\u043d\u043e\u0433\u0438\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u0443\u043a\u0430\u0437\u0430\u043d\u043e, \u0447\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Windows 10 \u0431\u0443\u0434\u0443\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u00ab\u043f\u043e\u0437\u0436\u0435\u00bb.  \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Microsoft \u0434\u0430\u043b\u0430 \u0434\u043b\u044f \u043c\u043d\u043e\u0433\u0438\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u043e\u0446\u0435\u043d\u043a\u0443 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u043e\u0442 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u0430 CVSS3.1. \u0412\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0431\u043e\u043b\u044c\u0448\u0435 \u0447\u0435\u043c \u0432 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u0432\u0442\u043e\u0440\u043d\u0438\u043a\u0430\u0445 \u0441\u0434\u0435\u043b\u0430\u043d\u0430 \u043f\u043e\u043f\u0440\u0430\u0432\u043a\u0430 \u043d\u0430 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043b\u0438\u0448\u044c 11 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043e\u0446\u0435\u043d\u043a\u0443 critical, 2 \u2014 low, \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u2014 important. 49 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, 31 \u2014 \u043a RCE, 17 \u2014 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, 14 \u2014 \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438, 9 \u2014 \u043e\u0431\u0445\u043e\u0434\u0443 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, 3 \u2014  spoofing.\n\n\n\u0417\u0438\u0440\u043e\u0434\u0435\u0439 \u043d\u0430 \u0441\u043b\u0443\u0436\u0431\u0435 RansomEXX\nCVE-2025-29824 (7.8) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 use after free \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 CLFS \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e system.  \n\u0414\u0435\u0444\u0435\u043a\u0442\u043e\u043c \u043f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0441\u0430\u043c\u043e\u0439 Microsoft \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0438 RansomEXX/Storm-2460, \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u044f \u043d\u0430 \u043f\u043e\u0440\u0430\u0436\u0451\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0431\u044d\u043a\u0434\u043e\u0440 PipeMagic \u0438 \u043f\u043e\u0432\u044b\u0448\u0430\u044f \u0435\u0433\u043e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u0412\u043f\u0440\u043e\u0447\u0435\u043c, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u0432\u0438\u0434\u0438\u0442 \u043d\u0435\u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0446\u0435\u043b\u0435\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438. \u041c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u043e\u0431 \u044d\u0442\u043e\u043c \u0412\u041f\u041e \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443, \u0430\u0442\u0430\u043a\u0438 \u0441 \u0435\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0438\u043c\u0435\u043b\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0432\u043e\u043b\u043d \u0432 \u0440\u0430\u0437\u043d\u044b\u0445 \u0441\u0442\u0440\u0430\u043d\u0430\u0445. \u0421\u0430\u043c\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CLFS \u0438\u043c\u0435\u043d\u043d\u043e \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 \u2014 \u0445\u043e\u0440\u043e\u0448\u043e \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043d\u0430\u043c\u0438 \u0444\u0435\u043d\u043e\u043c\u0435\u043d, \u043c\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 5 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u043d\u0438\u0445 \u0432 Microsoft.\n\n\u041f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\u0425\u043e\u0442\u044f \u0443 \u043c\u043d\u043e\u0433\u0438\u0445 \u043e\u043f\u0430\u0441\u043d\u043e \u0432\u044b\u0433\u043b\u044f\u0434\u044f\u0449\u0438\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u0420\u0435\u0434\u043c\u043e\u043d\u0434 \u043e\u0446\u0435\u043d\u0438\u043b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u043a\u0430\u043a \u043c\u0435\u043d\u0435\u0435 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u0443\u044e \u0438\u0437-\u0437\u0430 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0431\u0435\u0434\u0438\u0442\u044c \u0432 \u0433\u043e\u043d\u043a\u0435 (race condition), \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0438\u043b\u0438 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c, \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e.\nCVE-2025-26663/CVE-2025-26670 \u2014 RCE \u0432  Windows LDAP, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443. \nCVE-2025-29809 \u2014 \u0443\u0442\u0435\u0447\u043a\u0430 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 Kerberos \u0432 \u043e\u0431\u0445\u043e\u0434 Windows Defender Credential Guard. \u041a\u0440\u043e\u043c\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043f\u0430\u0442\u0447\u0430 \u043d\u0430\u0434\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c \u0438 \u0437\u0430\u043d\u043e\u0432\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 VBS.\nCVE-2025-27480/CVE-2025-27482 \u2014 RCE \u0432 Remote Desktop Services, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0434\u043e\u043b\u0436\u0435\u043d \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0432 \u0440\u043e\u043b\u0438 \u0448\u043b\u044e\u0437\u0430 Remote Desktop.\nCVE-2025-27740 \u2014 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 Active Directory Certificate Services, \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u0430\u0434\u043c\u0438\u043d\u0430. \nCVE-2025-26686 \u2014 RCE TCP/IP. \u0416\u0435\u0440\u0442\u0432\u0430 \u0434\u043e\u043b\u0436\u043d\u0430 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 DHCPv6, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043f\u0430\u043a\u0435\u0442 \u0432 \u043e\u0442\u0432\u0435\u0442. \nCVE-2025-27752 / CVE-2025-29791 \u2014 RCE \u0432 Excel, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u043d\u0435\u043b\u044c \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430. \u0411\u043e\u043d\u0443\u0441\u043e\u043c \u2014 CVE-2025-27745, -27748, -27749, \u0432\u0441\u0435 \u0432 Office \u0431\u0435\u0437 \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u044f \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432, \u0442\u043e\u0436\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440.\n\n#\u043f\u0430\u0442\u0447\u0438 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #Microsoft @\u041f2\u0422", "creation_timestamp": "2025-04-09T09:10:24.000000Z"}, {"uuid": "039c19db-3899-4690-a360-4eed93b55f29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27482", "type": "seen", "source": "https://t.me/kasperskyb2b/1694", "content": "\ud83d\udd2c \u0410\u043f\u0440\u0435\u043b\u044c\u0441\u043a\u0438\u0439 Patch Tuesday: \u043b\u0443\u0447\u0448\u0435\u0435, \u043a\u043e\u043d\u0435\u0447\u043d\u043e, \u0432\u043f\u0435\u0440\u0435\u0434\u0438!\n\nMicrosoft \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043a\u0440\u0443\u043f\u043d\u044b\u0439 \u043f\u0430\u043a\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0432 134 \u0434\u0435\u0444\u0435\u043a\u0442\u0430 (\u0438\u0437 \u043d\u0438\u0445 10 \u2014 \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445). \u041e\u0434\u043d\u0430 \u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0437\u0438\u0440\u043e\u0434\u0435\u0435\u043c, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u043c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 ransomware, \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0435\u0444\u0435\u043a\u0442\u044b \u0440\u0430\u043d\u0435\u0435 \u043d\u0435 \u0431\u044b\u043b\u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b. \u041d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u043e\u0439 \u043d\u043e\u0432\u0438\u043d\u043a\u043e\u0439 \u044d\u0442\u043e\u0433\u043e \u0432\u0442\u043e\u0440\u043d\u0438\u043a\u0430 \u0441\u0442\u0430\u043b\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f Windows 11, \u0434\u043b\u044f \u043c\u043d\u043e\u0433\u0438\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u0443\u043a\u0430\u0437\u0430\u043d\u043e, \u0447\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Windows 10 \u0431\u0443\u0434\u0443\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u00ab\u043f\u043e\u0437\u0436\u0435\u00bb.  \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Microsoft \u0434\u0430\u043b\u0430 \u0434\u043b\u044f \u043c\u043d\u043e\u0433\u0438\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u043e\u0446\u0435\u043d\u043a\u0443 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u043e\u0442 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u0430 CVSS3.1. \u0412\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0431\u043e\u043b\u044c\u0448\u0435 \u0447\u0435\u043c \u0432 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u0432\u0442\u043e\u0440\u043d\u0438\u043a\u0430\u0445 \u0441\u0434\u0435\u043b\u0430\u043d\u0430 \u043f\u043e\u043f\u0440\u0430\u0432\u043a\u0430 \u043d\u0430 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043b\u0438\u0448\u044c 11 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043e\u0446\u0435\u043d\u043a\u0443 critical, 2 \u2014 low, \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u2014 important. 49 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, 31 \u2014 \u043a RCE, 17 \u2014 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, 14 \u2014 \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438, 9 \u2014 \u043e\u0431\u0445\u043e\u0434\u0443 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, 3 \u2014  spoofing.\n\n\n\u0417\u0438\u0440\u043e\u0434\u0435\u0439 \u043d\u0430 \u0441\u043b\u0443\u0436\u0431\u0435 RansomEXX\nCVE-2025-29824 (7.8) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 use after free \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 CLFS \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e system.  \n\u0414\u0435\u0444\u0435\u043a\u0442\u043e\u043c \u043f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0441\u0430\u043c\u043e\u0439 Microsoft \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0438 RansomEXX/Storm-2460, \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u044f \u043d\u0430 \u043f\u043e\u0440\u0430\u0436\u0451\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0431\u044d\u043a\u0434\u043e\u0440 PipeMagic \u0438 \u043f\u043e\u0432\u044b\u0448\u0430\u044f \u0435\u0433\u043e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u0412\u043f\u0440\u043e\u0447\u0435\u043c, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u0432\u0438\u0434\u0438\u0442 \u043d\u0435\u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0446\u0435\u043b\u0435\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438. \u041c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u043e\u0431 \u044d\u0442\u043e\u043c \u0412\u041f\u041e \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443, \u0430\u0442\u0430\u043a\u0438 \u0441 \u0435\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0438\u043c\u0435\u043b\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0432\u043e\u043b\u043d \u0432 \u0440\u0430\u0437\u043d\u044b\u0445 \u0441\u0442\u0440\u0430\u043d\u0430\u0445. \u0421\u0430\u043c\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CLFS \u0438\u043c\u0435\u043d\u043d\u043e \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 \u2014 \u0445\u043e\u0440\u043e\u0448\u043e \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043d\u0430\u043c\u0438 \u0444\u0435\u043d\u043e\u043c\u0435\u043d, \u043c\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 5 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u043d\u0438\u0445 \u0432 Microsoft.\n\n\u041f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\u0425\u043e\u0442\u044f \u0443 \u043c\u043d\u043e\u0433\u0438\u0445 \u043e\u043f\u0430\u0441\u043d\u043e \u0432\u044b\u0433\u043b\u044f\u0434\u044f\u0449\u0438\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u0420\u0435\u0434\u043c\u043e\u043d\u0434 \u043e\u0446\u0435\u043d\u0438\u043b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u043a\u0430\u043a \u043c\u0435\u043d\u0435\u0435 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u0443\u044e \u0438\u0437-\u0437\u0430 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0431\u0435\u0434\u0438\u0442\u044c \u0432 \u0433\u043e\u043d\u043a\u0435 (race condition), \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0438\u043b\u0438 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c, \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e.\nCVE-2025-26663/CVE-2025-26670 \u2014 RCE \u0432  Windows LDAP, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443. \nCVE-2025-29809 \u2014 \u0443\u0442\u0435\u0447\u043a\u0430 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 Kerberos \u0432 \u043e\u0431\u0445\u043e\u0434 Windows Defender Credential Guard. \u041a\u0440\u043e\u043c\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043f\u0430\u0442\u0447\u0430 \u043d\u0430\u0434\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c \u0438 \u0437\u0430\u043d\u043e\u0432\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 VBS.\nCVE-2025-27480/CVE-2025-27482 \u2014 RCE \u0432 Remote Desktop Services, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0434\u043e\u043b\u0436\u0435\u043d \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0432 \u0440\u043e\u043b\u0438 \u0448\u043b\u044e\u0437\u0430 Remote Desktop.\nCVE-2025-27740 \u2014 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 Active Directory Certificate Services, \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u0430\u0434\u043c\u0438\u043d\u0430. \nCVE-2025-26686 \u2014 RCE TCP/IP. \u0416\u0435\u0440\u0442\u0432\u0430 \u0434\u043e\u043b\u0436\u043d\u0430 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 DHCPv6, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043f\u0430\u043a\u0435\u0442 \u0432 \u043e\u0442\u0432\u0435\u0442. \nCVE-2025-27752 / CVE-2025-29791 \u2014 RCE \u0432 Excel, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u043d\u0435\u043b\u044c \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430. \u0411\u043e\u043d\u0443\u0441\u043e\u043c \u2014 CVE-2025-27745, -27748, -27749, \u0432\u0441\u0435 \u0432 Office \u0431\u0435\u0437 \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u044f \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432, \u0442\u043e\u0436\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440.\n\n#\u043f\u0430\u0442\u0447\u0438 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #Microsoft @\u041f2\u0422", "creation_timestamp": "2025-04-09T09:10:24.000000Z"}, {"uuid": "971c5b5e-abdc-406b-8fcb-cf6d500f6144", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27740", "type": "seen", "source": "https://t.me/kasperskyb2b/1694", "content": "\ud83d\udd2c \u0410\u043f\u0440\u0435\u043b\u044c\u0441\u043a\u0438\u0439 Patch Tuesday: \u043b\u0443\u0447\u0448\u0435\u0435, \u043a\u043e\u043d\u0435\u0447\u043d\u043e, \u0432\u043f\u0435\u0440\u0435\u0434\u0438!\n\nMicrosoft \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043a\u0440\u0443\u043f\u043d\u044b\u0439 \u043f\u0430\u043a\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0432 134 \u0434\u0435\u0444\u0435\u043a\u0442\u0430 (\u0438\u0437 \u043d\u0438\u0445 10 \u2014 \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445). \u041e\u0434\u043d\u0430 \u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0437\u0438\u0440\u043e\u0434\u0435\u0435\u043c, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u043c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 ransomware, \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0435\u0444\u0435\u043a\u0442\u044b \u0440\u0430\u043d\u0435\u0435 \u043d\u0435 \u0431\u044b\u043b\u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b. \u041d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u043e\u0439 \u043d\u043e\u0432\u0438\u043d\u043a\u043e\u0439 \u044d\u0442\u043e\u0433\u043e \u0432\u0442\u043e\u0440\u043d\u0438\u043a\u0430 \u0441\u0442\u0430\u043b\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f Windows 11, \u0434\u043b\u044f \u043c\u043d\u043e\u0433\u0438\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u0443\u043a\u0430\u0437\u0430\u043d\u043e, \u0447\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Windows 10 \u0431\u0443\u0434\u0443\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u00ab\u043f\u043e\u0437\u0436\u0435\u00bb.  \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Microsoft \u0434\u0430\u043b\u0430 \u0434\u043b\u044f \u043c\u043d\u043e\u0433\u0438\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u043e\u0446\u0435\u043d\u043a\u0443 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u043e\u0442 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u0430 CVSS3.1. \u0412\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0431\u043e\u043b\u044c\u0448\u0435 \u0447\u0435\u043c \u0432 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u0432\u0442\u043e\u0440\u043d\u0438\u043a\u0430\u0445 \u0441\u0434\u0435\u043b\u0430\u043d\u0430 \u043f\u043e\u043f\u0440\u0430\u0432\u043a\u0430 \u043d\u0430 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043b\u0438\u0448\u044c 11 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043e\u0446\u0435\u043d\u043a\u0443 critical, 2 \u2014 low, \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u2014 important. 49 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, 31 \u2014 \u043a RCE, 17 \u2014 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, 14 \u2014 \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438, 9 \u2014 \u043e\u0431\u0445\u043e\u0434\u0443 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, 3 \u2014  spoofing.\n\n\n\u0417\u0438\u0440\u043e\u0434\u0435\u0439 \u043d\u0430 \u0441\u043b\u0443\u0436\u0431\u0435 RansomEXX\nCVE-2025-29824 (7.8) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 use after free \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 CLFS \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e system.  \n\u0414\u0435\u0444\u0435\u043a\u0442\u043e\u043c \u043f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0441\u0430\u043c\u043e\u0439 Microsoft \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0438 RansomEXX/Storm-2460, \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u044f \u043d\u0430 \u043f\u043e\u0440\u0430\u0436\u0451\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0431\u044d\u043a\u0434\u043e\u0440 PipeMagic \u0438 \u043f\u043e\u0432\u044b\u0448\u0430\u044f \u0435\u0433\u043e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u0412\u043f\u0440\u043e\u0447\u0435\u043c, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u0432\u0438\u0434\u0438\u0442 \u043d\u0435\u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0446\u0435\u043b\u0435\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438. \u041c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u043e\u0431 \u044d\u0442\u043e\u043c \u0412\u041f\u041e \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443, \u0430\u0442\u0430\u043a\u0438 \u0441 \u0435\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0438\u043c\u0435\u043b\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0432\u043e\u043b\u043d \u0432 \u0440\u0430\u0437\u043d\u044b\u0445 \u0441\u0442\u0440\u0430\u043d\u0430\u0445. \u0421\u0430\u043c\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CLFS \u0438\u043c\u0435\u043d\u043d\u043e \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 \u2014 \u0445\u043e\u0440\u043e\u0448\u043e \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043d\u0430\u043c\u0438 \u0444\u0435\u043d\u043e\u043c\u0435\u043d, \u043c\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 5 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u043d\u0438\u0445 \u0432 Microsoft.\n\n\u041f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\u0425\u043e\u0442\u044f \u0443 \u043c\u043d\u043e\u0433\u0438\u0445 \u043e\u043f\u0430\u0441\u043d\u043e \u0432\u044b\u0433\u043b\u044f\u0434\u044f\u0449\u0438\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u0420\u0435\u0434\u043c\u043e\u043d\u0434 \u043e\u0446\u0435\u043d\u0438\u043b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u043a\u0430\u043a \u043c\u0435\u043d\u0435\u0435 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u0443\u044e \u0438\u0437-\u0437\u0430 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0431\u0435\u0434\u0438\u0442\u044c \u0432 \u0433\u043e\u043d\u043a\u0435 (race condition), \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0438\u043b\u0438 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c, \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e.\nCVE-2025-26663/CVE-2025-26670 \u2014 RCE \u0432  Windows LDAP, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443. \nCVE-2025-29809 \u2014 \u0443\u0442\u0435\u0447\u043a\u0430 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 Kerberos \u0432 \u043e\u0431\u0445\u043e\u0434 Windows Defender Credential Guard. \u041a\u0440\u043e\u043c\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043f\u0430\u0442\u0447\u0430 \u043d\u0430\u0434\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c \u0438 \u0437\u0430\u043d\u043e\u0432\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 VBS.\nCVE-2025-27480/CVE-2025-27482 \u2014 RCE \u0432 Remote Desktop Services, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0434\u043e\u043b\u0436\u0435\u043d \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0432 \u0440\u043e\u043b\u0438 \u0448\u043b\u044e\u0437\u0430 Remote Desktop.\nCVE-2025-27740 \u2014 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 Active Directory Certificate Services, \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u0430\u0434\u043c\u0438\u043d\u0430. \nCVE-2025-26686 \u2014 RCE TCP/IP. \u0416\u0435\u0440\u0442\u0432\u0430 \u0434\u043e\u043b\u0436\u043d\u0430 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 DHCPv6, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043f\u0430\u043a\u0435\u0442 \u0432 \u043e\u0442\u0432\u0435\u0442. \nCVE-2025-27752 / CVE-2025-29791 \u2014 RCE \u0432 Excel, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u043d\u0435\u043b\u044c \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430. \u0411\u043e\u043d\u0443\u0441\u043e\u043c \u2014 CVE-2025-27745, -27748, -27749, \u0432\u0441\u0435 \u0432 Office \u0431\u0435\u0437 \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u044f \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432, \u0442\u043e\u0436\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440.\n\n#\u043f\u0430\u0442\u0447\u0438 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #Microsoft @\u041f2\u0422", "creation_timestamp": "2025-04-09T09:10:24.000000Z"}, {"uuid": "fec9e7a6-73cd-48de-814b-06c9bb13a774", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://t.me/kasperskyb2b/1677", "content": "\u2757\ufe0f \u0417\u0438\u0440\u043e\u0434\u0435\u0439 \u0432 Chrome \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b Kaspersky GReAT \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0446\u0435\u043b\u0435\u0432\u0443\u044e \u0430\u0442\u0430\u043a\u0443 \u043d\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0435\u0439 \u0421\u041c\u0418, \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0439 \u0438 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0436\u0435\u0440\u0442\u0432 \u0437\u0430\u043c\u0430\u043d\u0438\u0432\u0430\u044e\u0442 \u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0430\u0439\u0442, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Chromium (\u0434\u0435\u0444\u0435\u043a\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u043d\u043e\u043c\u0435\u0440 CVE-2025-2783). \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Windows \u043f\u043e\u0441\u043b\u0435 \u043f\u043e\u0441\u0435\u0449\u0435\u043d\u0438\u044f \u0441\u0430\u0439\u0442\u0430 \u0437\u0430\u0440\u0430\u0436\u0430\u043b\u0438 \u0412\u041f\u041e \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0441 \u0446\u0435\u043b\u044c\u044e \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430. \u0414\u043b\u044f \u043f\u0440\u0438\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0436\u0435\u0440\u0442\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0444\u0438\u0448\u0438\u043d\u0433, \u043f\u0440\u0438\u0433\u043b\u0430\u0448\u0430\u044e\u0449\u0438\u0439 \u043d\u0430 \u043d\u0430\u0443\u0447\u043d\u044b\u0439 \u0444\u043e\u0440\u0443\u043c \u00ab\u041f\u0440\u0438\u043c\u0430\u043a\u043e\u0432\u0441\u043a\u0438\u0435 \u0447\u0442\u0435\u043d\u0438\u044f\u00bb.\n\n\u0418 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0438 \u0412\u041f\u041e \u043e\u0442\u043b\u0438\u0447\u0430\u044e\u0442\u0441\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0438\u0437\u043e\u0449\u0440\u0451\u043d\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e \u0437\u0430 \u0430\u0442\u0430\u043a\u043e\u0439 \u0441\u0442\u043e\u0438\u0442 APT-\u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430, \u0441\u043f\u043e\u043d\u0441\u0438\u0440\u0443\u0435\u043c\u0430\u044f \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u043e\u043c. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u0430\u0442\u0430\u043a\u0435 \u0438 IoC \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u043d\u0430 Securelist, \u0430 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0441\u0430\u043c\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Chrome \u043c\u044b \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u0443\u0435\u043c, \u043a\u043e\u0433\u0434\u0430 \u0431\u043e\u043b\u044c\u0448\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u041c\u044b \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Google \u0438 \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u0432\u044b\u0448\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0451\u043d\u043d\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f Chrome 134.0.6998.177/.178, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u044b \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u043d\u0435\u0437\u0430\u043c\u0435\u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c. \u041d\u0430 \u0432\u0441\u0435\u0445 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u0445 \u0434\u043e\u043b\u0436\u043d\u043e \u0431\u044b\u0442\u044c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043e \u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0435 \u0437\u0430\u0449\u0438\u0442\u043d\u043e\u0435 \u041f\u041e. \u0420\u0435\u0448\u0435\u043d\u0438\u044f Kaspersky \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432 \u0434\u0430\u043d\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0435. \n\n#APT #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 @\u041f2\u0422", "creation_timestamp": "2025-03-27T17:12:31.000000Z"}, {"uuid": "6440f214-f6ea-41ac-8034-51877486ac84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27745", "type": "seen", "source": "https://t.me/kasperskyb2b/1694", "content": "\ud83d\udd2c \u0410\u043f\u0440\u0435\u043b\u044c\u0441\u043a\u0438\u0439 Patch Tuesday: \u043b\u0443\u0447\u0448\u0435\u0435, \u043a\u043e\u043d\u0435\u0447\u043d\u043e, \u0432\u043f\u0435\u0440\u0435\u0434\u0438!\n\nMicrosoft \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043a\u0440\u0443\u043f\u043d\u044b\u0439 \u043f\u0430\u043a\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0432 134 \u0434\u0435\u0444\u0435\u043a\u0442\u0430 (\u0438\u0437 \u043d\u0438\u0445 10 \u2014 \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445). \u041e\u0434\u043d\u0430 \u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0437\u0438\u0440\u043e\u0434\u0435\u0435\u043c, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u043c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 ransomware, \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0435\u0444\u0435\u043a\u0442\u044b \u0440\u0430\u043d\u0435\u0435 \u043d\u0435 \u0431\u044b\u043b\u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b. \u041d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u043e\u0439 \u043d\u043e\u0432\u0438\u043d\u043a\u043e\u0439 \u044d\u0442\u043e\u0433\u043e \u0432\u0442\u043e\u0440\u043d\u0438\u043a\u0430 \u0441\u0442\u0430\u043b\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f Windows 11, \u0434\u043b\u044f \u043c\u043d\u043e\u0433\u0438\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u0443\u043a\u0430\u0437\u0430\u043d\u043e, \u0447\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Windows 10 \u0431\u0443\u0434\u0443\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u00ab\u043f\u043e\u0437\u0436\u0435\u00bb.  \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Microsoft \u0434\u0430\u043b\u0430 \u0434\u043b\u044f \u043c\u043d\u043e\u0433\u0438\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u043e\u0446\u0435\u043d\u043a\u0443 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u043e\u0442 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u0430 CVSS3.1. \u0412\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0431\u043e\u043b\u044c\u0448\u0435 \u0447\u0435\u043c \u0432 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u0432\u0442\u043e\u0440\u043d\u0438\u043a\u0430\u0445 \u0441\u0434\u0435\u043b\u0430\u043d\u0430 \u043f\u043e\u043f\u0440\u0430\u0432\u043a\u0430 \u043d\u0430 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043b\u0438\u0448\u044c 11 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043e\u0446\u0435\u043d\u043a\u0443 critical, 2 \u2014 low, \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u2014 important. 49 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, 31 \u2014 \u043a RCE, 17 \u2014 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, 14 \u2014 \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438, 9 \u2014 \u043e\u0431\u0445\u043e\u0434\u0443 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, 3 \u2014  spoofing.\n\n\n\u0417\u0438\u0440\u043e\u0434\u0435\u0439 \u043d\u0430 \u0441\u043b\u0443\u0436\u0431\u0435 RansomEXX\nCVE-2025-29824 (7.8) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 use after free \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 CLFS \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e system.  \n\u0414\u0435\u0444\u0435\u043a\u0442\u043e\u043c \u043f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0441\u0430\u043c\u043e\u0439 Microsoft \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0438 RansomEXX/Storm-2460, \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u044f \u043d\u0430 \u043f\u043e\u0440\u0430\u0436\u0451\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0431\u044d\u043a\u0434\u043e\u0440 PipeMagic \u0438 \u043f\u043e\u0432\u044b\u0448\u0430\u044f \u0435\u0433\u043e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u0412\u043f\u0440\u043e\u0447\u0435\u043c, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u0432\u0438\u0434\u0438\u0442 \u043d\u0435\u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0446\u0435\u043b\u0435\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438. \u041c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u043e\u0431 \u044d\u0442\u043e\u043c \u0412\u041f\u041e \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443, \u0430\u0442\u0430\u043a\u0438 \u0441 \u0435\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0438\u043c\u0435\u043b\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0432\u043e\u043b\u043d \u0432 \u0440\u0430\u0437\u043d\u044b\u0445 \u0441\u0442\u0440\u0430\u043d\u0430\u0445. \u0421\u0430\u043c\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CLFS \u0438\u043c\u0435\u043d\u043d\u043e \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 \u2014 \u0445\u043e\u0440\u043e\u0448\u043e \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043d\u0430\u043c\u0438 \u0444\u0435\u043d\u043e\u043c\u0435\u043d, \u043c\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 5 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u043d\u0438\u0445 \u0432 Microsoft.\n\n\u041f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\u0425\u043e\u0442\u044f \u0443 \u043c\u043d\u043e\u0433\u0438\u0445 \u043e\u043f\u0430\u0441\u043d\u043e \u0432\u044b\u0433\u043b\u044f\u0434\u044f\u0449\u0438\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u0420\u0435\u0434\u043c\u043e\u043d\u0434 \u043e\u0446\u0435\u043d\u0438\u043b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u043a\u0430\u043a \u043c\u0435\u043d\u0435\u0435 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u0443\u044e \u0438\u0437-\u0437\u0430 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0431\u0435\u0434\u0438\u0442\u044c \u0432 \u0433\u043e\u043d\u043a\u0435 (race condition), \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0438\u043b\u0438 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c, \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e.\nCVE-2025-26663/CVE-2025-26670 \u2014 RCE \u0432  Windows LDAP, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443. \nCVE-2025-29809 \u2014 \u0443\u0442\u0435\u0447\u043a\u0430 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 Kerberos \u0432 \u043e\u0431\u0445\u043e\u0434 Windows Defender Credential Guard. \u041a\u0440\u043e\u043c\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043f\u0430\u0442\u0447\u0430 \u043d\u0430\u0434\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c \u0438 \u0437\u0430\u043d\u043e\u0432\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 VBS.\nCVE-2025-27480/CVE-2025-27482 \u2014 RCE \u0432 Remote Desktop Services, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0434\u043e\u043b\u0436\u0435\u043d \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0432 \u0440\u043e\u043b\u0438 \u0448\u043b\u044e\u0437\u0430 Remote Desktop.\nCVE-2025-27740 \u2014 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 Active Directory Certificate Services, \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u0430\u0434\u043c\u0438\u043d\u0430. \nCVE-2025-26686 \u2014 RCE TCP/IP. \u0416\u0435\u0440\u0442\u0432\u0430 \u0434\u043e\u043b\u0436\u043d\u0430 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 DHCPv6, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043f\u0430\u043a\u0435\u0442 \u0432 \u043e\u0442\u0432\u0435\u0442. \nCVE-2025-27752 / CVE-2025-29791 \u2014 RCE \u0432 Excel, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u043d\u0435\u043b\u044c \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430. \u0411\u043e\u043d\u0443\u0441\u043e\u043c \u2014 CVE-2025-27745, -27748, -27749, \u0432\u0441\u0435 \u0432 Office \u0431\u0435\u0437 \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u044f \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432, \u0442\u043e\u0436\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440.\n\n#\u043f\u0430\u0442\u0447\u0438 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #Microsoft @\u041f2\u0422", "creation_timestamp": "2025-04-09T09:10:24.000000Z"}, {"uuid": "fa923cab-cf6f-4406-99f9-d6c4731997be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "exploited", "source": "https://t.me/true_secator/7095", "content": "Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Chrome 137 \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0442\u0440\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f 0-day \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0443\u044e \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c\u0438 spyware.\n\n\u0423\u043a\u0430\u0437\u0430\u043d\u043d\u0430\u044f 0-day \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-5419 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0447\u0442\u0435\u043d\u0438\u044f \u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0431\u0443\u0444\u0435\u0440\u0430 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8 JavaScript \u0438 WebAssembly.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Google, \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f CVE-2025-5419 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435, \u043e\u0434\u043d\u0430\u043a\u043e \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043e \u043d\u0435 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0430\u0435\u0442\u0441\u044f.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432\u044b\u0440\u0430\u0437\u0438\u043b\u0430 \u043f\u0440\u0438\u0437\u043d\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u041a\u043b\u0435\u043c\u0435\u043d\u0442\u0443 \u041b\u0435\u0441\u0438\u043d\u044e \u0438 \u0411\u0435\u043d\u0443\u0430 \u0421\u0435\u0432\u0435\u043d\u0441\u0443 \u0438\u0437 Google Threat Analysis Group (TAG), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 27 \u043c\u0430\u044f 2025 \u0433\u043e\u0434\u0430 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 TAG \u0440\u0430\u043d\u0435\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0438 \u043e \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c\u0438 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0442\u0430\u043a\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 Chrome. \u0422\u0430\u043a \u0447\u0442\u043e \u0438 CVE-2025-5419, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u043d\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e\u00a0\u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c NIST, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f 0-day \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 \u0447\u0435\u0440\u0435\u0437 \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443.\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0442\u0430\u043a\u0438\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u0447\u0430\u0441\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\nCVE-2025-5419 - \u044d\u0442\u043e \u0432\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f Google \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443 \u043f\u043e\u0441\u043b\u0435 CVE-2025-2783 (CVSS: 8,3), \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0420\u043e\u0441\u0441\u0438\u0438.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 CVE-2025-5068, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 use-after-free \u0432 Blink, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438\u043d\u0435\u0441\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e, \u0441\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0435\u043c\u0443 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435, \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 1000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0432\u0435\u0440\u0441\u0438\u044f Chrome \u0442\u0435\u043f\u0435\u0440\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u043a\u0430\u043a 137.0.7151.68/.69 \u0434\u043b\u044f Windows \u0438 macOS, \u0430 \u0442\u0430\u043a\u0436\u0435 137.0.7151.68 - \u0434\u043b\u044f Linux.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 \u043d\u0430 \u0431\u0430\u0437\u0435 Chromium, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Microsoft Edge, Brave, Opera \u0438 Vivaldi, \u0442\u0430\u043a\u0436\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e \u043c\u0435\u0440\u0435 \u0438\u0445 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f.", "creation_timestamp": "2025-06-03T12:32:47.000000Z"}, {"uuid": "1b6c7368-81e7-45a6-95dd-88ecdc7da637", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27599", "type": "seen", "source": "https://t.me/cvedetector/23322", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27599 - Element X Android Cross-Site Scripting (XSS) and Permission Tampering Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27599 \nPublished : April 18, 2025, 4:15 p.m. | 26\u00a0minutes ago \nDescription : Element X Android is a Matrix Android Client provided by element.io. Prior to version 25.04.2, a crafted hyperlink on a webpage, or a locally installed malicious app, can force Element X up to version 25.04.1 to load a webpage with similar permissions to Element Call and automatically grant it temporary access to microphone and camera. This issue has been patched in version 25.04.2. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-18T19:05:06.000000Z"}, {"uuid": "8a47613d-b188-4801-aa12-0d9a5986d72a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27197", "type": "seen", "source": "https://t.me/cvedetector/25233", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27197 - Adobe Lightroom Out-of-Bounds Write Arbitrary Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27197 \nPublished : May 13, 2025, 6:15 p.m. | 59\u00a0minutes ago \nDescription : Lightroom Desktop versions 8.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-13T21:24:41.000000Z"}, {"uuid": "773f31eb-6f36-4814-b0a4-81dbbd2d51c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27720", "type": "seen", "source": "https://t.me/cvedetector/24884", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27720 - Pixmeo Osirix MD Unencrypted Credential Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-27720 \nPublished : May 8, 2025, 11:15 p.m. | 27\u00a0minutes ago \nDescription : The Pixmeo Osirix MD Web Portal sends credential information without encryption, which could allow an attacker to steal credentials. \nSeverity: 7.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-09T01:59:41.000000Z"}, {"uuid": "982ecfcc-4958-4490-8f9e-82ee192c1a80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27578", "type": "seen", "source": "https://t.me/cvedetector/24883", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27578 - Pixmeo OsiriX MD Denial-of-Service Use-After-Free Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27578 \nPublished : May 8, 2025, 11:15 p.m. | 27\u00a0minutes ago \nDescription : Pixmeo OsiriX MD is vulnerable to a use after free scenario, which could allow an attacker to upload a crafted DICOM file and cause memory corruption leading to a denial-of-service condition. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-09T01:59:40.000000Z"}, {"uuid": "203385af-4922-436b-ab36-793922c689bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27695", "type": "seen", "source": "https://t.me/cvedetector/24844", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27695 - Dell Wyse Management Suite Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-27695 \nPublished : May 8, 2025, 7:16 p.m. | 17\u00a0minutes ago \nDescription : Dell Wyse Management Suite, versions prior to WMS 5.1 contain an Authentication Bypass by Spoofing vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information Disclosure. \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-08T21:48:12.000000Z"}, {"uuid": "60ff36be-067e-4fd2-976b-49a60a331adb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27937", "type": "seen", "source": "https://t.me/cvedetector/23869", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27937 - Quick Agent Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27937 \nPublished : April 28, 2025, 12:15 a.m. | 41\u00a0minutes ago \nDescription : Quick Agent V3 and Quick Agent V2 contain an issue with improper limitation of a pathname to a restricted directory ('Path Traversal'). If exploited, an arbitrary file in the affected product may be obtained by a remote attacker who can log in to the product. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-28T03:11:28.000000Z"}, {"uuid": "d1baa705-134a-4969-9dac-42b023f2e2d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27820", "type": "seen", "source": "https://t.me/cvedetector/23670", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27820 - Apache HttpClient Domain Check Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27820 \nPublished : April 24, 2025, 12:15 p.m. | 16\u00a0minutes ago \nDescription : A bug in PSL validation logic in Apache HttpClient 5.4.x disables domain checks, affecting cookie management and host name verification. Discovered by the Apache HttpClient team. Fixed in the 5.4.3 release \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-24T14:44:11.000000Z"}, {"uuid": "5df2c536-6f3f-45ee-a714-65726d9ab483", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27581", "type": "seen", "source": "https://t.me/cvedetector/23630", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27581 - NIH BRICS Unauthenticated Access to InET Module\", \n  \"Content\": \"CVE ID : CVE-2025-27581 \nPublished : April 24, 2025, 12:15 a.m. | 2\u00a0hours, 9\u00a0minutes ago \nDescription : NIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67 allows users who lack the InET role to access the InET module via direct requests to known endpoints. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-24T04:42:07.000000Z"}, {"uuid": "be78ec7f-484f-4b1b-bd54-94ef38240559", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2703", "type": "seen", "source": "https://t.me/cvedetector/23590", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2703 - \"Jira XY Chart Plugin DOM XSS\"\", \n  \"Content\": \"CVE ID : CVE-2025-2703 \nPublished : April 23, 2025, 12:15 p.m. | 1\u00a0hour, 59\u00a0minutes ago \nDescription : The built-in XY Chart plugin is vulnerable to a DOM XSS vulnerability.   \n  \nA user with Editor permissions is able to modify such a panel in order to make it execute arbitrary JavaScript. \nSeverity: 6.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-23T16:59:24.000000Z"}, {"uuid": "b2702a95-0773-4a86-88dc-74efe0f84bcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27580", "type": "seen", "source": "https://t.me/cvedetector/23629", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27580 - NIH BRICS Privilege Escalation and Account Compromise Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27580 \nPublished : April 24, 2025, 12:15 a.m. | 2\u00a0hours, 9\u00a0minutes ago \nDescription : NIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67 generates predictable tokens (that depend on username, time, and the fixed 7Dl9#dj- string) and thus allows unauthenticated users with a Common Access Card (CAC) to escalate privileges and compromise any account, including administrators. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-24T04:42:06.000000Z"}, {"uuid": "85beaedf-d754-4287-a233-ab7b1acbeadb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2768", "type": "seen", "source": "https://t.me/cvedetector/23611", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2768 - Bdrive NetDrive Uncontrolled Search Path Element Local Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2025-2768 \nPublished : April 23, 2025, 5:16 p.m. | 59\u00a0minutes ago \nDescription : Bdrive NetDrive Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Bdrive NetDrive. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.  \n  \nThe specific flaw exists within the configuration of OpenSSL. The product loads an OpenSSL configuration file from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-25041. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-23T21:10:34.000000Z"}, {"uuid": "50e60d51-1f29-4925-ad24-05d6352f70cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2764", "type": "seen", "source": "https://t.me/cvedetector/23608", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2764 - CarlinKit CPC200-CCPA Update.cgi Cryptographic Signature Verification Bypass Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2764 \nPublished : April 23, 2025, 5:16 p.m. | 59\u00a0minutes ago \nDescription : CarlinKit CPC200-CCPA update.cgi Improper Verification of Cryptographic Signature Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of CarlinKit CPC200-CCPA devices. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.  \n  \nThe specific flaw exists within the handling of update packages provided to update.cgi. The issue results from the lack of proper verification of a cryptographic signature. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-24355. \nSeverity: 8.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-23T21:10:29.000000Z"}, {"uuid": "0ec7f1a0-1741-44dc-803a-a06f193129fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27087", "type": "seen", "source": "https://t.me/cvedetector/23564", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27087 - Cray Operating System (COS) Kernel Local Denial of Service (DoS)\", \n  \"Content\": \"CVE ID : CVE-2025-27087 \nPublished : April 22, 2025, 10:15 p.m. | 1\u00a0hour, 51\u00a0minutes ago \nDescription : A vulnerability in the kernel of the Cray Operating System (COS) could allow an attacker to perform a local Denial of Service (DoS) attack. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-23T02:46:25.000000Z"}, {"uuid": "93e54eed-9c99-4f02-96ce-c1639efba39f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2773", "type": "seen", "source": "https://t.me/cvedetector/23600", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2773 - BEC Technologies Multiple Routers TCP Port 22 Command Injection Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2773 \nPublished : April 23, 2025, 5:16 p.m. | 59\u00a0minutes ago \nDescription : BEC Technologies Multiple Routers sys ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of BEC Technologies Multiple Routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.  \n  \nThe specific flaw exists within the management interface, which listens on TCP port 22 by default. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-25903. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-23T21:10:17.000000Z"}, {"uuid": "39be45bc-67ff-4c2d-9a03-9ae2245e244a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2767", "type": "seen", "source": "https://t.me/cvedetector/23613", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2767 - Arista NG Firewall User-Agent Cross-Site Scripting Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2025-2767 \nPublished : April 23, 2025, 5:16 p.m. | 59\u00a0minutes ago \nDescription : Arista NG Firewall User-Agent Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Arista NG Firewall. Minimal user interaction is required to exploit this vulnerability.  \n  \nThe specific flaw exists within the processing of the User-Agent HTTP header. The issue results from the lack of proper validation of user-supplied data, which can lead to the injection of an arbitrary script. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-24407. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-23T21:10:36.000000Z"}, {"uuid": "c1f4ccee-817e-4e7d-a2c9-7d587ad4065f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2769", "type": "seen", "source": "https://t.me/cvedetector/23612", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2769 - Bdrive NetDrive OpenSSL Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2769 \nPublished : April 23, 2025, 5:16 p.m. | 59\u00a0minutes ago \nDescription : Bdrive NetDrive Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Bdrive NetDrive. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.  \n  \nThe specific flaw exists within the configuration of OpenSSL. The product loads an OpenSSL configuration file from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-25295. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-23T21:10:35.000000Z"}, {"uuid": "14273e68-38f6-4e3a-b534-04f3933facdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2761", "type": "seen", "source": "https://t.me/cvedetector/23610", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2761 - GIMP FLI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2761 \nPublished : April 23, 2025, 5:16 p.m. | 59\u00a0minutes ago \nDescription : GIMP FLI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.  \n  \nThe specific flaw exists within the parsing of FLI files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25100. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-23T21:10:30.000000Z"}, {"uuid": "0995e554-f0d3-4197-91a2-6ba8531e6c5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2765", "type": "seen", "source": "https://t.me/cvedetector/23609", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2765 - CarlinKit CPC200-CCPA Hard-Coded Credentials Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-2765 \nPublished : April 23, 2025, 5:16 p.m. | 59\u00a0minutes ago \nDescription : CarlinKit CPC200-CCPA Wireless Hotspot Hard-Coded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of CarlinKit CPC200-CCPA devices. Authentication is not required to exploit this vulnerability.  \n  \nThe specific flaw exists within the configuration of the wireless hotspot. The issue results from the use of hard-coded credentials. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-24349. \nSeverity: 7.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-23T21:10:30.000000Z"}, {"uuid": "8dee1317-c0cf-4ac7-b034-b2ca4f379662", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2762", "type": "seen", "source": "https://t.me/cvedetector/23607", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2762 - CarlinKit CPC200-CCPA Root of Trust Failure Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2762 \nPublished : April 23, 2025, 5:16 p.m. | 59\u00a0minutes ago \nDescription : CarlinKit CPC200-CCPA Missing Root of Trust Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of CarlinKit CPC200-CCPA devices. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.  \n  \nThe specific flaw exists within the configuration of the application system-on-chip (SoC). The issue results from the lack of a properly configured hardware root of trust. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the boot process. Was ZDI-CAN-25948. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-23T21:10:28.000000Z"}, {"uuid": "5b863295-b219-4e1e-857e-3c4c3f0140d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2763", "type": "seen", "source": "https://t.me/cvedetector/23606", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2763 - CarlinKit CPC200-CCPA Cryptographic Signature Verification Bypass Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2763 \nPublished : April 23, 2025, 5:16 p.m. | 59\u00a0minutes ago \nDescription : CarlinKit CPC200-CCPA Improper Verification of Cryptographic Signature Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of CarlinKit CPC200-CCPA devices. Authentication is not required to exploit this vulnerability.  \n  \nThe specific flaw exists within the handling of update packages on USB drives. The issue results from the lack of proper verification of a cryptographic signature. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-24356. \nSeverity: 6.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-23T21:10:27.000000Z"}, {"uuid": "85da0d1d-13ba-4ea1-b397-9b77f0e3e887", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2771", "type": "seen", "source": "https://t.me/cvedetector/23605", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2771 - BEC Technologies Router Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2771 \nPublished : April 23, 2025, 5:16 p.m. | 59\u00a0minutes ago \nDescription : BEC Technologies Multiple Routers Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of BEC Technologies routers. Authentication is not required to exploit this vulnerability.  \n  \nThe specific flaw exists within the web-based user interface. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-25894. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-23T21:10:24.000000Z"}, {"uuid": "565ccd38-9a1f-45ea-bae8-16f871425989", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2770", "type": "seen", "source": "https://t.me/cvedetector/23604", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2770 - BEC Technologies Router Cleartext Password Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-2770 \nPublished : April 23, 2025, 5:16 p.m. | 59\u00a0minutes ago \nDescription : BEC Technologies Multiple Routers Cleartext Password Storage Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of BEC Technologies routers. Authentication is required to exploit this vulnerability.  \n  \nThe specific flaw exists within the web-based user interface. The issue results from storing credentials in a recoverable format. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-25986. \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-23T21:10:23.000000Z"}, {"uuid": "e30b687d-0690-47ae-90e5-f773542720ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2772", "type": "seen", "source": "https://t.me/cvedetector/23599", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2772 - BEC Technologies Router Credentials Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2772 \nPublished : April 23, 2025, 5:16 p.m. | 59\u00a0minutes ago \nDescription : BEC Technologies Multiple Routers Insufficiently Protected Credentials Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of BEC Technologies routers. Authentication is not required to exploit this vulnerability.  \n  \nThe specific flaw exists within /cgi-bin/tools_usermanage.asp. The issue results from transmitting a list of users and their credentials to be handled on the client side. An attacker can leverage this vulnerability to disclose transported credentials, leading to further compromise. Was ZDI-CAN-25895. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-23T21:10:16.000000Z"}, {"uuid": "c7e13d0a-17e0-4d01-99a1-4a8192d0a2ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27590", "type": "seen", "source": "https://t.me/CyberBulletin/2988", "content": "\u26a1\ufe0fCVE-2025-27590 \u2013 Oxidized Web: Local File Overwrite to Remote Code Execution.\n\n#CyberBulletin", "creation_timestamp": "2025-04-10T11:36:55.000000Z"}, {"uuid": "efcf540d-1393-44e7-813b-2c0291106488", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27907", "type": "seen", "source": "https://t.me/cvedetector/23529", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27907 - IBM WebSphere Application Server SSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27907 \nPublished : April 22, 2025, 5:16 p.m. | 46\u00a0minutes ago \nDescription : IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. \nSeverity: 4.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T20:54:44.000000Z"}, {"uuid": "9892b829-ab68-4852-85cf-a7d7bf8a1f88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27086", "type": "seen", "source": "https://t.me/cvedetector/23460", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27086 - Hewlett Packard Enterprise HPE Performance Cluster Manager (HPCM) Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27086 \nPublished : April 21, 2025, 6:15 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : A vulnerability in the HPE Performance Cluster Manager (HPCM) GUI could allow an attacker to bypass authentication. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-21T22:20:12.000000Z"}, {"uuid": "0375b2e4-09c5-481e-8915-82a5fa81ae6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27812", "type": "seen", "source": "https://t.me/cvedetector/22664", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27812 - MSI Center TOCTOU Local Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2025-27812 \nPublished : April 10, 2025, 1:15 p.m. | 2\u00a0hours, 3\u00a0minutes ago \nDescription : MSI Center before 2.0.52.0 allows TOCTOU Local Privilege Escalation. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-10T17:52:17.000000Z"}, {"uuid": "280fac31-c9b4-4311-9d97-26e08577e261", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27719", "type": "seen", "source": "https://t.me/cvedetector/23031", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27719 - Cisco Device Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-27719 \nPublished : April 15, 2025, 10:15 p.m. | 1\u00a0hour, 7\u00a0minutes ago \nDescription : Unauthenticated attackers can query an API endpoint and get device details. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-16T01:49:06.000000Z"}, {"uuid": "cd30994a-3ce7-4a10-96d3-04b5e77a1df7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27929", "type": "seen", "source": "https://t.me/cvedetector/23034", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27929 - Apache HTTP Server Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-27929 \nPublished : April 15, 2025, 10:15 p.m. | 1\u00a0hour, 7\u00a0minutes ago \nDescription : Unauthenticated attackers can retrieve full list of users associated with arbitrary accounts. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-16T01:49:08.000000Z"}, {"uuid": "b3fcf6fc-a3c1-4e50-8512-37cfe7c3a583", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27927", "type": "seen", "source": "https://t.me/cvedetector/23033", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27927 - D-Link Smart Device Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-27927 \nPublished : April 15, 2025, 10:15 p.m. | 1\u00a0hour, 7\u00a0minutes ago \nDescription : An unauthenticated attackers can obtain a list of smart devices by knowing a valid username through an unprotected API. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-16T01:49:07.000000Z"}, {"uuid": "72d79ddf-92d5-4f0d-a9ab-eba30b9b7b78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27892", "type": "seen", "source": "https://t.me/cvedetector/23032", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27892 - Shopware SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27892 \nPublished : April 15, 2025, 10:15 p.m. | 1\u00a0hour, 7\u00a0minutes ago \nDescription : Shopware prior to version 6.5.8.13 is affected by a SQL injection vulnerability in the /api/search/order endpoint. NOTE: this issue exists because of a CVE-2024-22406 and CVE-2024-42357 regression. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-16T01:49:06.000000Z"}, {"uuid": "3e185de8-f48b-4056-8206-bd76668e6b26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27791", "type": "seen", "source": "https://t.me/cvedetector/23001", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27791 - Collabora Online Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27791 \nPublished : April 15, 2025, 7:16 p.m. | 56\u00a0minutes ago \nDescription : Collabora Online is a collaborative online office suite based on LibreOffice technology. In versions prior to 24.04.12.4, 23.05.19, and 22.05.25, there is a path traversal flaw in handling the CheckFileInfo BaseFileName field returned from WOPI servers. This allows for a file to be written anywhere the uid running Collabora Online can write, if such a response was supplied by a malicious WOPI server. By combining this flaw with a Time of Check, Time of Use DNS lookup issue with a WOPI server address under attacker control, it is possible to present such a response to be processed by a Collabora Online instance. This issue has been patched in versions 24.04.13.1, 23.05.19, and 22.05.25. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-15T22:28:06.000000Z"}, {"uuid": "01e0d43d-229e-43c8-8100-41060cd4bd3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27980", "type": "seen", "source": "https://t.me/cvedetector/22981", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27980 - Cashbook File Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27980 \nPublished : April 15, 2025, 3:16 p.m. | 2\u00a0hours ago \nDescription : cashbook v4.0.3 has an arbitrary file read vulnerability in /api/entry/flow/invoice/show?invoice=. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-15T19:57:25.000000Z"}, {"uuid": "099bc9dc-d6fd-454b-a3ce-311488b1db25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27009", "type": "seen", "source": "https://t.me/cvedetector/22841", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27009 - Allegro My Auctions CSRF Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2025-27009 \nPublished : April 14, 2025, 11:15 a.m. | 1\u00a0hour, 9\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in wphocus My auctions allegro allows Stored XSS.This issue affects My auctions allegro: from n/a through 3.6.20. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-14T14:40:22.000000Z"}, {"uuid": "f54d62f0-4f26-475c-a5fd-f8bd33943a9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "seen", "source": "https://t.me/cvedetector/24205", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27007 - Brainstorm Force SureTriggers Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27007 \nPublished : May 1, 2025, 11:15 a.m. | 1\u00a0hour ago \nDescription : Incorrect Privilege Assignment vulnerability in Brainstorm Force SureTriggers allows Privilege Escalation.This issue affects SureTriggers: from n/a through 1.0.82. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-01T14:49:50.000000Z"}, {"uuid": "e56911cc-0209-4776-9168-98b9b46e9163", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27611", "type": "seen", "source": "https://t.me/cvedetector/24158", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27611 - Base-x Unvalidated User Input Address Manipulation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27611 \nPublished : April 30, 2025, 8:15 p.m. | 1\u00a0hour, 48\u00a0minutes ago \nDescription : base-x is a base encoder and decoder of any given alphabet using bitcoin style leading zero compression. Versions 4.0.0, 5.0.0, and all prior to 3.0.11, are vulnerable to attackers potentially deceiving users into sending funds to an unintended address. This issue has been patched in versions 3.0.11, 4.0.1, and 5.0.1. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-01T00:36:57.000000Z"}, {"uuid": "a292c992-9fe2-42ae-b37e-7787f5eda606", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27409", "type": "seen", "source": "https://t.me/cvedetector/24110", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27409 - Joplin Server Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27409 \nPublished : April 30, 2025, 3:16 p.m. | 28\u00a0minutes ago \nDescription : Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks. Prior to version 3.3.3, path traversal is possible in Joplin Server if static file path starts with `css/pluginAssets` or `js/pluginAssets`. The `findLocalFile` function in the `default route` calls `localFileFromUrl` to check for special `pluginAssets` paths. If the function returns a path, the result is returned directly, without checking for path traversal. The vulnerability allows attackers to read files outside the intended directories. This issue has been patched in version 3.3.3. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-30T17:55:09.000000Z"}, {"uuid": "e82fd9f5-89c0-4314-aaeb-c3b1895afff6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27532", "type": "seen", "source": "https://t.me/cvedetector/24095", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27532 - \"ctrlX OS Web Application Backup & Restore Authentication Bypass\"\", \n  \"Content\": \"CVE ID : CVE-2025-27532 \nPublished : April 30, 2025, 12:15 p.m. | 1\u00a0hour, 28\u00a0minutes ago \nDescription : A vulnerability in the \u201cBackup & Restore\u201d functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to access secret information via multiple crafted HTTP requests. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-30T16:14:34.000000Z"}, {"uuid": "c0ebde8b-7088-4800-98bc-a82283e999dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27134", "type": "seen", "source": "https://t.me/cvedetector/24117", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27134 - Joplin Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27134 \nPublished : April 30, 2025, 3:16 p.m. | 28\u00a0minutes ago \nDescription : Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks. Prior to version 3.3.3, a privilege escalation vulnerability exists in the Joplin server, allowing non-admin users to exploit the API endpoint `PATCH /api/users/:id` to set the `is_admin` field to 1. The vulnerability allows malicious low-privileged users to perform administrative actions without proper authorization. This issue has been patched in version 3.3.3. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-30T17:55:17.000000Z"}, {"uuid": "53e9886f-9546-4c15-9781-d29693797b29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27082", "type": "seen", "source": "https://t.me/cvedetector/22484", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27082 - Fortinet AOS-10 GW and AOS-8 Controller/Mobility Conductor Arbitrary File Write Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27082 \nPublished : April 8, 2025, 5:15 p.m. | 17\u00a0minutes ago \nDescription : Arbitrary File Write vulnerabilities exist in the web-based management interface of both the AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploitation could allow an Authenticated attacker to upload arbitrary files and execute arbitrary commands on the underlying host operating system. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-08T19:51:34.000000Z"}, {"uuid": "4e94a036-0320-409d-b0c3-470dc99105c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27391", "type": "seen", "source": "https://t.me/cvedetector/22561", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27391 - Apache ActiveMQ Artemis Sensitive Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-27391 \nPublished : April 9, 2025, 3:16 p.m. | 1\u00a0hour, 9\u00a0minutes ago \nDescription : Insertion of Sensitive Information into Log File vulnerability in Apache ActiveMQ Artemis. All the values of the broker properties are\u00a0logged when the org.apache.activemq.artemis.core.config.impl.ConfigurationImpl logger has the\u00a0debug level enabled.  \n  \nThis issue affects Apache ActiveMQ Artemis: from 1.5.1 before 2.40.0. It can be mitigated by restricting log access to only trusted users.  \n  \nUsers are recommended to upgrade to version 2.40.0, which fixes the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-09T18:26:46.000000Z"}, {"uuid": "1a543fb0-6586-406f-a49e-545abf8e9f8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27084", "type": "seen", "source": "https://t.me/cvedetector/22482", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27084 - Aruba Captive Portal Reflected Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27084 \nPublished : April 8, 2025, 5:15 p.m. | 17\u00a0minutes ago \nDescription : A vulnerability in the Captive Portal of an AOS-10 GW and AOS-8 Controller/Mobility Conductor could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack. Successful exploitation could enable the attacker to execute arbitrary script code in the victim's browser within the context of the affected interface. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-08T19:51:32.000000Z"}, {"uuid": "dbdd7eef-7980-464c-8a88-bae08bfecc0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27797", "type": "seen", "source": "https://t.me/cvedetector/22549", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27797 - Wi-Fi AP UNIT AC-WPS-11ac series OS Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27797 \nPublished : April 9, 2025, 9:15 a.m. | 48\u00a0minutes ago \nDescription : OS command injection vulnerability in the specific service exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If exploited, an arbitrary OS command may be executed by a remote attacker who can log in to the product. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-09T12:35:34.000000Z"}, {"uuid": "57f11888-883e-4cd8-8dd0-f73d56c06bdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27722", "type": "seen", "source": "https://t.me/cvedetector/22548", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27722 - Wi-Fi AP UNIT AC-WPS-11ac Series Cleartext Transmission of Sensitive Information Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-27722 \nPublished : April 9, 2025, 9:15 a.m. | 48\u00a0minutes ago \nDescription : Cleartext transmission of sensitive information issue exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If exploited, a man-in-the-middle attack may allow a remote unauthenticated attacker to eavesdrop the communication and obtain the authentication information. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-09T12:35:33.000000Z"}, {"uuid": "c68cf7df-c990-4435-9048-6324be6733b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27934", "type": "seen", "source": "https://t.me/cvedetector/22543", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27934 - Wi-Fi AP UNIT 'AC-WPS-11ac series' Authentication Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27934 \nPublished : April 9, 2025, 9:15 a.m. | 47\u00a0minutes ago \nDescription : Information disclosure of authentication information in the specific service vulnerability exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If exploited, a remote unauthenticated attacker may obtain the product authentication information. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-09T12:35:26.000000Z"}, {"uuid": "5b4be330-4121-4e34-af3a-bc8c5f5f8357", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27190", "type": "seen", "source": "https://t.me/cvedetector/22516", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27190 - Adobe Commerce Improper Access Control Security Feature Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-27190 \nPublished : April 8, 2025, 9:15 p.m. | 19\u00a0minutes ago \nDescription : Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-09T00:02:45.000000Z"}, {"uuid": "4d4232eb-4019-4062-a5aa-8a2dc067c10e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27189", "type": "seen", "source": "https://t.me/cvedetector/22515", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27189 - Adobe Commerce CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27189 \nPublished : April 8, 2025, 9:15 p.m. | 19\u00a0minutes ago \nDescription : Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could be exploited to cause a denial-of-service condition. An attacker could trick a logged-in user into submitting a forged request to the vulnerable application, which may disrupt service availability. Exploitation of this issue requires user interaction, typically in the form of clicking a malicious link or visiting an attacker-controlled website. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-09T00:02:44.000000Z"}, {"uuid": "8b981d21-4718-4705-b3fd-d05a58120481", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27188", "type": "seen", "source": "https://t.me/cvedetector/22514", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27188 - Adobe Commerce Privilege Escalation Improper Authorization\", \n  \"Content\": \"CVE ID : CVE-2025-27188 \nPublished : April 8, 2025, 9:15 p.m. | 19\u00a0minutes ago \nDescription : Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Authorization vulnerability that could result in Privilege escalation. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-09T00:02:43.000000Z"}, {"uuid": "2ecd0fd4-2c18-4045-b5ac-7c54f26df8a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27191", "type": "seen", "source": "https://t.me/cvedetector/22513", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27191 - Adobe Commerce Improper Access Control Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-27191 \nPublished : April 8, 2025, 9:15 p.m. | 19\u00a0minutes ago \nDescription : Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-09T00:02:42.000000Z"}, {"uuid": "3c9bb1d2-86b5-4241-a919-22a8ab819966", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27192", "type": "seen", "source": "https://t.me/cvedetector/22512", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27192 - Adobe Commerce Insufficiently Protected Credentials Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-27192 \nPublished : April 8, 2025, 9:15 p.m. | 19\u00a0minutes ago \nDescription : Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Insufficiently Protected Credentials vulnerability that could lead to a security feature bypass. A high privileged attacker could exploit this vulnerability to gain unauthorized access to protected resources by obtaining sensitive credential information. Exploitation of this issue does not require user interaction. \nSeverity: 2.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-09T00:02:42.000000Z"}, {"uuid": "6a9708db-4b60-47fe-91d6-eff5f408ad0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27442", "type": "seen", "source": "https://t.me/cvedetector/22480", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27442 - Zoom Workplace Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27442 \nPublished : April 8, 2025, 5:15 p.m. | 17\u00a0minutes ago \nDescription : Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via adjacent network access. \nSeverity: 4.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-08T19:51:28.000000Z"}, {"uuid": "f716223f-fc1e-4bf5-96d8-e4bc1614e51d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27441", "type": "seen", "source": "https://t.me/cvedetector/22479", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27441 - Zoom Workplace Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27441 \nPublished : April 8, 2025, 5:15 p.m. | 17\u00a0minutes ago \nDescription : Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via adjacent network access. \nSeverity: 4.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-08T19:51:27.000000Z"}, {"uuid": "cebab40f-9322-4c40-8c52-a92ea42ac135", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27085", "type": "seen", "source": "https://t.me/cvedetector/22483", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27085 - AOS-10 GW and AOS-8 Controller/Mobility Conductor File Download Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27085 \nPublished : April 8, 2025, 5:15 p.m. | 17\u00a0minutes ago \nDescription : Multiple vulnerabilities exist in the web-based management interface of AOS-10 GW and AOS-8 Controller/Mobility Conductor. Successful exploitation of these vulnerabilities could allow an authenticated, remote attacker to download arbitrary files from the filesystem of an affected device. \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-08T19:51:33.000000Z"}, {"uuid": "8c5da85a-100b-40cb-a652-bddd5b63f001", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27083", "type": "seen", "source": "https://t.me/cvedetector/22481", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27083 - AOS-10 GW and AOS-8 Controller/Mobility Conductor Command Injection\", \n  \"Content\": \"CVE ID : CVE-2025-27083 \nPublished : April 8, 2025, 5:15 p.m. | 17\u00a0minutes ago \nDescription : Authenticated command injection vulnerabilities exist in the AOS-10 GW and AOS-8 Controller/Mobility Conductor web-based management interface. Successful exploitation of these vulnerabilities allows an Authenticated attacker to execute arbitrary commands as a privileged user on the underlying operating system. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-08T19:51:29.000000Z"}, {"uuid": "b8da10c8-8c92-4efb-bcf1-ec2fff6425e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27443", "type": "seen", "source": "https://t.me/cvedetector/22475", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27443 - Zoom Workplace Apps for Windows - Insecure Default Variable Initialization Local Integrity Loss\", \n  \"Content\": \"CVE ID : CVE-2025-27443 \nPublished : April 8, 2025, 5:15 p.m. | 17\u00a0minutes ago \nDescription : Insecure default variable initialization in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a loss of integrity via local access. \nSeverity: 2.8 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-08T19:51:20.000000Z"}, {"uuid": "8f9b55b0-e2a1-4afb-b6a2-db27c92b0dfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27435", "type": "seen", "source": "https://t.me/cvedetector/22429", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27435 - SAP Commerce Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27435 \nPublished : April 8, 2025, 8:15 a.m. | 1\u00a0hour, 7\u00a0minutes ago \nDescription : Under specific conditions and prerequisites, an unauthenticated attacker could access customer coupon codes exposed in the URL parameters of the Coupon Campaign URL in SAP Commerce. This could allow the attacker to use the disclosed coupon code, hence posing a low impact on confidentiality and integrity of the application. \nSeverity: 4.2 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-08T11:29:19.000000Z"}, {"uuid": "8b9248cd-b5a8-4836-b104-0850e64be396", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27437", "type": "seen", "source": "https://t.me/cvedetector/22426", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27437 - SAP NetWeaver Application Server ABAP Missing Authorization Check Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27437 \nPublished : April 8, 2025, 8:15 a.m. | 1\u00a0hour, 7\u00a0minutes ago \nDescription : A Missing Authorization Check vulnerability exists in the Virus Scanner Interface of SAP NetWeaver Application Server ABAP. Because of this, an attacker authenticated as a non-administrative user can initiate a transaction, allowing them to access but not modify non-sensitive data without further authorization and with no effect on availability. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-08T11:29:14.000000Z"}, {"uuid": "5923406e-9989-4067-ae00-a62128e77191", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27429", "type": "seen", "source": "https://t.me/cvedetector/22425", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27429 - SAP S/4HANA ABAP Code Injection Backdoor\", \n  \"Content\": \"CVE ID : CVE-2025-27429 \nPublished : April 8, 2025, 8:15 a.m. | 1\u00a0hour, 7\u00a0minutes ago \nDescription : SAP S/4HANA allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as a backdoor, creating the risk of full system compromise, undermining the confidentiality, integrity and availability of the system. \nSeverity: 9.9 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-08T11:29:13.000000Z"}, {"uuid": "5be32dfd-3283-4245-bc1c-5b01c43ad264", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27428", "type": "seen", "source": "https://t.me/cvedetector/22424", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27428 - SAP Solution Manager Directory Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27428 \nPublished : April 8, 2025, 8:15 a.m. | 1\u00a0hour, 7\u00a0minutes ago \nDescription : Due to directory traversal vulnerability, an authorized attacker could gain access to some critical information by using RFC enabled function module. Upon successful exploitation, they could read files from any managed system connected to SAP Solution Manager, leading to high impact on confidentiality. There is no impact on integrity or availability. \nSeverity: 7.7 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-08T11:29:12.000000Z"}, {"uuid": "b4a8cebf-e270-4f70-b6ba-45084a477e9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27686", "type": "seen", "source": "https://t.me/cvedetector/22305", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27686 - Dell Unisphere for PowerMax LDAP Injection\", \n  \"Content\": \"CVE ID : CVE-2025-27686 \nPublished : April 7, 2025, 2:15 p.m. | 23\u00a0minutes ago \nDescription : Dell Unisphere for PowerMax, version(s) prior to 10.2.0.9 and PowerMax version(s) prior to PowerMax 9.2.4.15, contain an Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection. \nSeverity: 2.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-07T17:04:08.000000Z"}, {"uuid": "e21d6742-ea46-47ef-bd83-fd2935302da4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27936", "type": "seen", "source": "https://t.me/cvedetector/23082", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27936 - Mattermost MS Teams Plugin Time Comparison Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27936 \nPublished : April 16, 2025, 10:15 a.m. | 1\u00a0hour, 15\u00a0minutes ago \nDescription : Mattermost Plugin MSTeams versions <2.1.0<=10.5.1\nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-16T13:31:37.000000Z"}, {"uuid": "8a1e2619-94f9-4a2a-94a9-79cee8925bd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27571", "type": "seen", "source": "https://t.me/cvedetector/23058", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27571 - Mattermost Unauthenticated Access to Archived Channel Metadata\", \n  \"Content\": \"CVE ID : CVE-2025-27571 \nPublished : April 16, 2025, 8:15 a.m. | 1\u00a0hour, 13\u00a0minutes ago \nDescription : Mattermost versions 10.5.x <=<=<=\nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-16T11:50:54.000000Z"}, {"uuid": "205097fa-0e25-4479-9169-d47fe1f5d3fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27538", "type": "seen", "source": "https://t.me/cvedetector/23057", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27538 - Mattermost MFA Enforcement Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27538 \nPublished : April 16, 2025, 8:15 a.m. | 1\u00a0hour, 13\u00a0minutes ago \nDescription : Mattermost versions 10.5.x <=<=\nSeverity: 2.2 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-16T11:50:53.000000Z"}, {"uuid": "07fd305c-4e6b-4303-ac8e-c9536af127c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27255", "type": "seen", "source": "Telegram/LTMlXkBcgqfAvHRkXVHqLXo54XwRadNr9JbGKfUTXIPZd30e", "content": "", "creation_timestamp": "2025-03-10T14:45:04.000000Z"}, {"uuid": "4606f508-b16b-415e-bdbc-8c9b2fdfa603", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27254", "type": "seen", "source": "Telegram/zB0VmyqejowsAHNAHhaVpTIIRGXJm-TssiWo4cUm3Fzjnrre", "content": "", "creation_timestamp": "2025-03-10T14:45:04.000000Z"}, {"uuid": "9ecbfa3d-fe57-4a51-86fa-deb2fe5f4aef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2782", "type": "seen", "source": "https://t.me/cvedetector/21492", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2782 - WatchGuard Terminal Services Agent Directory Permissions Escalation\", \n  \"Content\": \"CVE ID : CVE-2025-2782 \nPublished : March 28, 2025, 11:15 p.m. | 1\u00a0hour, 34\u00a0minutes ago \nDescription : The WatchGuard Terminal Services Agent on Windows does not properly configure directory permissions when installed in a non-default directory. This could allow an authenticated local attacker to escalate to SYSTEM privileges on a vulnerable system.  \n  \n  \n  \nThis issue affects Terminal Services Agent: from 12.0 through 12.10. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-29T02:07:17.000000Z"}, {"uuid": "b517107b-5dab-4b67-a957-8467a320f9da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2781", "type": "seen", "source": "https://t.me/cvedetector/21491", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2781 - WatchGuard Mobile VPN with SSL Client Directory Permission Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2781 \nPublished : March 28, 2025, 11:15 p.m. | 1\u00a0hour, 34\u00a0minutes ago \nDescription : The WatchGuard Mobile VPN with SSL Client on Windows does not properly configure directory permissions when installed in a non-default directory. This could allow an authenticated local attacker to escalate to SYSTEM privileges on a vulnerable system.  \n  \n  \n  \nThis issue affects Mobile VPN with SSL Client: from 11.0 through 12.11. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-29T02:07:17.000000Z"}, {"uuid": "49e9fab2-bb72-4493-8dd7-0db60abb207b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27932", "type": "seen", "source": "https://t.me/cvedetector/21388", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27932 - HGW-BL1500HM Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27932 \nPublished : March 28, 2025, 9:15 a.m. | 1\u00a0hour, 1\u00a0minute ago \nDescription : Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in the file deletion process of the USB storage file-sharing function of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnerability is exploited, an attacker may delete a file on the device or cause a denial of service (DoS) condition. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-28T11:53:29.000000Z"}, {"uuid": "7229dcd9-2abe-476a-a4bd-98e64ed005bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27726", "type": "seen", "source": "https://t.me/cvedetector/21387", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27726 - HGW-BL1500HM Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27726 \nPublished : March 28, 2025, 9:15 a.m. | 1\u00a0hour, 1\u00a0minute ago \nDescription : Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in the file download process of the USB storage file-sharing function of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnerability is exploited, the product's files may be obtained and/or altered by a crafted HTTP request to specific functions of the product from a device connected to the LAN side. \nSeverity: 2.1 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-28T11:53:25.000000Z"}, {"uuid": "ee1815bb-5656-45f3-96df-310ddd9fbba9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27718", "type": "seen", "source": "https://t.me/cvedetector/21386", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27718 - HGW-BL1500HM Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27718 \nPublished : March 28, 2025, 9:15 a.m. | 1\u00a0hour, 1\u00a0minute ago \nDescription : Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in the file upload process of the USB storage file-sharing function of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnerability is exploited, the product's files may be obtained and/or altered or arbitrary code may be executed by a crafted HTTP request to specific functions of the product from a device connected to the LAN side. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-28T11:53:24.000000Z"}, {"uuid": "c62bc6a4-ea1b-4c8b-9511-d0bc737f022f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2713", "type": "seen", "source": "https://t.me/cvedetector/21433", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2713 - Google gVisor's runsc Local Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2713 \nPublished : March 28, 2025, 4:15 p.m. | 17\u00a0minutes ago \nDescription : Google gVisor's runsc component exhibited a local privilege escalation vulnerability due to incorrect handling of file access permissions, which allowed unprivileged users to access restricted files. This occurred because the process initially ran with root-like permissions until the first fork. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-28T17:45:10.000000Z"}, {"uuid": "40c15354-9cf0-4532-99e4-88332753e302", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27253", "type": "seen", "source": "Telegram/eq9HDWKtWN6JuqRr868Bx3hQsrzKZ_JlE151rrvAjNJUphYt", "content": "", "creation_timestamp": "2025-03-10T14:45:04.000000Z"}, {"uuid": "325f2232-3ced-46b3-b832-65254889c34e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27001", "type": "seen", "source": "https://t.me/cvedetector/21411", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27001 - Shipmondo WooCommerce Sensitive Data Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27001 \nPublished : March 28, 2025, 10:15 a.m. | 2\u00a0hours, 4\u00a0minutes ago \nDescription : Insertion of Sensitive Information Into Sent Data vulnerability in Shipmondo Shipmondo \u2013 A complete shipping solution for WooCommerce allows Retrieve Embedded Sensitive Data.This issue affects Shipmondo \u2013 A complete shipping solution for WooCommerce: from n/a through 5.0.3. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-28T13:34:11.000000Z"}, {"uuid": "e92c1c77-3aff-426b-af5c-93500649517c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27716", "type": "seen", "source": "https://t.me/cvedetector/21385", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27716 - HGW-BL1500HM Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27716 \nPublished : March 28, 2025, 9:15 a.m. | 1\u00a0hour, 1\u00a0minute ago \nDescription : Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in the file/folder listing process of the USB storage file-sharing function of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnerability is exploited, the product's files may be obtained and/or altered by a crafted HTTP request to specific functions of the product from a device connected to the LAN side. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-28T11:53:23.000000Z"}, {"uuid": "797ebe1b-03bb-4b6b-a69c-24e9a765432f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27574", "type": "seen", "source": "https://t.me/cvedetector/21384", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27574 - HGW-BL1500HM Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-27574 \nPublished : March 28, 2025, 9:15 a.m. | 1\u00a0hour, 1\u00a0minute ago \nDescription : Cross-site scripting vulnerability exists in the USB storage file-sharing function of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is using the configuration page or functions accessible only from the LAN side of the product. \nSeverity: 3.6 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-28T11:53:22.000000Z"}, {"uuid": "236437c1-c1c1-416f-a915-5065a72e1935", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27567", "type": "seen", "source": "https://t.me/cvedetector/21383", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27567 - HGW-BL1500HM Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2025-27567 \nPublished : March 28, 2025, 9:15 a.m. | 1\u00a0hour, 1\u00a0minute ago \nDescription : Cross-site scripting vulnerability exists in the NickName registration screen of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is using the configuration page or functions accessible only from the LAN side of the product. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-28T11:53:21.000000Z"}, {"uuid": "6e2cdb76-dd45-43e4-9dfa-7b96a4f53174", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2786", "type": "seen", "source": "https://t.me/cvedetector/21854", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2786 - Tempo Operator Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-2786 \nPublished : April 2, 2025, 11:15 a.m. | 1\u00a0hour, 2\u00a0minutes ago \nDescription : A flaw was found in Tempo Operator, where it creates a ServiceAccount, ClusterRole, and ClusterRoleBinding when a user deploys a TempoStack or TempoMonolithic instance. This flaw allows a user with full access to their namespace to extract the ServiceAccount token and use it to submit TokenReview and SubjectAccessReview requests, potentially revealing information about other users' permissions. While this does not allow privilege escalation or impersonation, it exposes information that could aid in gathering information for further attacks. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-02T14:58:56.000000Z"}, {"uuid": "9dc136c8-90b9-423f-a9d0-b5ab0120d489", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "seen", "source": "Telegram/sgIC_4Wtl3CWhknGNhHZ5eO8agzYEhcpZkUIuq1suLzZp3er", "content": "", "creation_timestamp": "2025-03-10T14:45:04.000000Z"}, {"uuid": "a78cbe43-48cf-49ef-a17f-5fec826ce20c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27556", "type": "seen", "source": "https://t.me/cvedetector/21865", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27556 - Django Denial-of-Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27556 \nPublished : April 2, 2025, 1:15 p.m. | 1\u00a0hour, 4\u00a0minutes ago \nDescription : An issue was discovered in Django 5.1 before 5.1.8 and 5.0 before 5.0.14. The NFKC normalization is slow on Windows. As a consequence, django.contrib.auth.views.LoginView, django.contrib.auth.views.LogoutView, and django.views.i18n.set_language are subject to a potential denial-of-service attack via certain inputs with a very large number of Unicode characters. \nSeverity: 5.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-02T16:39:23.000000Z"}, {"uuid": "91898045-a792-4485-907f-97e557a48201", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "seen", "source": "Telegram/vX3g4mvJzAdJEXPeWK1wvxyjtcunDPCaU_dYys2zKstWHBAE", "content": "", "creation_timestamp": "2025-03-10T14:45:04.000000Z"}, {"uuid": "cbf6163d-d678-4b29-b96f-ed46c0db59fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27081", "type": "seen", "source": "https://t.me/cvedetector/22645", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27081 - HPE NonStop OSM Service Connection Suite Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27081 \nPublished : April 10, 2025, 9:15 a.m. | 1\u00a0hour, 48\u00a0minutes ago \nDescription : A potential security vulnerability in HPE NonStop OSM Service Connection Suite could potentially be exploited to allow a local Denial of Service. \nSeverity: 6.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-10T13:41:24.000000Z"}, {"uuid": "dd9d2ee3-ce6a-4321-8a41-a8f2a5308c8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27813", "type": "seen", "source": "https://t.me/cvedetector/22668", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27813 - MSI Center Missing PE Signature Validation\", \n  \"Content\": \"CVE ID : CVE-2025-27813 \nPublished : April 10, 2025, 1:15 p.m. | 2\u00a0hours, 3\u00a0minutes ago \nDescription : MSI Center before 2.0.52.0 has Missing PE Signature Validation. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-10T17:52:20.000000Z"}, {"uuid": "b2cd87c2-d058-4cc2-9589-317e3297aca5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27350", "type": "seen", "source": "https://t.me/cvedetector/22651", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27350 - Vice Versa Cross-site Scripting\", \n  \"Content\": \"CVE ID : CVE-2025-27350 \nPublished : April 10, 2025, 11:15 a.m. | 1\u00a0hour, 55\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hugh Mungus Vice Versa allows Reflected XSS.This issue affects Vice Versa: from n/a through 2.2.3. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-10T15:21:43.000000Z"}, {"uuid": "53ab7403-509e-4c86-9b16-1a96af53d98d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27690", "type": "seen", "source": "https://t.me/cvedetector/22615", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27690 - Dell PowerScale OneFS Default Password Vulnerability (Remote Authentication Bypass)\", \n  \"Content\": \"CVE ID : CVE-2025-27690 \nPublished : April 10, 2025, 3:15 a.m. | 1\u00a0hour, 41\u00a0minutes ago \nDescription : Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.1.0, contains a use of default password vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to the takeover of a high privileged user account. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-10T06:59:46.000000Z"}, {"uuid": "fe6d4523-f9b5-4065-981a-908b3af89d42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2780", "type": "seen", "source": "https://t.me/cvedetector/22090", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2780 - Woffice Core WordPress Remote File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2780 \nPublished : April 4, 2025, 7:15 a.m. | 39\u00a0minutes ago \nDescription : The Woffice Core plugin for WordPress, used by the Woffice Theme, is vulnerable to arbitrary file uploads due to missing file type validation in the 'saveFeaturedImage' function in all versions up to, and including, 5.4.21. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-04T10:29:24.000000Z"}, {"uuid": "a428ab4d-be41-485e-bea1-5e03421b7ca3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2797", "type": "seen", "source": "https://t.me/cvedetector/22086", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2797 - WordPress Woffice Core CSRF\", \n  \"Content\": \"CVE ID : CVE-2025-2797 \nPublished : April 4, 2025, 7:15 a.m. | 39\u00a0minutes ago \nDescription : The Woffice Core plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.4.21. This is due to missing or incorrect nonce validation on the 'woffice_handle_user_approval_actions' function. This makes it possible for unauthenticated attackers to approve registration for any user via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-04T10:29:18.000000Z"}, {"uuid": "39e9cf7a-362b-42a3-bec9-f93570787c77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2784", "type": "seen", "source": "https://t.me/cvedetector/21940", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2784 - Libsoup HTTP Response Heap Buffer Over-Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2784 \nPublished : April 3, 2025, 3:15 a.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_insight_whitespace() function. Libsoup clients may read one byte out-of-bounds in response to a crafted HTTP response by an HTTP server. \nSeverity: 7.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-03T06:52:20.000000Z"}, {"uuid": "a7ceb0db-5941-4960-adf0-0c16aa2d93bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27608", "type": "seen", "source": "https://t.me/cvedetector/21920", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27608 - Arduino IDE Theia Framework Electron Self Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-27608 \nPublished : April 2, 2025, 10:15 p.m. | 20\u00a0minutes ago \nDescription : Arduino IDE 2.x is an IDE based on the Theia IDE framework and built with Electron. A Self Cross-Site Scripting (XSS) vulnerability has been identified within the Arduino-IDE prior to version v2.3.5. The vulnerability occurs in the Additional Board Manager URLs field, which can be found in the Preferences -> Settings section of the Arduino IDE interface. In the vulnerable versions, any values entered in this field are directly displayed to the user through a notification tooltip object, without a proper output encoding routine, due to the underlying ElectronJS engine interpretation. This vulnerability exposes the input parameter to Self-XSS attacks, which may lead to security risks depending on where the malicious payload is injected. This vulnerability is fixed in 2.3.5. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-03T01:01:26.000000Z"}, {"uuid": "0dda60a9-6f23-4b49-8ca6-ac33041dd938", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27244", "type": "seen", "source": "https://t.me/cvedetector/21843", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27244 - AssetView Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27244 \nPublished : April 2, 2025, 4:15 a.m. | 1\u00a0hour, 50\u00a0minutes ago \nDescription : AssetView and AssetView CLOUD contain an issue with acquiring sensitive information from sent data to the developer. If exploited, sensitive information may be obtained by a remote unauthenticated attacker. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-02T08:17:48.000000Z"}, {"uuid": "8fe39021-f277-4505-9e6d-cb057718bbc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2779", "type": "seen", "source": "https://t.me/cvedetector/21842", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2779 - WordPress HT Script Plugin Unauthenticated Data Modification Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2779 \nPublished : April 2, 2025, 2:15 a.m. | 1\u00a0hour, 41\u00a0minutes ago \nDescription : The Insert Headers and Footers Code \u2013 HT Script plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_dismiss function in all versions up to, and including, 1.1.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update option values to 1/true on the WordPress site. This can be leveraged to update an option that would create an error on the site and deny access to legitimate users or be used to set some values to true, such as registration. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-02T06:37:30.000000Z"}, {"uuid": "4d117232-5300-4bc2-9e24-c775613b572d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27693", "type": "seen", "source": "https://t.me/cvedetector/21841", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27693 - Dell Wyse Management Suite Cross-site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27693 \nPublished : April 2, 2025, 1:15 a.m. | 32\u00a0minutes ago \nDescription : Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection. \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-02T04:07:10.000000Z"}, {"uuid": "91ac8f75-5d6a-46f6-8aae-483c71b504fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27692", "type": "seen", "source": "https://t.me/cvedetector/21840", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27692 - Dell Wyse Management Suite Unrestricted File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27692 \nPublished : April 2, 2025, 1:15 a.m. | 32\u00a0minutes ago \nDescription : Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service, Information disclosure, and Remote execution \nSeverity: 4.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-02T04:07:10.000000Z"}, {"uuid": "ca43d2a5-1983-45c1-ba31-8b90bd8ca381", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27694", "type": "seen", "source": "https://t.me/cvedetector/21836", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27694 - Dell Wyse Management Suite Insufficient Resource Pool Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27694 \nPublished : April 2, 2025, 1:15 a.m. | 32\u00a0minutes ago \nDescription : Dell Wyse Management Suite, versions prior to  WMS 5.1, contains an Insufficient Resource Pool vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-02T04:07:04.000000Z"}, {"uuid": "3a2b328e-7355-48af-924e-e0bc3327a5fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27829", "type": "seen", "source": "https://t.me/cvedetector/21775", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27829 - Stormshield Network Security Multicast Traffic Interruption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27829 \nPublished : April 1, 2025, 5:15 p.m. | 15\u00a0minutes ago \nDescription : An issue was discovered in Stormshield Network Security (SNS) 4.3.x before 4.3.35. If multicast streams are enabled on different interfaces, it may be possible to interrupt multicast traffic on some of these interfaces. That could result in a denial of the multicast routing service on the firewall. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-01T19:44:17.000000Z"}, {"uuid": "90fa668d-3988-4a13-870d-ac814a8e1d67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27130", "type": "seen", "source": "https://t.me/cvedetector/21745", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27130 - Welcart e-Commerce Deserialization Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2025-27130 \nPublished : April 1, 2025, 9:15 a.m. | 2\u00a0hours, 12\u00a0minutes ago \nDescription : Welcart e-Commerce 2.11.6 and earlier versions contains an untrusted data deserialization vulnerability. If this vulnerability is exploited, arbitrary code may be executed by a remote unauthenticated attacker who can access websites created using the product. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-01T13:37:51.000000Z"}, {"uuid": "a5674f70-7627-412b-a0d8-11f418aac74c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27427", "type": "seen", "source": "https://t.me/cvedetector/21740", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27427 - Apache ActiveMQ Artemis Routing Type Permission Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-27427 \nPublished : April 1, 2025, 8:15 a.m. | 1\u00a0hour, 12\u00a0minutes ago \nDescription : A vulnerability exists in Apache ActiveMQ Artemis whereby a user with the createDurableQueue or createNonDurableQueue permission on an address can augment the routing-type supported by that address even if said user doesn't have the createAddress permission for that particular address. When combined with the send permission and automatic queue creation a user could successfully send a message with a routing-type not supported by the address when that message should actually be rejected on the basis that the user doesn't have permission to change the routing-type of the address.  \n  \nThis issue affects Apache ActiveMQ Artemis from 2.0.0 through 2.39.0.  \n  \nUsers are recommended to upgrade to version 2.40.0 which fixes the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-01T11:57:26.000000Z"}, {"uuid": "67b636de-c0af-4d3b-951a-50dd05618a15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "seen", "source": "Telegram/1C38MQWT5QmNhRX51JHqfnd4znbmXyhdniTTIbwdT21YchYT", "content": "", "creation_timestamp": "2025-03-09T10:38:05.000000Z"}, {"uuid": "91f408f6-13fc-4a8c-bf03-9c109dde6196", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "seen", "source": "Telegram/GHRtgnKXds6z1Y6nUb711WN1Hi19P_ZCSEXaK-8RipxJGtrF", "content": "", "creation_timestamp": "2025-03-09T10:38:05.000000Z"}, {"uuid": "2c9fba23-3f5e-4b3a-abb4-7f0da7d75f42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2794", "type": "seen", "source": "https://t.me/cvedetector/21644", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2794 - Kentico Xperience Denial-of-Service (DoS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2794 \nPublished : March 31, 2025, 5:15 p.m. | 1\u00a0hour, 48\u00a0minutes ago \nDescription : An unsafe reflection vulnerability in Kentico Xperience allows an unauthenticated attacker to kill the current process, leading to a Denial-of-Service condition.  \n  \n  \n  \n  \nThis issue affects Xperience: through 13.0.180. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-31T21:43:28.000000Z"}, {"uuid": "4ccc95ed-d6be-43ab-9cd0-701b83aca0aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "exploited", "source": "https://t.me/ton618cyber/8136", "content": "Zero-Day Alert: Google Releases Chrome Patch for Exploit Used in Russian Espionage Attacks\n\nGoogle fixed Chrome zero-day CVE-2025-2783 on Mar 20 after attacks exploited a sandbox bypass flaw.\n\nThe Hacker News | thehackernews.com \u2022 Mar 26, 2025", "creation_timestamp": "2025-03-27T08:16:06.000000Z"}, {"uuid": "73c76e32-9f85-451f-b284-ff7a37bc3a4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27149", "type": "seen", "source": "https://t.me/cvedetector/21624", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27149 - Zulip Server Private Data Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-27149 \nPublished : March 31, 2025, 4:15 p.m. | 48\u00a0minutes ago \nDescription : Zulip server provides an open-source team chat that helps teams stay productive and focused. Prior to 10.0, the data export to organization administrators feature in Zulip leaks private data. The collection of user-agent types identifying specific integrations or HTTP libraries (E.g., ZulipGitlabWebhook, okhttp, or PycURL) that have been used to access any organization on the server was incorrectly included in all three export types, regardless of if they were used to access the exported organization or not. The \"public data\" and \"with consent\" exports metadata including the titles of some topics in private channels which the administrator otherwise did not have access to, and none of the users consented to exporting and metadata for which users were in a group DM together. This vulnerability is fixed in 10.0. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-31T19:12:33.000000Z"}, {"uuid": "c1023cff-eb41-4b9b-8a14-c11aee8e1529", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27095", "type": "seen", "source": "https://t.me/cvedetector/21623", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27095 - JumpServer Kubernetes Session Hijacking Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27095 \nPublished : March 31, 2025, 4:15 p.m. | 48\u00a0minutes ago \nDescription : JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.8.0 and 3.10.18, an attacker with a low-privileged account can access the Kubernetes session feature and manipulate the kubeconfig file to redirect API requests to an external server controlled by the attacker. This allows the attacker to intercept and capture the Kubernetes cluster token. This can potentially allow unauthorized access to the cluster and compromise its security. This vulnerability is fixed in 4.8.0 and 3.10.18. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-31T19:12:32.000000Z"}, {"uuid": "7835ad37-5455-4a06-bc1e-1cf20856793a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "exploited", "source": "https://t.me/ton618cyber/8020", "content": "Meta Warns of FreeType Vulnerability (CVE-2025-27363) With Active Exploitation Risk\n\nA critical FreeType vulnerability (CVE-2025-27363) with a CVSS 8.1 score may be actively exploited\u2014update to 2.13.3 now for protection.\n\nThe Hacker News | thehackernews.com \u2022 Mar 13, 2025", "creation_timestamp": "2025-03-25T00:46:04.000000Z"}, {"uuid": "a5ccd8c8-0d55-4ca9-9279-5f8d5cfa246c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27496", "type": "seen", "source": "https://t.me/cvedetector/20250", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27496 - Snowflake Driver: Client-Side Encryption Master Key Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27496 \nPublished : March 13, 2025, 7:15 p.m. | 51\u00a0minutes ago \nDescription : Snowflake, a platform for using artificial intelligence in the context of cloud computing, has a vulnerability in the Snowflake JDBC driver (\"Driver\") in versions 3.0.13 through 3.23.0 of the driver. When the logging level was set to DEBUG, the Driver would log locally the client-side encryption master key of the target stage during the execution of GET/PUT commands. This key by itself does not grant access to any sensitive data without additional access authorizations,  and is not logged server-side by Snowflake. Snowflake fixed the issue in version 3.23.1. \nSeverity: 3.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-13T21:28:42.000000Z"}, {"uuid": "8a193897-9c81-4af3-928f-df058dcbe103", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27018", "type": "seen", "source": "https://t.me/cvedetector/20631", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27018 - Apache Airflow MySQL Provider SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27018 \nPublished : March 19, 2025, 9:15 a.m. | 1\u00a0hour, 51\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Airflow MySQL Provider.  \n  \nWhen user triggered a DAG with dump_sql or load_sql functions they could pass a table parameter from a UI, that could cause SQL injection by running SQL that was not intended.  \nIt could lead to data corruption, modification and others.  \nThis issue affects Apache Airflow MySQL Provider: before 6.2.0.  \n  \nUsers are recommended to upgrade to version 6.2.0, which fixes the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-19T12:08:28.000000Z"}, {"uuid": "a275cd67-7294-4179-b17c-4be98ffda21e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27103", "type": "seen", "source": "https://t.me/cvedetector/20246", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27103 - DataEase File Deserialization Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-27103 \nPublished : March 13, 2025, 5:15 p.m. | 43\u00a0minutes ago \nDescription : DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.6, a bypass for the patch for CVE-2024-55953 allows authenticated users to read and deserialize arbitrary files through the background JDBC connection. The vulnerability has been fixed in v2.10.6. No known workarounds are available. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-13T19:48:26.000000Z"}, {"uuid": "4e9b4f7b-f99e-41e8-a167-54d0aa5b2a52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27080", "type": "seen", "source": "https://t.me/cvedetector/20602", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27080 - AOS-CX Command Line Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-27080 \nPublished : March 18, 2025, 7:15 p.m. | 1\u00a0hour, 22\u00a0minutes ago \nDescription : Vulnerabilities in the command line interface of AOS-CX could allow an authenticated remote attacker to expose sensitive information. Successful exploitation could allow an attacker to gain unauthorized access to services outside of the impacted switch, potentially leading to lateral movement involving those services. \nSeverity: 6.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-18T21:55:35.000000Z"}, {"uuid": "09e72f76-e841-4e10-9dc8-f2aa6a410c56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27688", "type": "seen", "source": "https://t.me/cvedetector/20571", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27688 - Dell ThinOS Elevation of Privileges Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27688 \nPublished : March 18, 2025, 4:15 p.m. | 16\u00a0minutes ago \nDescription : Dell ThinOS 2408 and prior, contains an improper permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-18T17:44:03.000000Z"}, {"uuid": "01ae50e4-a38b-42fa-8b5f-3e2e9c954f7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27763", "type": "seen", "source": "https://t.me/cvedetector/20551", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27763 - Apache Log4j Remote Command Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27763 \nPublished : March 17, 2025, 11:15 p.m. | 52\u00a0minutes ago \nDescription : Rejected reason: Not used \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-18T01:50:52.000000Z"}, {"uuid": "c1199dbd-8135-4751-a0fe-3d3e8d9acfca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27764", "type": "seen", "source": "https://t.me/cvedetector/20549", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27764 - VMware SSL/TLS Weakness\", \n  \"Content\": \"CVE ID : CVE-2025-27764 \nPublished : March 17, 2025, 11:15 p.m. | 52\u00a0minutes ago \nDescription : Rejected reason: Not used \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-18T01:50:51.000000Z"}, {"uuid": "b4d49e47-c2c6-421b-81f6-97853298ca04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27768", "type": "seen", "source": "https://t.me/cvedetector/20537", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27768 - Apache HTTP Server Cross-Site Request Forgery Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27768 \nPublished : March 17, 2025, 11:15 p.m. | 52\u00a0minutes ago \nDescription : Rejected reason: Not used \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-18T01:50:33.000000Z"}, {"uuid": "eb3b009a-05b6-418d-9ef9-7791d397b59c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27767", "type": "seen", "source": "https://t.me/cvedetector/20535", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27767 - Apache HTTP Server Unvalidated User Input\", \n  \"Content\": \"CVE ID : CVE-2025-27767 \nPublished : March 17, 2025, 11:15 p.m. | 52\u00a0minutes ago \nDescription : Rejected reason: Not used \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-18T01:50:32.000000Z"}, {"uuid": "b266d12a-5b1c-4529-80f7-3cb5fc16c889", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27765", "type": "seen", "source": "https://t.me/cvedetector/20533", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27765 - Apache HTTP Server Unvalidated User Input\", \n  \"Content\": \"CVE ID : CVE-2025-27765 \nPublished : March 17, 2025, 11:15 p.m. | 52\u00a0minutes ago \nDescription : Rejected reason: Not used \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-18T01:50:30.000000Z"}, {"uuid": "7b209945-f95d-485c-a7b8-29c675398ab4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27534", "type": "seen", "source": "https://t.me/cvedetector/22243", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27534 - OpenHarmony Memory Leak DOS\", \n  \"Content\": \"CVE ID : CVE-2025-27534 \nPublished : April 7, 2025, 3:15 a.m. | 1\u00a0hour, 8\u00a0minutes ago \nDescription : in OpenHarmony v5.0.2 and prior versions allow a local attacker case DOS through missing release of memory. \nSeverity: 3.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-07T07:01:20.000000Z"}, {"uuid": "03233481-50c3-4791-b3eb-5e9571ac67fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27281", "type": "seen", "source": "https://t.me/cvedetector/20379", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27281 - All In Menu SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-27281 \nPublished : March 15, 2025, 10:15 p.m. | 2\u00a0hours, 14\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in cookforweb All In Menu allows Blind SQL Injection. This issue affects All In Menu: from n/a through 1.1.5. \nSeverity: 8.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-16T02:09:34.000000Z"}, {"uuid": "ecfd86f7-2038-4e3a-ae5a-f7b900041899", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27512", "type": "published-proof-of-concept", "source": "https://t.me/cvedetector/20474", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27512 - Fedora CoreOS Zincati Polkit Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2025-27512 \nPublished : March 17, 2025, 3:15 p.m. | 33\u00a0minutes ago \nDescription : Zincati is an auto-update agent for Fedora CoreOS hosts. Zincati ships a polkit rule which allows the `zincati` system user to use the actions `org.projectatomic.rpmostree1.deploy` to deploy updates to the system and `org.projectatomic.rpmostree1.finalize-deployment` to reboot the system into the deployed update. Since Zincati v0.0.24, this polkit rule contains a logic error which broadens access of those polkit actions to any unprivileged user rather than just the `zincati` system user. In practice, this means that any unprivileged user with access to the system D-Bus socket is able to deploy older Fedora CoreOS versions (which may have other known vulnerabilities). Note that rpm-ostree enforces that the selected version must be from the same branch the system is currently on so this cannot directly be used to deploy an attacker-controlled update payload. This primarily impacts users running untrusted workloads with access to the system D-Bus socket. Note that in general, untrusted workloads should not be given this access, whether containerized or not. By default, containers do not have access to the system D-Bus socket. The logic error is fixed in Zincati v0.0.30. A workaround is to manually add a following polkit rule, instructions for which are available in the GitHub Security Advisory. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-17T17:28:05.000000Z"}, {"uuid": "e918ec2d-85f8-49f5-9e85-280f9fe539f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2738", "type": "seen", "source": "https://t.me/cvedetector/21061", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2738 - PHPGurukul Old Age Home Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2738 \nPublished : March 25, 2025, 6:15 a.m. | 1\u00a0hour, 32\u00a0minutes ago \nDescription : A vulnerability was found in PHPGurukul Old Age Home Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/manage-scdetails.php. The manipulation of the argument namesc leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T09:27:39.000000Z"}, {"uuid": "f6c5faef-164a-4496-865c-ebc9be5c9669", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2737", "type": "seen", "source": "https://t.me/cvedetector/21060", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2737 - PHPGurukul Old Age Home Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2737 \nPublished : March 25, 2025, 6:15 a.m. | 1\u00a0hour, 32\u00a0minutes ago \nDescription : A vulnerability was found in PHPGurukul Old Age Home Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/contactus.php. The manipulation of the argument pagetitle leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T09:27:35.000000Z"}, {"uuid": "a0b0b98c-24c7-46d3-8a31-37768d56fdf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27606", "type": "seen", "source": "https://t.me/cvedetector/20309", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27606 - Element Android PIN Guessing Vulnerability (Physical)\", \n  \"Content\": \"CVE ID : CVE-2025-27606 \nPublished : March 14, 2025, 5:15 p.m. | 19\u00a0minutes ago \nDescription : Element Android is an Android Matrix Client provided by Element. Element Android up to version 1.6.32 can, under certain circumstances, fail to logout the user if they input the wrong PIN more than the configured amount of times. An attacker with physical access to a device can exploit this to guess the PIN. Version 1.6.34 solves the issue. \nSeverity: 5.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-14T19:13:04.000000Z"}, {"uuid": "00e11779-2d61-469b-98f3-b03776747983", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27595", "type": "seen", "source": "https://t.me/cvedetector/20307", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27595 - Cisco Device Weak Password Hash Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27595 \nPublished : March 14, 2025, 1:15 p.m. | 2\u00a0hours, 15\u00a0minutes ago \nDescription : The device uses a weak hashing alghorithm to create the password hash. Hence, a matching password can be easily calculated by an attacker. This impacts the security and the integrity of the device. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-14T16:42:43.000000Z"}, {"uuid": "a7978265-5432-4a66-9789-4c42f4a1afc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27594", "type": "seen", "source": "https://t.me/cvedetector/20306", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27594 - Cisco Device Pass-the-Hash Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27594 \nPublished : March 14, 2025, 1:15 p.m. | 2\u00a0hours, 15\u00a0minutes ago \nDescription : The device uses an unencrypted, proprietary protocol for communication. Through this protocol, configuration data is transmitted and device authentication is performed. An attacker can thereby intercept the authentication hash and use it to log into the device using a pass-the-hash attack. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-14T16:42:42.000000Z"}, {"uuid": "81fe24d8-76a3-446c-a3e2-e1d6f0594fd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27593", "type": "seen", "source": "https://t.me/cvedetector/20305", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27593 - Cisco SDD Device Driver Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27593 \nPublished : March 14, 2025, 1:15 p.m. | 2\u00a0hours, 15\u00a0minutes ago \nDescription : The product can be used to distribute malicious code using SDD Device Drivers due to missing download verification checks, leading to code execution on target systems. \nSeverity: 9.3 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-14T16:42:38.000000Z"}, {"uuid": "84d24ee6-b11d-4cf6-ac85-66daa257b5b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2750", "type": "seen", "source": "https://t.me/cvedetector/21082", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2750 - Assimp CSM File Handler Out-of-Bounds Write Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2750 \nPublished : March 25, 2025, 8:15 a.m. | 1\u00a0hour, 33\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp of the component CSM File Handler. The manipulation leads to out-of-bounds write. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T11:08:11.000000Z"}, {"uuid": "2aa7d0bb-db70-4f53-ad19-eccf2e02b7af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27633", "type": "seen", "source": "https://t.me/cvedetector/21091", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27633 - Apache TRMTracker Cross-site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27633 \nPublished : March 25, 2025, 1:15 p.m. | 42\u00a0minutes ago \nDescription : The TRMTracker web application is vulnerable to reflected Cross-site scripting attack. The application allows client-side code injection that might be used to compromise the confidentiality and integrity of the system. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T15:18:47.000000Z"}, {"uuid": "ebcb6fb0-21fe-447f-9518-40c443522eb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27632", "type": "seen", "source": "https://t.me/cvedetector/21090", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27632 - TRMTracker Host Header Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27632 \nPublished : March 25, 2025, 1:15 p.m. | 42\u00a0minutes ago \nDescription : A Host Header Injection vulnerability in TRMTracker application may allow an attacker by modifying the host header value in an HTTP request to leverage multiple attack vectors, including defacing the site content through web-cache poisoning. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T15:18:46.000000Z"}, {"uuid": "2ea9454b-ecdb-46c2-a30c-baf9464486d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2728", "type": "seen", "source": "https://t.me/cvedetector/21029", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2728 - H3C Magic NX30 Pro/Magic NX400 Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2728 \nPublished : March 25, 2025, 3:15 a.m. | 23\u00a0minutes ago \nDescription : A vulnerability has been found in H3C Magic NX30 Pro and Magic NX400 up to V100R014 and classified as critical. This vulnerability affects unknown code of the file /api/wizard/getNetworkConf. The manipulation leads to command injection. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T05:16:33.000000Z"}, {"uuid": "8bd7d7d1-8b6a-4d19-a2df-58a1ddfe6d73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2731", "type": "seen", "source": "https://t.me/cvedetector/21050", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2731 - H3C Magic Series HTTP POST Request Handler Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2731 \nPublished : March 25, 2025, 4:15 a.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /api/wizard/getDualbandSync of the component HTTP POST Request Handler. The manipulation leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T06:57:14.000000Z"}, {"uuid": "3b37ae32-687c-4683-8682-25f1da9736bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2732", "type": "seen", "source": "https://t.me/cvedetector/21049", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2732 - H3C Magic Series HTTP POST Request Handler Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2732 \nPublished : March 25, 2025, 4:15 a.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/wizard/getWifiNeighbour of the component HTTP POST Request Handler. The manipulation leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T06:57:13.000000Z"}, {"uuid": "45a228d2-1d2e-48b9-8f4a-d5d9443f5260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2789", "type": "seen", "source": "https://t.me/cvedetector/22182", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2789 - MultiVendorX Unauthenticated Table Rates Deletion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2789 \nPublished : April 5, 2025, 6:15 a.m. | 19\u00a0minutes ago \nDescription : The MultiVendorX \u2013 Empower Your WooCommerce Store with a Dynamic Multivendor Marketplace \u2013 Build the Next Amazon, eBay, Etsy plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the delete_table_rate_shipping_row function in all versions up to, and including, 4.2.19. This makes it possible for unauthenticated attackers to delete Table Rates that can impact the shipping cost calculations. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-05T09:04:04.000000Z"}, {"uuid": "06808660-7db1-4e17-9a48-85f406e1ccc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27552", "type": "seen", "source": "https://t.me/cvedetector/21173", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27552 - DBIx::Class::EncodedColumn Cryptographic Password Hashing Weakness\", \n  \"Content\": \"CVE ID : CVE-2025-27552 \nPublished : March 26, 2025, 11:15 a.m. | 1\u00a0hour, 26\u00a0minutes ago \nDescription : DBIx::Class::EncodedColumn use the rand() function, which is not cryptographically secure to salt password hashes.  \n  \nThis vulnerability is associated with program files Crypt/Eksblowfish/Bcrypt.pm.  \n  \nThis issue affects DBIx::Class::EncodedColumn until 0.00032. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T13:53:24.000000Z"}, {"uuid": "de7cc302-76b8-4b6d-899c-ca813d543f23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2798", "type": "seen", "source": "https://t.me/cvedetector/22140", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2798 - Woffice CRM for WordPress Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2798 \nPublished : April 4, 2025, 2:15 p.m. | 1\u00a0hour, 42\u00a0minutes ago \nDescription : The Woffice CRM theme for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.4.21. This is due to a misconfiguration of excluded roles during registration. This makes it possible for unauthenticated attackers to register with an Administrator role if a custom login form is being used. This can be combined with CVE-2025-2797 to bypass the user approval process if an Administrator can be tricked into taking an action such as clicking a link. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-04T18:01:27.000000Z"}, {"uuid": "7b6daeca-4231-4938-b255-3cca48479b89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2797", "type": "seen", "source": "https://t.me/cvedetector/22140", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2798 - Woffice CRM for WordPress Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2798 \nPublished : April 4, 2025, 2:15 p.m. | 1\u00a0hour, 42\u00a0minutes ago \nDescription : The Woffice CRM theme for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.4.21. This is due to a misconfiguration of excluded roles during registration. This makes it possible for unauthenticated attackers to register with an Administrator role if a custom login form is being used. This can be combined with CVE-2025-2797 to bypass the user approval process if an Administrator can be tricked into taking an action such as clicking a link. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-04T18:01:27.000000Z"}, {"uuid": "ffc61687-6291-4b1c-b107-abd7fcbe414e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27520", "type": "seen", "source": "https://t.me/cvedetector/22131", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27520 - BentoML Remote Code Execution (RCE) via Insecure Deserialization\", \n  \"Content\": \"CVE ID : CVE-2025-27520 \nPublished : April 4, 2025, 3:15 p.m. | 41\u00a0minutes ago \nDescription : BentoML is a Python library for building online serving systems optimized for AI apps and model inference. A Remote Code Execution (RCE) vulnerability caused by insecure deserialization has been identified in the latest version (v1.4.2) of BentoML. It allows any unauthenticated user to execute arbitrary code on the server. It exists an unsafe code segment in serde.py. This vulnerability is fixed in 1.4.3. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-04T18:01:15.000000Z"}, {"uuid": "c8aeda59-7de2-4fcf-ab8b-4000e570fcd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27406", "type": "seen", "source": "https://t.me/cvedetector/21182", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27406 - Icinga Reporting Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27406 \nPublished : March 26, 2025, 4:15 p.m. | 28\u00a0minutes ago \nDescription : Icinga Reporting is the central component for reporting related functionality in the monitoring web frontend and framework Icinga Web 2. A vulnerability present in versions 0.10.0 through 1.0.2 allows to set up a template that allows to embed arbitrary Javascript. This enables the attacker to act on behalf of the user, if the template is being previewed; and act on behalf of the headless browser, if a report using the template is printed to PDF. This issue has been resolved in version 1.0.3 of Icinga Reporting. As a workaround, review all templates and remove suspicious settings. \nSeverity: 7.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T18:04:05.000000Z"}, {"uuid": "85e546d2-ee35-4cf1-a7ce-a51ec6ba4c6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2735", "type": "seen", "source": "https://t.me/cvedetector/21034", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2735 - PHPGurukul Old Age Home Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2735 \nPublished : March 25, 2025, 5:15 a.m. | 23\u00a0minutes ago \nDescription : A vulnerability has been found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/add-services.php. The manipulation of the argument sertitle leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T06:56:53.000000Z"}, {"uuid": "85d47cfe-f9fe-44e1-9d89-364a9406425d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27405", "type": "seen", "source": "https://t.me/cvedetector/21186", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27405 - Icinga Web 2 Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-27405 \nPublished : March 26, 2025, 4:15 p.m. | 28\u00a0minutes ago \nDescription : Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 allows an attacker to craft a URL that, once visited by any user, allows to embed arbitrary Javascript into Icinga Web and to act on behalf of that user. This issue has been resolved in versions 2.11.5 and 2.12.3 of Icinga Web 2. As a workaround, those who have Icinga Web 2.12.2 may enable a content security policy in the application settings. \nSeverity: 7.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T18:04:08.000000Z"}, {"uuid": "38e7dc26-7bf8-4838-9473-af3dbfa7c335", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://t.me/cvedetector/21183", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2783 - Google Chrome Mojo Sandbox Escape Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2783 \nPublished : March 26, 2025, 4:15 p.m. | 28\u00a0minutes ago \nDescription : Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. (Chromium security severity: High) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T18:04:06.000000Z"}, {"uuid": "0e1d8594-14ee-46d4-9f1f-8ff48bde696d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27551", "type": "seen", "source": "https://t.me/cvedetector/21176", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27551 - DBIx::Class::EncodedColumn Cryptographically Insecure Password Hashing\", \n  \"Content\": \"CVE ID : CVE-2025-27551 \nPublished : March 26, 2025, 11:15 a.m. | 1\u00a0hour, 26\u00a0minutes ago \nDescription : DBIx::Class::EncodedColumn use the rand() function, which is not cryptographically secure to salt password hashes.  \n  \nThis vulnerability is associated with program files lib/DBIx/Class/EncodedColumn/Digest.pm.  \n  \nThis issue affects DBIx::Class::EncodedColumn until 0.00032. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T13:53:30.000000Z"}, {"uuid": "3459c582-a1d5-4206-bee3-64af79714fea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27837", "type": "seen", "source": "https://t.me/cvedetector/21120", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27837 - Ghostscript File Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27837 \nPublished : March 25, 2025, 9:15 p.m. | 1\u00a0hour, 5\u00a0minutes ago \nDescription : An issue was discovered in Artifex Ghostscript before 10.05.0. Access to arbitrary files can occur through a truncated path with invalid UTF-8 characters, for base/gp_mswin.c and base/winrtsup.cpp. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T23:40:32.000000Z"}, {"uuid": "f52a21af-b034-4791-9822-e1625d0bfe29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27836", "type": "seen", "source": "https://t.me/cvedetector/21119", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27836 - Ghostscript BJ10V Print Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2025-27836 \nPublished : March 25, 2025, 9:15 p.m. | 1\u00a0hour, 5\u00a0minutes ago \nDescription : An issue was discovered in Artifex Ghostscript before 10.05.0. The BJ10V device has a Print buffer overflow in contrib/japanese/gdev10v.c. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T23:40:31.000000Z"}, {"uuid": "2a458cb2-ebf6-4f02-8938-c45678e15eea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27835", "type": "seen", "source": "https://t.me/cvedetector/21118", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27835 - Ghostscript Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27835 \nPublished : March 25, 2025, 9:15 p.m. | 1\u00a0hour, 5\u00a0minutes ago \nDescription : An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs when converting glyphs to Unicode in psi/zbfont.c. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T23:40:30.000000Z"}, {"uuid": "141ad253-50e0-4b9c-afee-902eb4f11135", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27810", "type": "seen", "source": "https://t.me/cvedetector/21058", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27810 - Mbed TLS Uninitialized Stack Memory Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-27810 \nPublished : March 25, 2025, 6:15 a.m. | 1\u00a0hour, 32\u00a0minutes ago \nDescription : Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uninitialized stack memory to compose the TLS Finished message, potentially leading to authentication bypasses such as replays. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T09:27:33.000000Z"}, {"uuid": "d1eba241-9c64-4404-aa2d-af9a632d5ae3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2757", "type": "seen", "source": "https://t.me/cvedetector/21088", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2757 - Assimp Heap-Based Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2757 \nPublished : March 25, 2025, 10:15 a.m. | 1\u00a0hour, 41\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function AI_MD5_PARSE_STRING_IN_QUOTATION of the file code/AssetLib/MD5/MD5Parser.cpp of the component MD5 File Handler. The manipulation of the argument data leads to heap-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T13:38:31.000000Z"}, {"uuid": "5af7ad21-84e2-4b5f-ae8f-5ee52f675b26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2756", "type": "seen", "source": "https://t.me/cvedetector/21087", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2756 - \"Assimp AC3D File Handler Heap-Based Buffer Overflow Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-2756 \nPublished : March 25, 2025, 10:15 a.m. | 1\u00a0hour, 41\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::AC3DImporter::ConvertObjectSection of the file code/AssetLib/AC/ACLoader.cpp of the component AC3D File Handler. The manipulation of the argument tmp leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T13:38:27.000000Z"}, {"uuid": "97bdc14f-d6d9-46a5-bd0c-45425693f173", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27839", "type": "seen", "source": "Telegram/NGbQsQ01k7wL4_70QSPZUWccEJ64xVUTXAwvdTm10Bjgeert", "content": "", "creation_timestamp": "2025-03-08T04:36:11.000000Z"}, {"uuid": "04731379-73b9-422a-9d6a-c10929e9e4cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27834", "type": "seen", "source": "https://t.me/cvedetector/21129", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27834 - Ghostscript Type 4 Function Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27834 \nPublished : March 25, 2025, 9:15 p.m. | 1\u00a0hour, 5\u00a0minutes ago \nDescription : An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs via an oversized Type 4 function in a PDF document to pdf/pdf_func.c. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T23:40:45.000000Z"}, {"uuid": "5381c0b4-3995-481d-a93d-33adeb801928", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27833", "type": "seen", "source": "https://t.me/cvedetector/21128", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27833 - Ghostscript TTF Font Name Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2025-27833 \nPublished : March 25, 2025, 9:15 p.m. | 1\u00a0hour, 5\u00a0minutes ago \nDescription : An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs for a long TTF font name to pdf/pdf_fmap.c. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T23:40:44.000000Z"}, {"uuid": "844704e8-d69f-4435-9e82-89a62d181710", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27832", "type": "seen", "source": "https://t.me/cvedetector/21127", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27832 - Ghostscript NPDL Device Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27832 \nPublished : March 25, 2025, 9:15 p.m. | 1\u00a0hour, 5\u00a0minutes ago \nDescription : An issue was discovered in Artifex Ghostscript before 10.05.0. The NPDL device has a Compression buffer overflow for contrib/japanese/gdevnpdl.c. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T23:40:40.000000Z"}, {"uuid": "c9df8f07-f2f0-4362-83ac-ce810500e768", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27831", "type": "seen", "source": "https://t.me/cvedetector/21126", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27831 - Artifex Ghostscript Text Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27831 \nPublished : March 25, 2025, 9:15 p.m. | 1\u00a0hour, 5\u00a0minutes ago \nDescription : An issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has a text buffer overflow via long characters to devices/vector/doc_common.c. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T23:40:40.000000Z"}, {"uuid": "167271be-e16a-460d-81e4-e2a16bba4e46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27830", "type": "seen", "source": "https://t.me/cvedetector/21125", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27830 - Ghostscript Font Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27830 \nPublished : March 25, 2025, 9:15 p.m. | 1\u00a0hour, 5\u00a0minutes ago \nDescription : An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs during serialization of DollarBlend in a font, for base/write_t1.c and psi/zfapi.c. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T23:40:39.000000Z"}, {"uuid": "619d4023-b86a-4302-8017-f07033c9acdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27631", "type": "seen", "source": "https://t.me/cvedetector/21095", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27631 - \"TRMTracker LDAP Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-27631 \nPublished : March 25, 2025, 1:15 p.m. | 42\u00a0minutes ago \nDescription : The TRMTracker web application is vulnerable to LDAP injection attack potentially allowing an attacker to inject code into a query and execute remote commands that can read and update data on the website. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T15:18:53.000000Z"}, {"uuid": "455d1090-6816-4825-8aae-d3b5844e9570", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27147", "type": "seen", "source": "https://t.me/cvedetector/21106", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27147 - GLPI Inventory Plugin Unauthenticated Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2025-27147 \nPublished : March 25, 2025, 3:15 p.m. | 46\u00a0minutes ago \nDescription : The GLPI Inventory Plugin handles various types of tasks for GLPI agents, including network discovery and inventory (SNMP), software deployment, VMWare ESX host remote inventory, and data collection (files, Windows registry, WMI). Versions prior to 1.5.0 have an improper access control vulnerability. Version 1.5.0 fixes the vulnerability. \nSeverity: 8.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T17:49:14.000000Z"}, {"uuid": "837fa8c6-499d-4ec1-9a13-b819db7bc30a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2752", "type": "seen", "source": "https://t.me/cvedetector/21081", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2752 - \"Assimp CSM File Handler Out-of-Bounds Read Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-2752 \nPublished : March 25, 2025, 8:15 a.m. | 1\u00a0hour, 33\u00a0minutes ago \nDescription : A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This issue affects the function fast_atoreal_move in the library include/assimp/fast_atof.h of the component CSM File Handler. The manipulation leads to out-of-bounds read. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T11:08:10.000000Z"}, {"uuid": "26b23f81-9311-47fa-94e5-bb88d9c26439", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2751", "type": "seen", "source": "https://t.me/cvedetector/21080", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2751 - Open Asset Import Library Assimp CSM File Handler Out-of-Bounds Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2751 \nPublished : March 25, 2025, 8:15 a.m. | 1\u00a0hour, 33\u00a0minutes ago \nDescription : A vulnerability has been found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This vulnerability affects the function Assimp::CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp of the component CSM File Handler. The manipulation of the argument na leads to out-of-bounds read. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T11:08:07.000000Z"}, {"uuid": "ed121921-42e3-4331-a0d3-9f28112e30a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2733", "type": "seen", "source": "https://t.me/cvedetector/21039", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2733 - Mannaandpoem OpenManus Os Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2733 \nPublished : March 25, 2025, 5:15 a.m. | 23\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in mannaandpoem OpenManus up to 2025.3.13. This affects an unknown part of the file app/tool/python_execute.py of the component Prompt Handler. The manipulation leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T06:57:00.000000Z"}, {"uuid": "db2dee1c-d225-4e1c-b7ac-4f6a1c16c1dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2736", "type": "seen", "source": "https://t.me/cvedetector/21035", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2736 - PHPGurukul Old Age Home Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2736 \nPublished : March 25, 2025, 5:15 a.m. | 23\u00a0minutes ago \nDescription : A vulnerability was found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/bwdates-report-details.php. The manipulation of the argument fromdate leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T06:56:54.000000Z"}, {"uuid": "e1927599-c55b-4935-89aa-16cdd4ab5cfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2734", "type": "seen", "source": "https://t.me/cvedetector/21033", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2734 - PHPGurukul Old Age Home Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2734 \nPublished : March 25, 2025, 5:15 a.m. | 23\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in PHPGurukul Old Age Home Management System 1.0. Affected is an unknown function of the file /admin/aboutus.php. The manipulation of the argument pagetitle leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T06:56:53.000000Z"}, {"uuid": "28092f34-619d-4cf6-bdc6-eb291046aa27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2755", "type": "seen", "source": "https://t.me/cvedetector/21074", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2755 - \"Assimp AC3D File Handler Out-of-Bounds Read Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-2755 \nPublished : March 25, 2025, 9:15 a.m. | 33\u00a0minutes ago \nDescription : A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been rated as critical. Affected by this issue is the function Assimp::AC3DImporter::ConvertObjectSection of the file code/AssetLib/AC/ACLoader.cpp of the component AC3D File Handler. The manipulation of the argument src.entries leads to out-of-bounds read. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T11:07:59.000000Z"}, {"uuid": "39dafe42-35a7-445a-98cb-a585e6d7e368", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2754", "type": "seen", "source": "https://t.me/cvedetector/21073", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2754 - Open Asset Import Library Assimp Heap-Based Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2754 \nPublished : March 25, 2025, 9:15 a.m. | 33\u00a0minutes ago \nDescription : A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been declared as critical. Affected by this vulnerability is the function Assimp::AC3DImporter::ConvertObjectSection of the file code/AssetLib/AC/ACLoader.cpp of the component AC3D File Handler. The manipulation of the argument it leads to heap-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T11:07:58.000000Z"}, {"uuid": "172dda24-f841-465e-be4b-4202e777e3d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2753", "type": "seen", "source": "https://t.me/cvedetector/21072", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2753 - Assimp LWS File Handler Out-of-Bounds Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2753 \nPublished : March 25, 2025, 9:15 a.m. | 33\u00a0minutes ago \nDescription : A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as critical. Affected is the function SceneCombiner::MergeScenes of the file code/AssetLib/LWS/LWSLoader.cpp of the component LWS File Handler. The manipulation leads to out-of-bounds read. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T11:07:58.000000Z"}, {"uuid": "0e9e55c3-a7cd-442f-93ff-b954cbee02d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27809", "type": "seen", "source": "https://t.me/cvedetector/21063", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27809 - Mbed TLS Certificate Trust Hostname Forgery\", \n  \"Content\": \"CVE ID : CVE-2025-27809 \nPublished : March 25, 2025, 6:15 a.m. | 1\u00a0hour, 32\u00a0minutes ago \nDescription : Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls mbedtls_ssl_set_hostname. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T09:27:40.000000Z"}, {"uuid": "4e37b145-22c3-4ab5-be19-276c395de0d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2739", "type": "seen", "source": "https://t.me/cvedetector/21062", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2739 - PHPGurukul Old Age Home Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2739 \nPublished : March 25, 2025, 6:15 a.m. | 1\u00a0hour, 32\u00a0minutes ago \nDescription : A vulnerability was found in PHPGurukul Old Age Home Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/manage-services.php. The manipulation of the argument sertitle leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T09:27:39.000000Z"}, {"uuid": "460cdc68-3ddf-453f-8155-a6abf47a8ffb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2743", "type": "seen", "source": "https://t.me/cvedetector/21056", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2743 - Zhijiantianya Ruoyi-Vue-Pro Remote Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2743 \nPublished : March 25, 2025, 7:15 a.m. | 32\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, has been found in zhijiantianya ruoyi-vue-pro 2.4.1. This issue affects some unknown processing of the file /admin-api/mp/material/upload-temporary of the component Material Upload Interface. The manipulation of the argument File leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T09:27:32.000000Z"}, {"uuid": "8ec5b134-25b9-428e-91df-2b10cd08bfd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2742", "type": "seen", "source": "https://t.me/cvedetector/21055", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2742 - \"Zhijiantianya Ruoyi-Vue-Pro Remote Path Traversal Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-2742 \nPublished : March 25, 2025, 7:15 a.m. | 32\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in zhijiantianya ruoyi-vue-pro 2.4.1. This vulnerability affects unknown code of the file /admin-api/mp/material/upload-permanent of the component Material Upload Interface. The manipulation of the argument File leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T09:27:28.000000Z"}, {"uuid": "69de427d-720b-4334-9e0a-7f338cbc9484", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2740", "type": "seen", "source": "https://t.me/cvedetector/21054", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2740 - PHPGurukul Old Age Home Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2740 \nPublished : March 25, 2025, 7:15 a.m. | 32\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in PHPGurukul Old Age Home Management System 1.0. Affected is an unknown function of the file /admin/eligibility.php. The manipulation of the argument pagetitle leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T09:27:27.000000Z"}, {"uuid": "ae6c889c-aded-45b7-989d-6490112429b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2744", "type": "seen", "source": "https://t.me/cvedetector/21051", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2744 - \"Zhijiantianya Ruoyi-vue-pro Remote Path Traversal Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-2744 \nPublished : March 25, 2025, 7:15 a.m. | 32\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in zhijiantianya ruoyi-vue-pro 2.4.1. Affected is an unknown function of the file /admin-api/mp/material/upload-news-image of the component Material Upload Interface. The manipulation of the argument File leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T09:27:25.000000Z"}, {"uuid": "5b30385a-1e6c-4a4e-99f8-8aff46e1086e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2724", "type": "seen", "source": "https://t.me/cvedetector/21032", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2724 - GNOME libgsf Out-of-Bounds Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2724 \nPublished : March 25, 2025, 2:15 a.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : A vulnerability classified as problematic has been found in GNOME libgsf up to 1.14.53. Affected is the function sorting_key_copy. The manipulation of the argument Name leads to out-of-bounds read. It is possible to launch the attack on the local host. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 3.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T05:16:38.000000Z"}, {"uuid": "e46f5301-269d-4b0e-846c-45ec2b226fee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2730", "type": "seen", "source": "https://t.me/cvedetector/21031", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2730 - H3C Magic Series HTTP POST Request Handler Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2730 \nPublished : March 25, 2025, 3:15 a.m. | 23\u00a0minutes ago \nDescription : A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. It has been classified as critical. Affected is an unknown function of the file /api/wizard/getssidname of the component HTTP POST Request Handler. The manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T05:16:38.000000Z"}, {"uuid": "95037574-5f4e-4ce8-9739-f79d8e4fcf3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2729", "type": "seen", "source": "https://t.me/cvedetector/21030", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2729 - H3C Magic Series HTTP POST Request Handler Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2729 \nPublished : March 25, 2025, 3:15 a.m. | 23\u00a0minutes ago \nDescription : A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014 and classified as critical. This issue affects some unknown processing of the file /api/wizard/networkSetup of the component HTTP POST Request Handler. The manipulation leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T05:16:34.000000Z"}, {"uuid": "2bdc3f61-f0b1-4bc7-9ad4-64aec93ad909", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2727", "type": "seen", "source": "https://t.me/cvedetector/21028", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2727 - H3C Magic NX30 Pro HTTP POST Request Handler Command Injection\", \n  \"Content\": \"CVE ID : CVE-2025-2727 \nPublished : March 25, 2025, 3:15 a.m. | 23\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in H3C Magic NX30 Pro up to V100R007. This affects an unknown part of the file /api/wizard/getNetworkStatus of the component HTTP POST Request Handler. The manipulation leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T05:16:33.000000Z"}, {"uuid": "3b3746cd-0ed6-4161-8475-8aecbf985b73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2726", "type": "seen", "source": "https://t.me/cvedetector/21027", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2726 - H3C Magic Series HTTP POST Request Handler Command Injection\", \n  \"Content\": \"CVE ID : CVE-2025-2726 \nPublished : March 25, 2025, 3:15 a.m. | 23\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. Affected by this issue is some unknown functionality of the file /api/esps of the component HTTP POST Request Handler. The manipulation leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T05:16:32.000000Z"}, {"uuid": "2ca79617-51ff-491e-9fe7-c5fa3b70cd01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2725", "type": "seen", "source": "https://t.me/cvedetector/21026", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2725 - H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 HTTP POST Request Handler Command Injection\", \n  \"Content\": \"CVE ID : CVE-2025-2725 \nPublished : March 25, 2025, 3:15 a.m. | 23\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. Affected by this vulnerability is an unknown functionality of the file /api/login/auth of the component HTTP POST Request Handler. The manipulation leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T05:16:31.000000Z"}, {"uuid": "e6765e13-bbf9-4cf1-a01f-0ac713a2901e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2716", "type": "seen", "source": "https://t.me/cvedetector/21025", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2716 - China Mobile P22g-CIac Samba Path Handler Remote Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2716 \nPublished : March 24, 2025, 11:15 p.m. | 2\u00a0hours, 15\u00a0minutes ago \nDescription : A vulnerability classified as problematic was found in China Mobile P22g-CIac 1.0.00.488. This vulnerability affects unknown code of the component Samba Path Handler. The manipulation leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 2.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T02:46:15.000000Z"}, {"uuid": "07a5058e-1b7e-442d-9806-d7927e81a88f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2715", "type": "seen", "source": "https://t.me/cvedetector/21024", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2715 - timschofield webERP Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2715 \nPublished : March 24, 2025, 11:15 p.m. | 2\u00a0hours, 15\u00a0minutes ago \nDescription : A vulnerability classified as problematic has been found in timschofield webERP up to 5.0.0.rc+13. This affects an unknown part of the file ConfirmDispatch_Invoice.php of the component Confirm Dispatch and Invoice Page. The manipulation of the argument Narrative leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T02:46:15.000000Z"}, {"uuid": "82266495-bba5-45a5-a594-a59e2be9f862", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2721", "type": "seen", "source": "https://t.me/cvedetector/21019", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2721 - GNOME libgsf Heap-Based Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2721 \nPublished : March 25, 2025, 12:15 a.m. | 1\u00a0hour, 15\u00a0minutes ago \nDescription : A vulnerability was found in GNOME libgsf up to 1.14.53. It has been classified as critical. This affects the function gsf_base64_encode_simple. The manipulation of the argument size_t leads to heap-based buffer overflow. An attack has to be approached locally. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T02:46:08.000000Z"}, {"uuid": "13f69fa3-048a-4e2f-99a9-afa2f2e8b5b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2720", "type": "seen", "source": "https://t.me/cvedetector/21018", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2720 - GNOME libgsf Uninitialized Variable Use Local Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2025-2720 \nPublished : March 25, 2025, 12:15 a.m. | 1\u00a0hour, 15\u00a0minutes ago \nDescription : A vulnerability was found in GNOME libgsf up to 1.14.53 and classified as problematic. Affected by this issue is the function gsf_base64_encode_simple. The manipulation of the argument size leads to use of uninitialized variable. The attack needs to be approached locally. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 3.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T02:46:04.000000Z"}, {"uuid": "74597e32-e8ec-43e7-9f25-441c8dbed8df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2717", "type": "seen", "source": "https://t.me/cvedetector/21017", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2717 - D-Link DIR-823X HTTP POST Request Handler Os Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2717 \nPublished : March 25, 2025, 12:15 a.m. | 1\u00a0hour, 15\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in D-Link DIR-823X 240126/240802. This issue affects the function sub_41710C of the file /goform/diag_nslookup of the component HTTP POST Request Handler. The manipulation of the argument target_addr leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T02:46:04.000000Z"}, {"uuid": "ee1682fe-305c-4387-b499-c679aa89e129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2722", "type": "seen", "source": "https://t.me/cvedetector/21015", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2722 - GNOME libgsf Heap-Based Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2722 \nPublished : March 25, 2025, 1:15 a.m. | 15\u00a0minutes ago \nDescription : A vulnerability was found in GNOME libgsf up to 1.14.53. It has been declared as critical. This vulnerability affects the function gsf_prop_settings_collect_va. The manipulation of the argument n_alloced_params leads to heap-based buffer overflow. Local access is required to approach this attack. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T02:46:02.000000Z"}, {"uuid": "a23a3ed7-7aee-4ce4-8d9d-e3a9cc9b1d23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2723", "type": "seen", "source": "https://t.me/cvedetector/21014", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2723 - GNOME libgsf Heap-Based Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2723 \nPublished : March 25, 2025, 1:15 a.m. | 15\u00a0minutes ago \nDescription : A vulnerability was found in GNOME libgsf up to 1.14.53. It has been rated as critical. This issue affects the function gsf_property_settings_collec. The manipulation of the argument n_alloced_params leads to heap-based buffer overflow. Attacking locally is a requirement. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T02:46:02.000000Z"}, {"uuid": "54a19968-f7af-4621-b0c9-55ea446066fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2711", "type": "seen", "source": "https://t.me/cvedetector/21010", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2711 - Yonyou UFIDA ERP-NC Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2711 \nPublished : March 24, 2025, 9:15 p.m. | 2\u00a0hours, 7\u00a0minutes ago \nDescription : A vulnerability was found in Yonyou UFIDA ERP-NC 5.0. It has been classified as problematic. Affected is an unknown function of the file /help/systop.jsp. The manipulation of the argument langcode leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T01:05:45.000000Z"}, {"uuid": "f6342438-edd3-4b81-b035-2fa51821bca6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2710", "type": "seen", "source": "https://t.me/cvedetector/21009", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2710 - Yonyou UFIDA ERP-NC Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2710 \nPublished : March 24, 2025, 9:15 p.m. | 2\u00a0hours, 7\u00a0minutes ago \nDescription : A vulnerability was found in Yonyou UFIDA ERP-NC 5.0 and classified as problematic. This issue affects some unknown processing of the file /menu.jsp. The manipulation of the argument flag leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T01:05:44.000000Z"}, {"uuid": "59569dd4-656f-40af-96f9-ed5f57d77b38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2714", "type": "seen", "source": "https://t.me/cvedetector/21002", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2714 - JoomlaUX JUX Real Estate Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-2714 \nPublished : March 24, 2025, 10:15 p.m. | 1\u00a0hour, 7\u00a0minutes ago \nDescription : A vulnerability was found in JoomlaUX JUX Real Estate 3.4.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /extensions/realestate/index.php/agents/agent-register/addagent. The manipulation of the argument plan_id leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T01:05:36.000000Z"}, {"uuid": "061c475e-27c2-4f73-9c8e-42db4fc66791", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2712", "type": "seen", "source": "https://t.me/cvedetector/21001", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2712 - Yonyou UFIDA ERP-NC Cross Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2712 \nPublished : March 24, 2025, 10:15 p.m. | 1\u00a0hour, 7\u00a0minutes ago \nDescription : A vulnerability was found in Yonyou UFIDA ERP-NC 5.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /help/top.jsp. The manipulation of the argument langcode leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T01:05:35.000000Z"}, {"uuid": "80c2b4ac-d3ea-4f04-92d8-928fad2e8864", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2707", "type": "seen", "source": "https://t.me/cvedetector/21000", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2707 - \"Zhijiantianya Ruoyi-Vue-Pro Front-End Store Interface Remote Path Traversal Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-2707 \nPublished : March 24, 2025, 7:15 p.m. | 2\u00a0hours, 5\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in zhijiantianya ruoyi-vue-pro 2.4.1. Affected by this issue is some unknown functionality of the file /app-api/infra/file/upload of the component Front-End Store Interface. The manipulation of the argument path leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-24T22:35:17.000000Z"}, {"uuid": "e30d2f3a-96d9-4ef2-85ef-7a76b1e65e48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2706", "type": "seen", "source": "https://t.me/cvedetector/20999", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2706 - Digiwin ERP Unrestricted File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2706 \nPublished : March 24, 2025, 7:15 p.m. | 2\u00a0hours, 5\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in Digiwin ERP 5.0.1. Affected by this vulnerability is an unknown functionality of the file /Api/TinyMce/UploadAjaxAPI.ashx. The manipulation of the argument File leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-24T22:35:13.000000Z"}, {"uuid": "8af7757b-69e1-4e88-80e2-819d35fa765e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2747", "type": "seen", "source": "https://t.me/cvedetector/20998", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2747 - Kentico Xperience Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-2747 \nPublished : March 24, 2025, 7:15 p.m. | 2\u00a0hours, 5\u00a0minutes ago \nDescription : An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server component password handling for the server defined None type. Authentication bypass allows an attacker to control administrative objects.This issue affects Xperience through 13.0.178. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-24T22:35:12.000000Z"}, {"uuid": "5649baf4-c29f-416d-8396-da3c4c006b3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2746", "type": "seen", "source": "https://t.me/cvedetector/20997", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2746 - Kentico Xperience Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2746 \nPublished : March 24, 2025, 7:15 p.m. | 2\u00a0hours, 5\u00a0minutes ago \nDescription : An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server password handling of empty SHA1 usernames in digest authentication. Authentication bypass allows an attacker to control administrative objects.This issue affects Xperience through 13.0.172. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-24T22:35:11.000000Z"}, {"uuid": "558d819a-63bc-49d8-b80d-eb7b3c158375", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2749", "type": "seen", "source": "https://t.me/cvedetector/20994", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2749 - Kentico Xperience Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2749 \nPublished : March 24, 2025, 7:15 p.m. | 2\u00a0hours, 5\u00a0minutes ago \nDescription : An authenticated remote code execution in Kentico Xperience allows authenticated users Staging Sync Server to upload arbitrary data to path relative locations. This results in path traversal and arbitrary file upload, including content that can be executed server side leading to remote code execution.This issue affects Kentico Xperience through 13.0.178. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-24T22:35:06.000000Z"}, {"uuid": "84ed7204-eb5a-469b-acf7-f09d257845b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2748", "type": "seen", "source": "https://t.me/cvedetector/20993", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2748 - Kentico Xperience Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2748 \nPublished : March 24, 2025, 7:15 p.m. | 2\u00a0hours, 5\u00a0minutes ago \nDescription : The\u00a0Kentico Xperience application does not fully validate or filter files uploaded via the multiple-file upload functionality, which allows for stored XSS.This issue affects Kentico Xperience through 13.0.178. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-24T22:35:05.000000Z"}, {"uuid": "0c18cd6e-0a0c-41b7-8317-db3a06f38716", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2709", "type": "seen", "source": "https://t.me/cvedetector/20990", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2709 - Yonyou UFIDA ERP-NC Cross Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2709 \nPublished : March 24, 2025, 8:15 p.m. | 1\u00a0hour, 6\u00a0minutes ago \nDescription : A vulnerability has been found in Yonyou UFIDA ERP-NC 5.0 and classified as problematic. This vulnerability affects unknown code of the file /login.jsp. The manipulation of the argument key/redirect leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-24T22:35:03.000000Z"}, {"uuid": "732871f0-f442-4dfd-815b-2fcb3cb726b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2708", "type": "seen", "source": "https://t.me/cvedetector/20991", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2708 - Zhijiantianya Ruoyi-Vue-Pro Backend File Upload Interface Remote Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2708 \nPublished : March 24, 2025, 8:15 p.m. | 1\u00a0hour, 6\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in zhijiantianya ruoyi-vue-pro 2.4.1. This affects an unknown part of the file /admin-api/infra/file/upload of the component Backend File Upload Interface. The manipulation of the argument path leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-24T22:35:04.000000Z"}, {"uuid": "98a4ba30-8794-4cdc-82af-ef7d7855688a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2705", "type": "seen", "source": "https://t.me/cvedetector/20973", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2705 - Digiwin ERP Unrestricted File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2705 \nPublished : March 24, 2025, 4:15 p.m. | 1\u00a0hour, 2\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in Digiwin ERP 5.1. Affected is the function DoUpload/DoWebUpload of the file /Api/FileUploadApi.ashx. The manipulation of the argument File leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-24T18:24:24.000000Z"}, {"uuid": "ff4544a8-5214-4ba1-8733-3beb7274961f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27796", "type": "seen", "source": "Telegram/TicWXb6eg9Z8A7-_jG2PDaLOAWSCTMzt5oDdI6S6Dkaj7yMV", "content": "", "creation_timestamp": "2025-03-08T04:36:10.000000Z"}, {"uuid": "aa072b67-a7ed-4d0c-9d10-15b6c0035999", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2700", "type": "seen", "source": "https://t.me/cvedetector/20950", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2700 - \"Micronaut Dante Editor Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-2700 \nPublished : March 24, 2025, 9:15 a.m. | 1\u00a0hour, 46\u00a0minutes ago \nDescription : A vulnerability classified as problematic has been found in michelson Dante Editor up to 0.4.4. This affects an unknown part of the component Insert Link Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-24T12:32:50.000000Z"}, {"uuid": "eefd8f7f-fca7-4b22-a2a0-f7cd99e0d199", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2701", "type": "seen", "source": "https://t.me/cvedetector/20949", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2701 - AMTT Hotel Broadband Operation System Popen Os Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2701 \nPublished : March 24, 2025, 9:15 a.m. | 1\u00a0hour, 46\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in AMTT Hotel Broadband Operation System 1.0. This vulnerability affects the function popen of the file /manager/network/port_setup.php. The manipulation of the argument SwitchVersion/SwitchWrite/SwitchIP/SwitchIndex/SwitchState leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-24T12:32:50.000000Z"}, {"uuid": "8c04e8f7-d645-4fea-8e29-3f267355a1f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2702", "type": "seen", "source": "https://t.me/cvedetector/20948", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2702 - Softwin WMX3 Unrestricted File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2702 \nPublished : March 24, 2025, 10:15 a.m. | 46\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in Softwin WMX3 3.1. This issue affects the function ImageAdd of the file /ImageAdd.ashx. The manipulation of the argument File leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-24T12:32:49.000000Z"}, {"uuid": "c3e1b959-6ad7-4c63-9dfa-647d5c54b3cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27553", "type": "seen", "source": "https://t.me/cvedetector/20902", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27553 - Apache Commons VFS Descendant File Object Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27553 \nPublished : March 23, 2025, 3:15 p.m. | 1\u00a0hour, 9\u00a0minutes ago \nDescription : Relative Path Traversal vulnerability in Apache Commons VFS before 2.10.0.  \n  \nThe FileObject API in Commons VFS has a 'resolveFile' method that  \ntakes a 'scope' parameter. Specifying 'NameScope.DESCENDENT' promises that \"an exception is thrown if the resolved file is not a descendent of  \nthe base file\". However, when the path contains encoded \"..\"  \ncharacters (for example, \"%2E%2E/bar.txt\"), it might return file objects that are not  \na descendent of the base file, without throwing an exception.  \nThis issue affects Apache Commons VFS: before 2.10.0.  \n  \nUsers are recommended to upgrade to version 2.10.0, which fixes the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-23T18:09:21.000000Z"}, {"uuid": "abff021c-6d37-4f26-ac79-c95939747648", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27612", "type": "seen", "source": "https://t.me/cvedetector/20821", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27612 - Libcontainer Capability Elevation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27612 \nPublished : March 21, 2025, 3:15 p.m. | 1\u00a0hour, 28\u00a0minutes ago \nDescription : libcontainer is a library for container control. Prior to libcontainer 0.5.3, while creating a tenant container, the tenant builder accepts a list of capabilities to be added in the spec of tenant container. The logic here adds the given capabilities to all capabilities of main container if present in spec, otherwise simply set provided capabilities as capabilities of the tenant container. However, setting inherited caps in any case for tenant container can lead to elevation of capabilities, similar to CVE-2022-29162. This does not affect youki binary itself. This is only applicable if you are using libcontainer directly and using the tenant builder. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-21T18:29:09.000000Z"}, {"uuid": "5da0afb4-f538-42ad-8189-62f90f3cf7be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27933", "type": "seen", "source": "https://t.me/cvedetector/20801", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27933 - Mattermost Channel Conversion Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27933 \nPublished : March 21, 2025, 9:15 a.m. | 1\u00a0hour, 23\u00a0minutes ago \nDescription : Mattermost versions 10.4.x <=<=<=\nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-21T11:48:00.000000Z"}, {"uuid": "33ca966a-4b54-4fa9-a5b1-a58d05d3f166", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27715", "type": "seen", "source": "https://t.me/cvedetector/20800", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27715 - Mattermost Team Admin Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27715 \nPublished : March 21, 2025, 9:15 a.m. | 1\u00a0hour, 23\u00a0minutes ago \nDescription : Mattermost versions 9.11.x <=\nSeverity: 3.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-21T11:47:59.000000Z"}, {"uuid": "7bc829b6-7300-4348-a1f2-5cbae1392d34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27779", "type": "published-proof-of-concept", "source": "https://t.me/cvedetector/20680", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27779 - Applio Voice Conversion Tool Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27779 \nPublished : March 19, 2025, 9:15 p.m. | 16\u00a0minutes ago \nDescription : Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to unsafe deserialization in `model_blender.py` lines 20 and 21. `model_fusion_a` and `model_fusion_b` from voice_blender.py take user-supplied input (e.g. a path to a model) and pass that value to the `run_model_blender_script` and later to `model_blender` function, which loads these two models with `torch.load` in `model_blender.py (on lines 20-21 in 3.2.8-bugfix), which is vulnerable to unsafe deserialization. The issue can lead to remote code execution. A patch is available on the `main` branch of the Applio repository. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-19T23:00:33.000000Z"}, {"uuid": "3a8730fc-c41e-4c32-9e66-00df8827c511", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27888", "type": "seen", "source": "https://t.me/cvedetector/20729", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27888 - Apache Druid SSRF, XSS and Open Redirect Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27888 \nPublished : March 20, 2025, 12:15 p.m. | 1\u00a0hour, 44\u00a0minutes ago \nDescription : Severity: medium (5.8) / important  \n  \nServer-Side Request Forgery (SSRF), Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'),\u00a0URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache Druid.  \n  \nThis issue affects all previous Druid versions.  \n  \n  \nWhen using the Druid management proxy, a request that has a specially crafted URL could be used to redirect the request to an arbitrary server instead. This has the potential for XSS or XSRF. The user is required to be authenticated for this exploit. The management proxy is enabled in Druid's out-of-box configuration. It may be disabled to mitigate this vulnerability. If the management proxy is disabled, some web console features will not work properly, but core functionality is unaffected.  \n  \n  \nUsers are recommended to upgrade to Druid 31.0.2 or Druid 32.0.1, which fixes the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-20T15:43:38.000000Z"}, {"uuid": "224e42f2-918a-46e8-8940-9cdfc0bdc091", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27778", "type": "seen", "source": "https://t.me/cvedetector/20679", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27778 - Applio Voice Conversion Tool Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27778 \nPublished : March 19, 2025, 9:15 p.m. | 16\u00a0minutes ago \nDescription : Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to unsafe deserialization in `infer.py`. The issue can lead to remote code execution. As of time of publication, a fix is available on the `main` branch of the Applio repository but not attached to a numbered release. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-19T23:00:32.000000Z"}, {"uuid": "bba817c6-3c0a-4323-bf3a-5924ba8e474f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27777", "type": "seen", "source": "https://t.me/cvedetector/20678", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27777 - Applio Voice Conversion Tool SSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27777 \nPublished : March 19, 2025, 9:15 p.m. | 16\u00a0minutes ago \nDescription : Applio is a voice conversion tool. Versions 3.2.7 and prior are vulnerable to server-side request forgery (SSRF) in `model_download.py` (line 195 in 3.2.7). The blind SSRF allows for sending requests on behalf of Applio server and can be leveraged to probe for other vulnerabilities on the server itself or on other back-end systems on the internal network, that the Applio server can reach. The blind SSRF can also be coupled with a arbitrary file read (e.g., CVE-2025-27784) to read files from hosts on the internal network, that the Applio server can reach, which would make it a full SSRF. As of time of publication, no known patches are available. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-19T23:00:29.000000Z"}, {"uuid": "57f04e58-83b1-415c-aa55-a1892fbf170f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27784", "type": "seen", "source": "https://t.me/cvedetector/20678", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27777 - Applio Voice Conversion Tool SSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27777 \nPublished : March 19, 2025, 9:15 p.m. | 16\u00a0minutes ago \nDescription : Applio is a voice conversion tool. Versions 3.2.7 and prior are vulnerable to server-side request forgery (SSRF) in `model_download.py` (line 195 in 3.2.7). The blind SSRF allows for sending requests on behalf of Applio server and can be leveraged to probe for other vulnerabilities on the server itself or on other back-end systems on the internal network, that the Applio server can reach. The blind SSRF can also be coupled with a arbitrary file read (e.g., CVE-2025-27784) to read files from hosts on the internal network, that the Applio server can reach, which would make it a full SSRF. As of time of publication, no known patches are available. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-19T23:00:29.000000Z"}, {"uuid": "d7088553-7e38-4907-8588-300db1879461", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27705", "type": "seen", "source": "https://t.me/cvedetector/20687", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27705 - Absolute Secure Access Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27705 \nPublished : March 19, 2025, 8:15 p.m. | 1\u00a0hour, 16\u00a0minutes ago \nDescription : There is a cross-site scripting vulnerability in the Secure  \nAccess administrative console of Absolute Secure Access prior to version 13.53.  \nAttackers with system administrator permissions can interfere with another  \nsystem administrator\u2019s use of the management console when the second  \nadministrator logs in.  Attack complexity is high, attack requirements are  \npresent, privileges required are none, user interaction is required. The impact  \nto confidentiality is low, the impact to availability is none, and the impact  \nto system integrity is none. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-19T23:00:41.000000Z"}, {"uuid": "31829803-b0b7-4198-9cd4-c31884964669", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27785", "type": "seen", "source": "https://t.me/cvedetector/20675", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27785 - Applio Voice Conversion Tool Arbitrary File Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27785 \nPublished : March 19, 2025, 9:15 p.m. | 15\u00a0minutes ago \nDescription : Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to arbitrary file read in train.py's `export_index` function. This issue may lead to reading arbitrary files on the Applio server. It can also be used in conjunction with blind server-side request forgery to read files from servers on the internal network that the Applio server has access to. As of time of publication, no known patches are available. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-19T23:00:26.000000Z"}, {"uuid": "40dff349-f5e8-4d8f-9652-a2ecd4e12d67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27775", "type": "seen", "source": "https://t.me/cvedetector/20677", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27775 - Applio Voice Conversion Tool SSRF and Remote File Write Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27775 \nPublished : March 19, 2025, 9:15 p.m. | 16\u00a0minutes ago \nDescription : Applio is a voice conversion tool. Versions 3.2.7 and prior are vulnerable to server-side request forgery (SSRF) and file write in `model_download.py` (line 143 in 3.2.7). The blind SSRF allows for sending requests on behalf of Applio server and can be leveraged to probe for other vulnerabilities on the server itself or on other back-end systems on the internal network, that the Applio server can reach. The file write allows for writing files on the server, which can be coupled with other vulnerabilities, for example an unsafe deserialization, to achieve remote code execution on the Applio server. As of time of publication, no known patches are available. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-19T23:00:28.000000Z"}, {"uuid": "457bec7b-7119-42a4-98e7-8432296650e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27786", "type": "seen", "source": "https://t.me/cvedetector/20676", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27786 - Applio File Deletion Vulnerability (Arbitrary File Removal)\", \n  \"Content\": \"CVE ID : CVE-2025-27786 \nPublished : March 19, 2025, 9:15 p.m. | 15\u00a0minutes ago \nDescription : Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to arbitrary file removal in core.py. `output_tts_path` in tts.py takes arbitrary user input and passes it to `run_tts_script` function in core.py, which checks if the path in `output_tts_path` exists, and if yes, removes that path, which leads to arbitrary file removal. As of time of publication, no known patches are available. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-19T23:00:27.000000Z"}, {"uuid": "b9ba7430-38b9-4596-bc0b-4c2c50d75e8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27784", "type": "seen", "source": "https://t.me/cvedetector/20683", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27776 - Applio Voice Conversion Tool SSRF and File Write Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27776 \nPublished : March 19, 2025, 9:15 p.m. | 16\u00a0minutes ago \nDescription : Applio is a voice conversion tool. Versions 3.2.7 and prior are vulnerable to server-side request forgery (SSRF) and file write in `model_download.py` (line 240 in 3.2.7). The blind SSRF allows for sending requests on behalf of Applio server and can be leveraged to probe for other vulnerabilities on the server itself or on other back-end systems on the internal network, that the Applio server can reach. The blind SSRF can also be coupled with the arbitrary file read CVE-2025-27784 to read files from hosts on the internal network, that the Applio server can reach, which would make it a full SSRF. The file write allows for writing files on the server, which can be coupled with other vulnerabilities, for example an unsafe deserialization, to achieve remote code execution on the Applio server. As of time of publication, no known patches are available. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-19T23:00:36.000000Z"}, {"uuid": "b9c4e538-afe8-4d32-a24c-af7eb82ec7d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27776", "type": "seen", "source": "https://t.me/cvedetector/20683", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27776 - Applio Voice Conversion Tool SSRF and File Write Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27776 \nPublished : March 19, 2025, 9:15 p.m. | 16\u00a0minutes ago \nDescription : Applio is a voice conversion tool. Versions 3.2.7 and prior are vulnerable to server-side request forgery (SSRF) and file write in `model_download.py` (line 240 in 3.2.7). The blind SSRF allows for sending requests on behalf of Applio server and can be leveraged to probe for other vulnerabilities on the server itself or on other back-end systems on the internal network, that the Applio server can reach. The blind SSRF can also be coupled with the arbitrary file read CVE-2025-27784 to read files from hosts on the internal network, that the Applio server can reach, which would make it a full SSRF. The file write allows for writing files on the server, which can be coupled with other vulnerabilities, for example an unsafe deserialization, to achieve remote code execution on the Applio server. As of time of publication, no known patches are available. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-19T23:00:36.000000Z"}, {"uuid": "3fc6abb6-e519-43fd-98d4-1167701f5064", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27784", "type": "seen", "source": "https://t.me/cvedetector/20682", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27774 - Applio Voice Conversion Tool Server-Side Request Forgery and File Write Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27774 \nPublished : March 19, 2025, 9:15 p.m. | 16\u00a0minutes ago \nDescription : Applio is a voice conversion tool. Versions 3.2.7 and prior are vulnerable to server-side request forgery (SSRF) and file write in `model_download.py` (line 156 in 3.2.7). The blind SSRF allows for sending requests on behalf of Applio server and can be leveraged to probe for other vulnerabilities on the server itself or on other back-end systems on the internal network, that the Applio server can reach. The blind SSRF can also be coupled with the an arbitrary file read (e.g., CVE-2025-27784) to read files from hosts on the internal network, that the Applio server can reach, which would make it a full SSRF. The file write allows for writing files on the server, which can be coupled with other vulnerabilities, for example an unsafe deserialization, to achieve remote code execution on the Applio server. As of time of publication, no known patches are available. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-19T23:00:35.000000Z"}, {"uuid": "53dd8342-f251-46ff-ace1-b284a6b684e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27774", "type": "seen", "source": "https://t.me/cvedetector/20682", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27774 - Applio Voice Conversion Tool Server-Side Request Forgery and File Write Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27774 \nPublished : March 19, 2025, 9:15 p.m. | 16\u00a0minutes ago \nDescription : Applio is a voice conversion tool. Versions 3.2.7 and prior are vulnerable to server-side request forgery (SSRF) and file write in `model_download.py` (line 156 in 3.2.7). The blind SSRF allows for sending requests on behalf of Applio server and can be leveraged to probe for other vulnerabilities on the server itself or on other back-end systems on the internal network, that the Applio server can reach. The blind SSRF can also be coupled with the an arbitrary file read (e.g., CVE-2025-27784) to read files from hosts on the internal network, that the Applio server can reach, which would make it a full SSRF. The file write allows for writing files on the server, which can be coupled with other vulnerabilities, for example an unsafe deserialization, to achieve remote code execution on the Applio server. As of time of publication, no known patches are available. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-19T23:00:35.000000Z"}, {"uuid": "2a738d7b-fcf2-4c3a-9152-ca5022137abe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27780", "type": "seen", "source": "https://t.me/cvedetector/20681", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27780 - Applio Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27780 \nPublished : March 19, 2025, 9:15 p.m. | 15\u00a0minutes ago \nDescription : Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to unsafe deserialization in model_information.py. `model_name` in model_information.py takes user-supplied input (e.g. a path to a model) and pass that value to the `run_model_information_script` and later to `model_information` function, which loads that model with `torch.load` in rvc/train/process/model_information.py (on line 16 in 3.2.8-bugfix), which is vulnerable to unsafe deserialization. The issue can lead to remote code execution. A patch is available in the `main` branch of the repository. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-19T23:00:34.000000Z"}, {"uuid": "7295df55-ba03-4a50-a8ba-0727e5061230", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27784", "type": "seen", "source": "https://t.me/cvedetector/20674", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27784 - Applio Voice Conversion Tool File Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27784 \nPublished : March 19, 2025, 9:15 p.m. | 15\u00a0minutes ago \nDescription : Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to arbitrary file read in train.py's `export_pth` function. This issue may lead to reading arbitrary files on the Applio server. It can also be used in conjunction with blind server-side request forgery to read files from servers on the internal network that the Applio server has access to. As of time of publication, no known patches are available. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-19T23:00:25.000000Z"}, {"uuid": "11d0de27-560b-4876-b483-8d005d07208c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27782", "type": "seen", "source": "https://t.me/cvedetector/20672", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27782 - Applio Voice Conversion Tool Arbitrary File Write and RCE Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27782 \nPublished : March 19, 2025, 9:15 p.m. | 15\u00a0minutes ago \nDescription : Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to arbitrary file write in inference.py. This issue may lead to writing arbitrary files on the Applio server. It can also be used in conjunction with an unsafe deserialization to achieve remote code execution. As of time of publication, no known patches are available. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-19T23:00:21.000000Z"}, {"uuid": "9b09576a-aaa5-46cc-96ec-2025a771befc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27783", "type": "seen", "source": "https://t.me/cvedetector/20673", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27783 - Applio Voice Conversion Tool Remote Code Execution and Arbitrary File Write Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27783 \nPublished : March 19, 2025, 9:15 p.m. | 15\u00a0minutes ago \nDescription : Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to arbitrary file write in train.py. This issue may lead to writing arbitrary files on the Applio server. It can also be used in conjunction with an unsafe deserialization to achieve remote code execution. As of time of publication, no known patches are available. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-19T23:00:22.000000Z"}, {"uuid": "f8cfbe75-1196-4caf-972c-36b939662af6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27787", "type": "seen", "source": "https://t.me/cvedetector/20670", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27787 - Applio Path Traversal and Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27787 \nPublished : March 19, 2025, 9:15 p.m. | 15\u00a0minutes ago \nDescription : Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to denial of service (DoS) in restart.py. `model_name` in train.py takes user input, and passes it to the `stop_train` function in restart.py, which uses it construct a path to a folder with `config.json`. That `config.json` is opened and the list of values under \"process_pids\" are read. Next all the process IDs listed in the JSON are killed. Using one of the arbitrary file writes, one can  write to `logs/foobar` a `config.json` file, which contains a list of process IDs. Then one can access this endpoint to kill these processes. Since an attacker can't know what process is running on which process ID, they can send a list of hundreds of process IDs, which can kill the process that applio is using to run, as well as other, potentially important processes, which leads to DoS. Note that constructing a path with user input also enables path traversal. For example, by supplying \"../../\" in `model_name` one can access `config.json` freom locations two folders down on the server. As of time of publication, no known patches are available. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-19T23:00:19.000000Z"}, {"uuid": "2c413978-f23d-4cd6-a284-dcd538cba939", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27781", "type": "seen", "source": "https://t.me/cvedetector/20671", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27781 - Applio Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27781 \nPublished : March 19, 2025, 9:15 p.m. | 15\u00a0minutes ago \nDescription : Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to unsafe deserialization in inference.py. `model_file` in inference.py as well as `model_file` in tts.py take user-supplied input (e.g. a path to a model) and pass that value to the `change_choices` and later to `get_speakers_id` function, which loads that model with `torch.load` in inference.py (line 326 in 3.2.8-bugfix), which is vulnerable to unsafe deserialization. The issue can lead to remote code execution. A patch is available on the `main` branch of the repository. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-19T23:00:20.000000Z"}, {"uuid": "1065f21e-b3a5-4b0a-8cf1-a800072bf957", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27509", "type": "seen", "source": "https://t.me/cvedetector/19745", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27509 - Fleetdm Fleet SAML Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-27509 \nPublished : March 6, 2025, 7:15 p.m. | 1\u00a0hour, 9\u00a0minutes ago \nDescription : fleetdm/fleet is an open source device management, built on osquery. In vulnerable versions of Fleet, an attacker could craft a specially-formed SAML response to forge authentication assertions, provision a new administrative user account if Just-In-Time (JIT) provisioning is enabled, or create new accounts tied to forged assertions if f MDM enrollment is enabled. This vulnerability is fixed in 4.64.2, 4.63.2, 4.62.4, and 4.58.1. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T22:12:34.000000Z"}, {"uuid": "b03aef62-03b7-4f60-aa55-2843e72a8eef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27600", "type": "seen", "source": "https://t.me/cvedetector/19735", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27600 - FastGPT Intranet IP Request Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27600 \nPublished : March 6, 2025, 7:15 p.m. | 1\u00a0hour, 9\u00a0minutes ago \nDescription : FastGPT is a knowledge-based platform built on the LLMs. Since the web crawling plug-in does not perform intranet IP verification, an attacker can initiate an intranet IP request, causing the system to initiate a request through the intranet and potentially obtain some private data on the intranet. This issue is fixed in 4.9.0. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T22:12:20.000000Z"}, {"uuid": "2a319a8c-8d90-4943-b8d8-b1fefdf39eb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27670", "type": "seen", "source": "https://t.me/cvedetector/19602", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27670 - Vasion Print (formerly PrinterLogic) Insufficient Signature Validation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27670 \nPublished : March 5, 2025, 6:15 a.m. | 46\u00a0minutes ago \nDescription : Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Insufficient Signature Validation OVE-20230524-0014. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T08:34:57.000000Z"}, {"uuid": "26786dda-939c-42e7-b9de-d78cac45e9c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27669", "type": "seen", "source": "https://t.me/cvedetector/19601", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27669 - Vasion Print (formerly PrinterLogic) Remote Network Scanning and DoS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27669 \nPublished : March 5, 2025, 6:15 a.m. | 46\u00a0minutes ago \nDescription : Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Remote Network Scanning (XSPA)/DoS OVE-20230524-0013. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T08:34:56.000000Z"}, {"uuid": "b3063ba0-8462-49e2-8375-1b7a57c1293b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27668", "type": "seen", "source": "https://t.me/cvedetector/19600", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27668 - Vasion Print (formerly PrinterLogic) IFrame Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27668 \nPublished : March 5, 2025, 6:15 a.m. | 46\u00a0minutes ago \nDescription : Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Arbitrary Content Inclusion via Iframe OVE-20230524-0012. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T08:34:55.000000Z"}, {"uuid": "926c5ab8-a51b-461f-8d62-d519500f9540", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27667", "type": "seen", "source": "https://t.me/cvedetector/19599", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27667 - Vasion Print (formerly PrinterLogic) Administrative User Email Enumeration Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27667 \nPublished : March 5, 2025, 6:15 a.m. | 46\u00a0minutes ago \nDescription : Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Administrative User Email Enumeration OVE-20230524-0011. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T08:34:52.000000Z"}, {"uuid": "c32cc584-0401-4c0d-afb0-f93c3e1099dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27672", "type": "seen", "source": "https://t.me/cvedetector/19597", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27672 - Vasion Print OAUTH Security Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-27672 \nPublished : March 5, 2025, 6:15 a.m. | 46\u00a0minutes ago \nDescription : Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows OAUTH Security Bypass OVE-20230524-0016. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T08:34:50.000000Z"}, {"uuid": "4d11e318-c779-4950-9327-37c1e501e3e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27661", "type": "seen", "source": "https://t.me/cvedetector/19604", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27661 - Vasion Print (formerly PrinterLogic) Session Fixation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27661 \nPublished : March 5, 2025, 6:15 a.m. | 46\u00a0minutes ago \nDescription : Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Session Fixation OVE-20230524-0004. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T08:34:58.000000Z"}, {"uuid": "de997258-82a3-43b9-a15d-dac487c82e9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27411", "type": "seen", "source": "https://t.me/cvedetector/19637", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27411 - REDAXO File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27411 \nPublished : March 5, 2025, 4:15 p.m. | 1\u00a0hour, 2\u00a0minutes ago \nDescription : REDAXO is a PHP-based CMS. In Redaxo before 5.18.3, the mediapool/media page is vulnerable to arbitrary file upload. This vulnerability is fixed in 5.18.3. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T18:36:57.000000Z"}, {"uuid": "9b28286f-eed8-4011-9ad8-73ba2d60bc7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27516", "type": "seen", "source": "https://t.me/cvedetector/19664", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27516 - Jinja Template Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27516 \nPublished : March 5, 2025, 9:15 p.m. | 2\u00a0hours, 22\u00a0minutes ago \nDescription : Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in how the Jinja sandboxed environment interacts with the |attr filter allows an attacker that controls the content of a template to execute arbitrary Python code. To exploit the vulnerability, an attacker needs to control the content of a template. Whether that is the case depends on the type of application using Jinja. This vulnerability impacts users of applications which execute untrusted templates. Jinja's sandbox does catch calls to str.format and ensures they don't escape the sandbox. However, it's possible to use the |attr filter to get a reference to a string's plain format method, bypassing the sandbox. After the fix, the |attr filter no longer bypasses the environment's attribute lookup. This vulnerability is fixed in 3.1.6. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T01:18:22.000000Z"}, {"uuid": "53676a4d-d32f-4e73-81d3-9dcc5c25152f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27508", "type": "seen", "source": "https://t.me/cvedetector/19663", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27508 - Emissary Weak Cryptographic Hashing Algorithms\", \n  \"Content\": \"CVE ID : CVE-2025-27508 \nPublished : March 5, 2025, 10:15 p.m. | 1\u00a0hour, 22\u00a0minutes ago \nDescription : Emissary is a P2P based data-driven workflow engine. The ChecksumCalculator class within allows for hashing and checksum generation, but it includes or defaults to algorithms that are no longer recommended for secure cryptographic use cases (e.g., SHA-1, CRC32, and SSDEEP). These algorithms, while possibly valid for certain non-security-critical tasks, can expose users to security risks if used in scenarios where strong cryptographic guarantees are required. This issue is fixed in 8.24.0. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T01:18:19.000000Z"}, {"uuid": "fb375368-f55d-44b2-8eeb-532056857ae8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27622", "type": "seen", "source": "https://t.me/cvedetector/19662", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27622 - Jenkins Unencrypted Secret Exposure\", \n  \"Content\": \"CVE ID : CVE-2025-27622 \nPublished : March 5, 2025, 11:15 p.m. | 22\u00a0minutes ago \nDescription : Jenkins 2.499 and earlier, LTS 2.492.1 and earlier does not redact encrypted values of secrets when accessing `config.xml` of agents via REST API or CLI, allowing attackers with Agent/Extended Read permission to view encrypted values of secrets. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T01:18:18.000000Z"}, {"uuid": "ddfb54c6-b8b0-4391-bc94-cb3e56cceb91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27625", "type": "seen", "source": "https://t.me/cvedetector/19661", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27625 - Jenkins URL Redirects Allow-Path Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27625 \nPublished : March 5, 2025, 11:15 p.m. | 22\u00a0minutes ago \nDescription : In Jenkins 2.499 and earlier, LTS 2.492.1 and earlier, redirects starting with backslash (`\\`) characters are considered safe, allowing attackers to perform phishing attacks by having users go to a Jenkins URL that will forward them to a different site, because browsers interpret these characters as part of scheme-relative redirects. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T01:18:17.000000Z"}, {"uuid": "2d210f83-4f61-4b06-9f6d-c3ee5d3076be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27624", "type": "seen", "source": "https://t.me/cvedetector/19660", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27624 - Jenkins CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27624 \nPublished : March 5, 2025, 11:15 p.m. | 22\u00a0minutes ago \nDescription : A cross-site request forgery (CSRF) vulnerability in Jenkins 2.499 and earlier, LTS 2.492.1 and earlier allows attackers to have users toggle their collapsed/expanded status of sidepanel widgets (e.g., Build Queue and Build Executor Status widgets). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T01:18:16.000000Z"}, {"uuid": "751aa8c7-a930-48c5-9cc4-286d2da15ec9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27623", "type": "seen", "source": "https://t.me/cvedetector/19659", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27623 - Jenkins Unencrypted Secret Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27623 \nPublished : March 5, 2025, 11:15 p.m. | 22\u00a0minutes ago \nDescription : Jenkins 2.499 and earlier, LTS 2.492.1 and earlier does not redact encrypted values of secrets when accessing `config.xml` of views via REST API or CLI, allowing attackers with View/Read permission to view encrypted values of secrets. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T01:18:16.000000Z"}, {"uuid": "5ef86945-7d0d-4f0c-9091-ef0d9bc36ec8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27515", "type": "seen", "source": "https://t.me/cvedetector/19655", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27515 - Laravel Wildcard Validation Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-27515 \nPublished : March 5, 2025, 7:15 p.m. | 2\u00a0hours, 13\u00a0minutes ago \nDescription : Laravel is a web application framework. When using wildcard validation to validate a given file or image field (`files.*`), a user-crafted malicious request could potentially bypass the validation rules. This vulnerability is fixed in 11.44.1 and 12.1.1. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T22:47:44.000000Z"}, {"uuid": "e86ea344-251f-4302-8ccf-2e1cfaff571c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27513", "type": "seen", "source": "https://t.me/cvedetector/19654", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27513 - OpenTelemetry DoS Header Processing\", \n  \"Content\": \"CVE ID : CVE-2025-27513 \nPublished : March 5, 2025, 7:15 p.m. | 2\u00a0hours, 13\u00a0minutes ago \nDescription : OpenTelemetry dotnet is a dotnet telemetry framework. A vulnerability in OpenTelemetry.Api package 1.10.0 to 1.11.1 could cause a Denial of Service (DoS) when a tracestate and traceparent header is received. Even if an application does not explicitly use trace context propagation, receiving these headers can still trigger high CPU usage. This issue impacts any application accessible over the web or backend services that process HTTP requests containing a tracestate header. Application may experience excessive resource consumption, leading to increased latency, degraded performance, or downtime. This vulnerability is fixed in 1.11.2. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T22:47:43.000000Z"}, {"uuid": "b7f6206c-c1ca-48be-8a6c-a8fdcb1f03de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27517", "type": "seen", "source": "https://t.me/cvedetector/19652", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27517 - \"Volt Livewire Remote Code Execution Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-27517 \nPublished : March 5, 2025, 8:16 p.m. | 1\u00a0hour, 12\u00a0minutes ago \nDescription : Volt is an elegantly crafted functional API for Livewire. Malicious, user-crafted request payloads could potentially lead to remote code execution within Volt components. This vulnerability is fixed in 1.7.0. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T22:47:42.000000Z"}, {"uuid": "25648597-5dad-4459-a65f-a94827c13d42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27497", "type": "seen", "source": "https://t.me/cvedetector/19639", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27497 - OpenDJ LDAP Denial-of-Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27497 \nPublished : March 5, 2025, 4:15 p.m. | 1\u00a0hour, 2\u00a0minutes ago \nDescription : OpenDJ is an LDAPv3 compliant directory service. OpenDJ prior to 4.9.3 contains a denial-of-service (DoS) vulnerability that causes the server to become unresponsive to all LDAP requests without crashing or restarting. This issue occurs when an alias loop exists in the LDAP database. If an ldapsearch request is executed with alias dereferencing set to \"always\" on this alias entry, the server stops responding to all future requests. Fortunately, the server can be restarted without data corruption. This vulnerability is fixed in 4.9.3. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T18:36:59.000000Z"}, {"uuid": "aa177de3-a8a9-4754-8b40-d04cee610a33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27412", "type": "seen", "source": "https://t.me/cvedetector/19638", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27412 - REDAXO Reflected Cross-Site Scripting (XSS) in rex-api-result Parameter\", \n  \"Content\": \"CVE ID : CVE-2025-27412 \nPublished : March 5, 2025, 4:15 p.m. | 1\u00a0hour, 2\u00a0minutes ago \nDescription : REDAXO is a PHP-based CMS. In Redaxo from 5.0.0 through 5.18.2, the rex-api-result parameter is vulnerable to Reflected cross-site scripting (XSS) on the page of AddOns. This vulnerability is fixed in 5.18.3. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T18:36:58.000000Z"}, {"uuid": "9bf9b13f-13d6-4ec2-b453-b3fa45c68811", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27673", "type": "seen", "source": "https://t.me/cvedetector/19598", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27673 - Vasion Print (formerly PrinterLogic) Cookie Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27673 \nPublished : March 5, 2025, 6:15 a.m. | 46\u00a0minutes ago \nDescription : Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cookie Returned in Response Body OVE-20230524-0017. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T08:34:51.000000Z"}, {"uuid": "e603710e-0a5d-4844-8d40-428ae7f67010", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27679", "type": "seen", "source": "https://t.me/cvedetector/19596", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27679 - Vasion Print (formerly PrinterLogic) Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-27679 \nPublished : March 5, 2025, 6:15 a.m. | 46\u00a0minutes ago \nDescription : Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cross-Site Scripting in Badge Registration V-2023-005. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T08:34:49.000000Z"}, {"uuid": "f0e58e14-f71b-4993-9b96-098a8e870f47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27678", "type": "seen", "source": "https://t.me/cvedetector/19595", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27678 - Vasion Print (formerly PrinterLogic) Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27678 \nPublished : March 5, 2025, 6:15 a.m. | 46\u00a0minutes ago \nDescription : Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Client Remote Code Execution V-2023-001. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T08:34:49.000000Z"}, {"uuid": "5f0d45e0-86b7-424e-ad06-f94767f0459b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27671", "type": "seen", "source": "https://t.me/cvedetector/19603", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27671 - Vasion Print (formerly PrinterLogic) Device Impersonation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27671 \nPublished : March 5, 2025, 6:15 a.m. | 46\u00a0minutes ago \nDescription : Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Device Impersonation OVE-20230524-0015. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T08:34:57.000000Z"}, {"uuid": "84f91e39-8af1-4548-8038-04f48a50e4d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27675", "type": "seen", "source": "https://t.me/cvedetector/19592", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27675 - Vasion Print OpenID Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-27675 \nPublished : March 5, 2025, 6:15 a.m. | 46\u00a0minutes ago \nDescription : Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Vulnerable OpenID Implementation V-2023-004. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T08:34:43.000000Z"}, {"uuid": "d4b01ecc-a033-448f-a5a8-b895c8974a61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27674", "type": "seen", "source": "https://t.me/cvedetector/19591", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27674 - Vasion Print (formerly PrinterLogic) Hardcoded IdP Key Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27674 \nPublished : March 5, 2025, 6:15 a.m. | 46\u00a0minutes ago \nDescription : Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Hardcoded IdP Key V-2023-006. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T08:34:43.000000Z"}, {"uuid": "5df5ff71-0546-4ffc-8cdd-3f42eea0236c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27685", "type": "seen", "source": "https://t.me/cvedetector/19590", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27685 - Vasion Print (formerly PrinterLogic) Configuration File Private Key Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-27685 \nPublished : March 5, 2025, 6:15 a.m. | 46\u00a0minutes ago \nDescription : Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735 Application 20.0.1330 allows Configuration File Contains CA & Private Key V-2022-001. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T08:34:42.000000Z"}, {"uuid": "bc0a66a2-6bbf-4408-ad19-90bc2923bf38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27683", "type": "seen", "source": "https://t.me/cvedetector/19589", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27683 - Vasion Print PrinterLogic Driver Unrestricted File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27683 \nPublished : March 5, 2025, 6:15 a.m. | 46\u00a0minutes ago \nDescription : Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735 Application 20.0.1330 allows Driver Unrestricted Upload of File with Dangerous Type V-2022-006. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T08:34:38.000000Z"}, {"uuid": "32270a3c-8565-4c80-b350-1062584001d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27682", "type": "seen", "source": "https://t.me/cvedetector/19588", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27682 - Vasion Print (formerly PrinterLogic) Insecure Log Permissions Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27682 \nPublished : March 5, 2025, 6:15 a.m. | 46\u00a0minutes ago \nDescription : Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735 Application 20.0.1330 allows Insecure Log Permissions V-2022-005. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T08:34:37.000000Z"}, {"uuid": "ee145b6d-1e0c-40be-8c40-d50afd4a2629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27681", "type": "seen", "source": "https://t.me/cvedetector/19587", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27681 - Vasion Print (formerly PrinterLogic) Inter-process Security Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27681 \nPublished : March 5, 2025, 6:15 a.m. | 46\u00a0minutes ago \nDescription : Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735 Application 20.0.1330 mishandles Client Inter-process Security V-2022-004. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T08:34:36.000000Z"}, {"uuid": "037dba5c-9aa9-4dd2-a0c2-60c583ac558d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27684", "type": "seen", "source": "https://t.me/cvedetector/19586", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27684 - Vasion Print Debug Bundle Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-27684 \nPublished : March 5, 2025, 6:15 a.m. | 46\u00a0minutes ago \nDescription : Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735 Application 20.0.1330 allows Debug Bundle Contains Sensitive Data V-2022-003. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T08:34:36.000000Z"}, {"uuid": "8041d2ed-d986-47f5-9325-bebb76ea0461", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27677", "type": "seen", "source": "https://t.me/cvedetector/19594", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27677 - Vasion Print (formerly PrinterLogic) Symbolic Link Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27677 \nPublished : March 5, 2025, 6:15 a.m. | 46\u00a0minutes ago \nDescription : Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Symbolic Links For Unprivileged File Interaction V-2022-002. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T08:34:45.000000Z"}, {"uuid": "53957010-f8bc-42de-927c-576fca19cd94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27676", "type": "seen", "source": "https://t.me/cvedetector/19593", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27676 - Vasion Print Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27676 \nPublished : March 5, 2025, 6:15 a.m. | 46\u00a0minutes ago \nDescription : Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cross-Site Scripting in Reports V-2023-002. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T08:34:44.000000Z"}, {"uuid": "54418ec3-e870-478e-bd80-af688aed34e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27680", "type": "seen", "source": "https://t.me/cvedetector/19585", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27680 - Vasion Print (formerly PrinterLogic) Firmware Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-27680 \nPublished : March 5, 2025, 6:15 a.m. | 46\u00a0minutes ago \nDescription : Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.750 Application 20.0.1442 allows Insecure Firmware Image with Insufficient Verification of Data Authenticity V-2024-004. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T08:34:35.000000Z"}, {"uuid": "aeefc4d7-a411-4735-9d00-6038340b1f13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "exploited", "source": "https://t.me/cibsecurity/84584", "content": "\ud83d\udd8b\ufe0f Update ASAP: Google Fixes Android Flaw (CVE-2025-27363) Exploited by Attackers \ud83d\udd8b\ufe0f\n\nGoogle has released its monthly security updates for Android with fixes for 46 security flaws, including one vulnerability that it said has been exploited in the wild. The vulnerability in question is CVE202527363 CVSS score 8.1, a highseverity flaw in the System component that could lead to local code execution without requiring any additional execution privileges. \"The most severe of.\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"The Hacker News\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "creation_timestamp": "2025-05-06T15:52:51.000000Z"}, {"uuid": "323fea75-829b-40ec-aaa1-e413b26d9c67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "exploited", "source": "Telegram/t7N595D8Np5533KP2uaJ9Ioh3_EteZIMXITqasPu6pU0YA", "content": "", "creation_timestamp": "2025-03-14T10:55:03.000000Z"}, {"uuid": "306af495-5534-4089-a999-ade63c7b26e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2778", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/9219", "content": "#exploit\nCVE-2025-2775 CVE-2025-2776 CVE-2025-2777 CVE-2025-2778\nSysOwned, Your Friendly Support Ticket - SysAid On-Premise Pre-Auth RCE Chain\n]-> https://labs.watchtowr.com/sysowned-your-friendly-rce-support-ticket/\n\n]-> https://github.com/watchtowrlabs/watchTowr-vs-SysAid-PreAuth-RCE-Chain", "creation_timestamp": "2025-05-10T02:44:20.000000Z"}, {"uuid": "0c13a08f-8179-4fbc-8f15-4cde921313e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2777", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/9219", "content": "#exploit\nCVE-2025-2775 CVE-2025-2776 CVE-2025-2777 CVE-2025-2778\nSysOwned, Your Friendly Support Ticket - SysAid On-Premise Pre-Auth RCE Chain\n]-> https://labs.watchtowr.com/sysowned-your-friendly-rce-support-ticket/\n\n]-> https://github.com/watchtowrlabs/watchTowr-vs-SysAid-PreAuth-RCE-Chain", "creation_timestamp": "2025-05-10T02:44:20.000000Z"}, {"uuid": "91350d3a-3ba9-458e-928f-e889d1173810", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/9219", "content": "#exploit\nCVE-2025-2775 CVE-2025-2776 CVE-2025-2777 CVE-2025-2778\nSysOwned, Your Friendly Support Ticket - SysAid On-Premise Pre-Auth RCE Chain\n]-> https://labs.watchtowr.com/sysowned-your-friendly-rce-support-ticket/\n\n]-> https://github.com/watchtowrlabs/watchTowr-vs-SysAid-PreAuth-RCE-Chain", "creation_timestamp": "2025-05-10T02:44:20.000000Z"}, {"uuid": "8801468a-3cb0-4c98-99ad-c55d33f8c4aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/9219", "content": "#exploit\nCVE-2025-2775 CVE-2025-2776 CVE-2025-2777 CVE-2025-2778\nSysOwned, Your Friendly Support Ticket - SysAid On-Premise Pre-Auth RCE Chain\n]-> https://labs.watchtowr.com/sysowned-your-friendly-rce-support-ticket/\n\n]-> https://github.com/watchtowrlabs/watchTowr-vs-SysAid-PreAuth-RCE-Chain", "creation_timestamp": "2025-05-10T02:44:20.000000Z"}, {"uuid": "d698630a-c00c-43dc-8cc8-d846f8f33a38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "exploited", "source": "https://t.me/ton618cyber/8432", "content": "\u26a1 Weekly Recap: Chrome 0-Day, IngressNightmare, Solar Bugs, DNS Tactics, and More\n\nGoogle patched a Chrome 0-day (CVE-2025-2783) used in live attacks on Russian targets via phishing.\n\nThe Hacker News | thehackernews.com \u2022 Mar 31, 2025", "creation_timestamp": "2025-04-01T06:24:17.000000Z"}, {"uuid": "9b477500-92b7-4871-8a31-47c0bb70b85c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27610", "type": "seen", "source": "https://t.me/ton618cyber/3637", "content": "Researchers Identify Rack::Static Vulnerability Enabling Data Breaches in Ruby Servers\n\nCVE-2025-27610 allows unauthenticated access to sensitive files in Rack Ruby apps due to root misconfig.\n\nThe Hacker News | thehackernews\u200b.com \u2022 Apr 25, 2025", "creation_timestamp": "2025-04-26T03:07:08.000000Z"}, {"uuid": "a38620bb-9bb0-4757-b21a-e3d1a7acd996", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "exploited", "source": "https://t.me/ton618cyber/3349", "content": "\u26a1 Weekly Recap: Chrome 0-Day, IngressNightmare, Solar Bugs, DNS Tactics, and More\n\nGoogle patched a Chrome 0-day (CVE-2025-2783) used in live attacks on Russian targets via phishing.\n\nThe Hacker News | thehackernews.com \u2022 Mar 31, 2025", "creation_timestamp": "2025-04-01T06:24:18.000000Z"}, {"uuid": "7a45402d-cb97-478a-a920-8508e0e6d3c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/3335", "content": "#exploit\n1. CVE-2024-55963:\nUnauth RCE in Default-Install of Appsmith\nhttps://rhinosecuritylabs.com/research/cve-2024-55963-unauthenticated-rce-in-appsmith\n\n2. CVE-2025-26909:\nLFI to RCE in WP Ghost Plugin\nhttps://github.com/zerodayx/cve-2025-26909\n\n3. CVE-2025-27840:\nVulnerability in ESP32 Microcontrollers\nhttps://github.com/demining/Bluetooth-Attacks-CVE-2025-27840", "creation_timestamp": "2025-03-31T18:38:27.000000Z"}, {"uuid": "8598dace-0b04-49a9-a0d6-675d6ac8c23a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2748", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/8800", "content": "#exploit\n1. CVE-2025-2748:\nXSS To RCE By Abusing Custom File Handlers - Kentico Xperience CMS\nhttps://labs.watchtowr.com/xss-to-rce-by-abusing-custom-file-handlers-kentico-xperience-cms-cve-2025-2748\n\n2. CVE-2025-44228:\nAnyDesk RCE PoC\nhttps://github.com/ThoristKaw/Anydesk-Exploit-CVE-2025-12654-RCE-Builder\n\n3. CVE-2025-30065:\nApache Parquet RCE\nhttps://github.com/ron-imperva/CVE-2025-30065-PoC", "creation_timestamp": "2025-04-10T12:05:52.000000Z"}, {"uuid": "1700ab66-8ce6-4419-a965-f2ded85f602a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27407", "type": "seen", "source": "https://t.me/CyberBulletin/2667", "content": "\u26a1CVE-2025-27407 (CVSS 9.1): Critical GraphQL-Ruby Flaw Exposes Millions to RCE.\n\n#CyberBulletin", "creation_timestamp": "2025-03-17T12:43:13.000000Z"}, {"uuid": "5250a0f2-104b-496d-941d-65de55b508ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://t.me/CyberBulletin/2624", "content": "\u26a1Meta Warns of FreeType Vulnerability (CVE-2025-27363) With Active Exploitation Risk.\n\n#CyberBulletin", "creation_timestamp": "2025-03-14T05:11:45.000000Z"}, {"uuid": "c2645f6e-80ac-4da3-928c-6664289b5e58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "published-proof-of-concept", "source": "https://t.me/CyberBulletin/3220", "content": "\u26a1\ufe0fCVE-2025-2775: PoC Released for SysAid On-Premises Pre-Auth RCE Vulnerability.\n\n#CyberBulletin", "creation_timestamp": "2025-05-08T06:32:12.000000Z"}, {"uuid": "9ae95246-4f52-4e0e-a0e3-5eebc5e84f1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27364", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/13261", "content": "\ud83d\udea8CVE-2025-27364: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\n\nCVSS: 10\n\nhttps://darkwebinformer.com/cve-2025-27364-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-injection/", "creation_timestamp": "2025-02-24T21:04:08.000000Z"}, {"uuid": "3ce7acde-a1a1-4844-bda0-9ee1235f7198", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27371", "type": "seen", "source": "Telegram/-BdFIpUQUvUNhYymkrfAA4jju_CY31isIq0PwsaHz7c8vPS4", "content": "", "creation_timestamp": "2025-03-08T04:35:52.000000Z"}, {"uuid": "ae56e76e-5e12-4111-ba7a-509cc3168b2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27370", "type": "seen", "source": "Telegram/p0ZA79rNV0nVC7JMwAVemr8zvuA9NF_AFdtiHXgESI3p_ybk", "content": "", "creation_timestamp": "2025-03-08T04:35:51.000000Z"}, {"uuid": "fa2360c0-e69a-4d56-b63b-d4ac724889d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27091", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/12980", "content": "\ud83d\udea8CVE-2025-27091: OpenH264 Decoding Functions Heap Overflow Vulnerability\n\nhttps://darkwebinformer.com/cve-2025-27091-openh264-decoding-functions-heap-overflow-vulnerability/", "creation_timestamp": "2025-02-20T20:30:28.000000Z"}, {"uuid": "e0cbc615-558b-4337-bcbb-0637316d6706", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27519", "type": "seen", "source": "Telegram/fwDL3VQ5yUZM-k_IxariZXYTJP8m3JO79CP3ShKuMh_W04Yy", "content": "", "creation_timestamp": "2025-03-08T04:35:51.000000Z"}, {"uuid": "d2d1f42d-216a-46c7-a091-f262256286d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27518", "type": "seen", "source": "Telegram/6dZxXuLv-IgV5giZ8ai7Br2Q-GAO7pWWAKqj-9hZGh35uxQ0", "content": "", "creation_timestamp": "2025-03-08T04:35:51.000000Z"}, {"uuid": "6850f6dc-a8a4-4cb3-a09c-9dc58525714e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27152", "type": "seen", "source": "Telegram/TAnS5-0xeCyuh1s6B64uNQalBNBPo6r9_SpP-zjLThswhZUC", "content": "", "creation_timestamp": "2025-03-08T04:35:51.000000Z"}, {"uuid": "fb64145f-c703-40b5-b9dc-5944a8a56261", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27796", "type": "seen", "source": "Telegram/ADFYCd8ivCMkxAevFw_YQIjO2ZJf04hMUnbc6lMOO5d74RyU", "content": "", "creation_timestamp": "2025-03-08T04:34:57.000000Z"}, {"uuid": "c3808cde-c7ad-4a55-a865-91839bd98321", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27795", "type": "seen", "source": "Telegram/zUmrl4EHy8R_jY6Os77rVRkXolzU3eNAY5m8VwGAzj3g8xYU", "content": "", "creation_timestamp": "2025-03-08T04:34:57.000000Z"}, {"uuid": "9cef7274-d583-48f5-a757-7bcc792f922c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27494", "type": "seen", "source": "https://t.me/CyberBulletin/2579", "content": "\u26a1CVE-2025-27494 (CVSS 9.1):Critical Flaw Found in Siemens SiPass Access Control Systems.\n\n#CyberBulletin", "creation_timestamp": "2025-03-11T14:13:40.000000Z"}, {"uuid": "d3bf42c3-b33c-40ed-a0cf-d9547269be20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27607", "type": "seen", "source": "https://t.me/CyberBulletin/2556", "content": "\u26a1Popular Python Logging Library Vulnerable to Remote Code Execution (CVE-2025-27607).\n\n#CyberBulletin", "creation_timestamp": "2025-03-10T14:46:20.000000Z"}, {"uuid": "5bc907ee-389e-437c-ab73-c16ee73191f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "seen", "source": "https://t.me/CyberBulletin/2554", "content": "\u26a1CVE-2025-27840: Espressif Chip\u2019s Backdoor Threatens Global Networks.\n\n#CyberBulletin", "creation_timestamp": "2025-03-10T14:45:35.000000Z"}, {"uuid": "7ba02055-970a-4358-b5c3-d8c1aaa8e3b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27517", "type": "seen", "source": "https://t.me/CyberBulletin/2553", "content": "\u26a11.08M Downloads at Risk: Volt Fixes Severe RCE Vulnerability (CVE-2025-27517).\n\n#CyberBulletin", "creation_timestamp": "2025-03-10T14:45:04.000000Z"}, {"uuid": "4d350d8f-2f08-4632-8a83-8d355b7e980f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27423", "type": "seen", "source": "https://t.me/CyberBulletin/2488", "content": "\u26a1Vim Users Warned: Crafted TAR Files Could Trigger Code Execution (CVE-2025-27423).\n\n#CyberBulletin", "creation_timestamp": "2025-03-05T15:22:46.000000Z"}, {"uuid": "3d2bc4e6-71bf-4205-90c7-93ce7e230d05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27522", "type": "published-proof-of-concept", "source": "Telegram/NWjfHDLHU44HWox29r1Aitf06Ow2GKgjwB-wERiNBCh1_gI", "content": "", "creation_timestamp": "2025-05-30T13:44:00.000000Z"}, {"uuid": "fc8040e5-be3d-4095-a8b1-f36da2b897be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "exploited", "source": "https://t.me/cibsecurity/83639", "content": "\ud83d\udd8b\ufe0f Meta Warns of FreeType Vulnerability (CVE-2025-27363) With Active Exploitation Risk \ud83d\udd8b\ufe0f\n\nMeta has warned that a security vulnerability impacting the FreeType opensource font rendering library may have been exploited in the wild. The vulnerability has been assigned the CVE identifier CVE202527363, and carries a CVSS score of 8.1, indicating high severity. Described as an outofbounds write flaw, it could be exploited to achieve remote code execution when parsing certain font.\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"The Hacker News\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "creation_timestamp": "2025-03-13T12:15:17.000000Z"}, {"uuid": "9e54643e-23b2-45ac-8f6f-e1c252851f8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "exploited", "source": "https://t.me/CyberBulletin/2604", "content": "\u26a1CVE-2025-27363: Font Library FreeType Flaw Exploited in the Wild, Millions at Risk.\n\n#CyberBulletin", "creation_timestamp": "2025-03-12T14:36:34.000000Z"}, {"uuid": "2c7b9f7b-ed95-41b5-92b8-6fd8e927be9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/3785", "content": "#exploit\nCVE-2025-2775 CVE-2025-2776 CVE-2025-2777 CVE-2025-2778\nSysOwned, Your Friendly Support Ticket - SysAid On-Premise Pre-Auth RCE Chain\n]-> https://labs.watchtowr.com/sysowned-your-friendly-rce-support-ticket/\n\n]-> https://github.com/watchtowrlabs/watchTowr-vs-SysAid-PreAuth-RCE-Chain", "creation_timestamp": "2025-05-10T02:44:20.000000Z"}, {"uuid": "598935a8-eace-42b8-b304-12398e105ecf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2778", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/3785", "content": "#exploit\nCVE-2025-2775 CVE-2025-2776 CVE-2025-2777 CVE-2025-2778\nSysOwned, Your Friendly Support Ticket - SysAid On-Premise Pre-Auth RCE Chain\n]-> https://labs.watchtowr.com/sysowned-your-friendly-rce-support-ticket/\n\n]-> https://github.com/watchtowrlabs/watchTowr-vs-SysAid-PreAuth-RCE-Chain", "creation_timestamp": "2025-05-10T02:44:20.000000Z"}, {"uuid": "23f087ad-a2bd-4d18-b8af-798eb92fe276", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2777", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/3785", "content": "#exploit\nCVE-2025-2775 CVE-2025-2776 CVE-2025-2777 CVE-2025-2778\nSysOwned, Your Friendly Support Ticket - SysAid On-Premise Pre-Auth RCE Chain\n]-> https://labs.watchtowr.com/sysowned-your-friendly-rce-support-ticket/\n\n]-> https://github.com/watchtowrlabs/watchTowr-vs-SysAid-PreAuth-RCE-Chain", "creation_timestamp": "2025-05-10T02:44:20.000000Z"}, {"uuid": "7d68163f-0c52-44eb-9397-256580ef03ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/3785", "content": "#exploit\nCVE-2025-2775 CVE-2025-2776 CVE-2025-2777 CVE-2025-2778\nSysOwned, Your Friendly Support Ticket - SysAid On-Premise Pre-Auth RCE Chain\n]-> https://labs.watchtowr.com/sysowned-your-friendly-rce-support-ticket/\n\n]-> https://github.com/watchtowrlabs/watchTowr-vs-SysAid-PreAuth-RCE-Chain", "creation_timestamp": "2025-05-10T02:44:20.000000Z"}, {"uuid": "d703adc3-a94e-4449-9126-aee4131e50f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2774", "type": "seen", "source": "https://t.me/CyberBulletin/3180", "content": "\u26a1\ufe0fCVE-2025-2774: Webmin Vulnerability Allows Root-Level Privilege Escalation.\n\n#CyberBulletin", "creation_timestamp": "2025-05-04T06:40:44.000000Z"}, {"uuid": "e8f21150-f6d5-47cf-8f1b-967527ae7f4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2748", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/3505", "content": "#exploit\n1. CVE-2025-2748:\nXSS To RCE By Abusing Custom File Handlers - Kentico Xperience CMS\nhttps://labs.watchtowr.com/xss-to-rce-by-abusing-custom-file-handlers-kentico-xperience-cms-cve-2025-2748\n\n2. CVE-2025-44228:\nAnyDesk RCE PoC\nhttps://github.com/ThoristKaw/Anydesk-Exploit-CVE-2025-12654-RCE-Builder\n\n3. CVE-2025-30065:\nApache Parquet RCE\nhttps://github.com/ron-imperva/CVE-2025-30065-PoC", "creation_timestamp": "2025-04-10T12:05:52.000000Z"}, {"uuid": "43dc5af4-f6b5-4f97-91ad-4323e87b48b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "exploited", "source": "Telegram/sPgeubDUDnWm3JD1kfSh8w4pVRVvX4pJiPdPFZi9SIHfEA", "content": "", "creation_timestamp": "2025-03-13T10:10:17.000000Z"}, {"uuid": "5830dde9-ebaf-4382-abbc-7696ecc6a25f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "exploited", "source": "https://t.me/CyberBulletin/2619", "content": "\u26a1Critical Alert: A severe vulnerability (CVE-2025-27363) in the FreeType font library, used by millions, is being actively exploited.\n\nThis flaw allows RCE, risking numerous systems. Affected platforms include Linux distributions, Android, and iOS.\n\n#CyberBulletin", "creation_timestamp": "2025-03-13T17:23:23.000000Z"}, {"uuid": "9357068d-2080-4fb9-88d6-a01daf87a440", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "exploited", "source": "https://t.me/ton618cyber/3201", "content": "Meta Warns of FreeType Vulnerability (CVE-2025-27363) With Active Exploitation Risk\n\nA critical FreeType vulnerability (CVE-2025-27363) with a CVSS 8.1 score may be actively exploited\u2014update to 2.13.3 now for protection.\n\nThe Hacker News | thehackernews.com \u2022 Mar 13, 2025", "creation_timestamp": "2025-03-25T00:46:05.000000Z"}, {"uuid": "997766f1-573b-4548-976a-b2bdb807f773", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "exploited", "source": "https://t.me/ton618cyber/3247", "content": "Zero-Day Alert: Google Releases Chrome Patch for Exploit Used in Russian Espionage Attacks\n\nGoogle fixed Chrome zero-day CVE-2025-2783 on Mar 20 after attacks exploited a sandbox bypass flaw.\n\nThe Hacker News | thehackernews.com \u2022 Mar 26, 2025", "creation_timestamp": "2025-03-27T08:16:07.000000Z"}, {"uuid": "16c60b80-b227-4e3a-9643-9479a3b5a1cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27920", "type": "seen", "source": "https://t.me/CyberBulletin/3254", "content": "\u26a1\ufe0fMicrosoft Threat Intelligence analysts who spotted these attacks also discovered the security flaw (CVE-2025-27920) in the LAN messaging application, a directory traversal vulnerability that can let authenticated attackers access sensitive files outside the intended directory or deploy malicious payloads on the server's startup folder.\n\n#CyberBulletin", "creation_timestamp": "2025-05-13T04:29:39.000000Z"}, {"uuid": "4a0deaef-d85e-42a8-b7b2-143315a5e94d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/12436", "content": "Update ASAP: Google Fixes Android Flaw (CVE-2025-27363) Exploited by Attackers \u2013 thehackernews.com\n\nTue, 06 May 2025 13:46:00", "creation_timestamp": "2025-05-06T10:03:13.000000Z"}, {"uuid": "c6957d8e-b04f-4079-bee6-50b7bdbef9cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/9660", "content": "Meta Warns of FreeType Vulnerability (CVE-2025-27363) With Active Exploitation Risk \u2013 thehackernews.com\n\nThu, 13 Mar 2025 15:13:00", "creation_timestamp": "2025-03-13T13:03:13.000000Z"}, {"uuid": "f0377b19-fc19-4db5-8201-3ab972d6b281", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27423", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/9262", "content": "Vim Vulnerability (CVE-2025-27423) Allows Code Execution via Malicious TAR Archives \u2013 gbhackers.com\n\nWed, 05 Mar 2025 18:28:30", "creation_timestamp": "2025-03-05T13:03:33.000000Z"}, {"uuid": "34006bf7-688d-4215-a621-34cd706bea22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27480", "type": "seen", "source": "https://t.me/ViralCyber/12553", "content": "\u26a0\ufe0f\u0627\u0632 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc\u0647\u0627\u06cc \u0627\u062e\u06cc\u0631 RDS \u063a\u0627\u0641\u0644 \u0646\u0634\u0648\u06cc\u062f!\n\ud83d\udce4\u062f\u0648 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc Remote Code Execution (RCE) \u06a9\u0647 \u0627\u062e\u06cc\u0631\u0627 \u062f\u0631 \u0633\u0631\u0648\u06cc\u0633\u200c\u0647\u0627\u06cc Windows Remote Desktop \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 \u0647\u0627\u06cc CVE-2025-27480 \u0648 CVE-2025-27482 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647 \u0627\u0646\u062f \u0628\u0633\u06cc\u0627\u0631 \u062e\u0637\u0631\u0646\u0627\u06a9 \u0647\u0633\u062a\u0646\u062f. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0628\u062f\u0648\u0646 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u062a\u0648\u0633\u0637 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0642\u0627\u0628\u0644 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0647\u0633\u062a\u0646\u062f.\n\ud83d\udce4\u0627\u0632 \u0628\u0647\u200c\u0631\u0648\u0632 \u0628\u0648\u062f\u0646 \u0633\u06cc\u0633\u062a\u0645\u0647\u0627 \u0645\u0637\u0645\u0626\u0646 \u0634\u0648\u06cc\u062f.\n\n\u2709\ufe0f@PingChannel\n\u062e\u0628\u0631\u060c \u062a\u062d\u0644\u06cc\u0644\u060c \u0627\u0646\u062a\u0642\u0627\u062f - \u0641\u0646\u0627\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a\n\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b", "creation_timestamp": "2025-04-22T12:34:03.000000Z"}, {"uuid": "72a67b0d-a6ab-48d2-9742-eb35cced5887", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27482", "type": "seen", "source": "https://t.me/ViralCyber/12553", "content": "\u26a0\ufe0f\u0627\u0632 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc\u0647\u0627\u06cc \u0627\u062e\u06cc\u0631 RDS \u063a\u0627\u0641\u0644 \u0646\u0634\u0648\u06cc\u062f!\n\ud83d\udce4\u062f\u0648 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc Remote Code Execution (RCE) \u06a9\u0647 \u0627\u062e\u06cc\u0631\u0627 \u062f\u0631 \u0633\u0631\u0648\u06cc\u0633\u200c\u0647\u0627\u06cc Windows Remote Desktop \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 \u0647\u0627\u06cc CVE-2025-27480 \u0648 CVE-2025-27482 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647 \u0627\u0646\u062f \u0628\u0633\u06cc\u0627\u0631 \u062e\u0637\u0631\u0646\u0627\u06a9 \u0647\u0633\u062a\u0646\u062f. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0628\u062f\u0648\u0646 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u062a\u0648\u0633\u0637 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0642\u0627\u0628\u0644 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0647\u0633\u062a\u0646\u062f.\n\ud83d\udce4\u0627\u0632 \u0628\u0647\u200c\u0631\u0648\u0632 \u0628\u0648\u062f\u0646 \u0633\u06cc\u0633\u062a\u0645\u0647\u0627 \u0645\u0637\u0645\u0626\u0646 \u0634\u0648\u06cc\u062f.\n\n\u2709\ufe0f@PingChannel\n\u062e\u0628\u0631\u060c \u062a\u062d\u0644\u06cc\u0644\u060c \u0627\u0646\u062a\u0642\u0627\u062f - \u0641\u0646\u0627\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a\n\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b", "creation_timestamp": "2025-04-22T12:34:03.000000Z"}, {"uuid": "a7a2fb07-6f8d-4f2a-9c04-5efdaea8ed65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/8406", "content": "#exploit\n1. CVE-2024-55963:\nUnauth RCE in Default-Install of Appsmith\nhttps://rhinosecuritylabs.com/research/cve-2024-55963-unauthenticated-rce-in-appsmith\n\n2. CVE-2025-26909:\nLFI to RCE in WP Ghost Plugin\nhttps://github.com/zerodayx/cve-2025-26909\n\n3. CVE-2025-27840:\nVulnerability in ESP32 Microcontrollers\nhttps://github.com/demining/Bluetooth-Attacks-CVE-2025-27840", "creation_timestamp": "2025-03-31T18:38:27.000000Z"}, {"uuid": "5bfc0208-e90d-46a6-8cd2-1c66055cb5af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27610", "type": "seen", "source": "https://t.me/ton618cyber/8995", "content": "Researchers Identify Rack::Static Vulnerability Enabling Data Breaches in Ruby Servers\n\nCVE-2025-27610 allows unauthenticated access to sensitive files in Rack Ruby apps due to root misconfig.\n\nThe Hacker News | thehackernews\u200b.com \u2022 Apr 25, 2025", "creation_timestamp": "2025-04-26T03:07:10.000000Z"}, {"uuid": "0592e771-7eeb-4ff4-bdb0-286656907b4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27092", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/12948", "content": "\ud83d\udea8 High Security Vulnerability\n\ud83c\udd94 CVE-2025-27092\n\ud83d\udca3 CVSS Score: 8.7\n\ud83d\udcc5 Published Date: 2025-02-19\n\n\u26a0\ufe0f Details: GHOSTS is an open source user simulation framework for cyber experimentation, simulation, training, and exercise. A path traversal vulnerability was discovered in GHOSTS version 8.0.0.0 that allows an attacker to access files outside of the intended directory through the photo retrieval endpoint. The vulnerability exists in the /api/npcs/{id}/photo endpoint, which is designed to serve profile photos for NPCs (Non-Player Characters) but fails to properly validate and sanitize file paths. When an NPC is created with a specially crafted photoLink value containing path traversal sequences (../, ..\\, etc.), the application processes these sequences without proper sanitization. This allows an attacker to traverse directory structures and access files outside of the intended photo directory, potentially exposing sensitive system files. The vulnerability is particularly severe because it allows reading arbitrary files from the server's filesystem with the permissions of the web application process, which could include configuration files, credentials, or other sensitive data. This issue has been addressed in version 8.2.7.90 and all users are advised to upgrade. There are no known workarounds for this vulnerability.\n\n\ud83d\udee0 References:\n\ud83d\udd17 GitHub 1: https://github.com/cmu-sei/GHOSTS/security/advisories/GHSA-qr67-m6w9-wj3j\n\ud83d\udd17 GitHub 2: https://github.com/cmu-sei/GHOSTS/commit/e69827556a52ff813de00e1017c4b62598d2c887", "creation_timestamp": "2025-02-20T00:07:11.000000Z"}, {"uuid": "1e33ec9e-dc1c-47be-8c37-dd4b646130df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "seen", "source": "Telegram/cCprvSF-jIEZXIvbJarzW7KGxYqk_jredhzN22rQASiVQ4Ly", "content": "", "creation_timestamp": "2025-03-10T19:39:04.000000Z"}, {"uuid": "cbdd8c4f-fc64-4852-8b85-436cbe4e634c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27926", "type": "seen", "source": "Telegram/OUkZHYh_CnINzWHtBCH3sTEWKqWt9TU3nkUQIxtgA0S4FRIo", "content": "", "creation_timestamp": "2025-03-11T04:41:13.000000Z"}, {"uuid": "0f984285-5c10-471b-888e-35407d505a99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27925", "type": "seen", "source": "Telegram/Jrfw1SiG0EbIvLupg5xHoxsdrWiVS6i7SVdidwIDWx9NuwW2", "content": "", "creation_timestamp": "2025-03-11T04:41:13.000000Z"}, {"uuid": "2b7863b4-4fcb-404f-a8ea-19b51677fd43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27924", "type": "seen", "source": "Telegram/gUuOevI6TGAXD2oTWWb9MLteysA5MCE9w4i6EQgpRVV_hPBi", "content": "", "creation_timestamp": "2025-03-11T04:41:13.000000Z"}, {"uuid": "66a0bfb0-80fd-43a8-855b-ea2d7536b067", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27610", "type": "seen", "source": "Telegram/HMAWwcay_4hklj3BM91LAZxDwOui412reXuT0Q0CnkrnI9Zt", "content": "", "creation_timestamp": "2025-03-11T04:41:13.000000Z"}, {"uuid": "872d3029-d22f-4716-a7f3-a456e826c625", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27152", "type": "seen", "source": "Telegram/uSFG0tkddRv8u_t28dz7WXn7-H4ex8B2FDIB0RbG1xO7MaAq", "content": "", "creation_timestamp": "2025-03-08T04:35:53.000000Z"}, {"uuid": "0e4d22c8-2eb8-4cec-9343-3df40ed016de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27816", "type": "seen", "source": "Telegram/r5oeIRpqLRgNyGLLE_7wMh8Fn_0oWi6wa9pBcaHydN7bfKh0", "content": "", "creation_timestamp": "2025-03-08T04:35:53.000000Z"}, {"uuid": "f513deba-c3bf-430e-b329-c4b6228471f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27423", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/2311", "content": "Vim Vulnerability (CVE-2025-27423) Allows Code Execution via Malicious TAR Archives \u2013 gbhackers.com\n\nWed, 05 Mar 2025 18:28:30", "creation_timestamp": "2025-03-05T13:03:33.000000Z"}, {"uuid": "ed552851-894d-4e9a-955c-dca860545aa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/3886", "content": "Update ASAP: Google Fixes Android Flaw (CVE-2025-27363) Exploited by Attackers \u2013 thehackernews.com\n\nTue, 06 May 2025 13:46:00", "creation_timestamp": "2025-05-06T10:03:14.000000Z"}, {"uuid": "ad0087a0-f26f-4332-9142-f1f632be6684", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27910", "type": "seen", "source": "Telegram/oNyCPEP5YRfouaWfL7ENByzKaZGZMhFrRppgbw0JB5dwfx6S", "content": "", "creation_timestamp": "2025-03-11T04:41:13.000000Z"}, {"uuid": "5b05f202-026d-44d0-9dd3-9d66919f2e4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27257", "type": "seen", "source": "Telegram/w8Mv8qXWnL2SDSsY9okaCQvydy0LDbAk8Rr2ILu5ezYpqPBk", "content": "", "creation_timestamp": "2025-03-10T14:45:04.000000Z"}, {"uuid": "20b5e146-6bca-4510-a140-9bd10a559636", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27256", "type": "seen", "source": "Telegram/-DlDEaFntPccpK8lSZ-RNRkFNwOoHptOh979MPq3UPUEOjLE", "content": "", "creation_timestamp": "2025-03-10T14:45:04.000000Z"}, {"uuid": "b7963eeb-cb17-45b6-8ec5-7f1ba14f0611", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27598", "type": "seen", "source": "Telegram/Yedcr8MAXo2th64zcIGwzgIZflploYCa-tt0bHyZEPWJw_4D", "content": "", "creation_timestamp": "2025-03-08T04:35:53.000000Z"}, {"uuid": "0991f431-da61-46d1-aaa9-296b24143015", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/2507", "content": "Meta Warns of FreeType Vulnerability (CVE-2025-27363) With Active Exploitation Risk \u2013 thehackernews.com\n\nThu, 13 Mar 2025 15:13:00", "creation_timestamp": "2025-03-13T13:03:13.000000Z"}, {"uuid": "38aec284-8f4e-4f50-b449-ef24b29e6002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27408", "type": "seen", "source": "Telegram/rkC0xiO-afiwqxFKTG9UKVojDmgwq9NgpNdwvx_VWlKauePo", "content": "", "creation_timestamp": "2025-03-02T11:45:39.000000Z"}, {"uuid": "394e0a8d-c124-4520-8ffe-fa86108b0fa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "seen", "source": "Telegram/zEk_HXoAHYbN-ujTxJ8PcQeC84E24nW8JY4fSgy7ljAdj1A9", "content": "", "creation_timestamp": "2025-03-10T14:45:03.000000Z"}, {"uuid": "91d19102-9974-4fad-bb7c-51f0d0d70bfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27603", "type": "seen", "source": "Telegram/wgAqaoKVoE2XgO5PoMSlAzGUJXoRr9Arwpep4wOUCR5Oorl5", "content": "", "creation_timestamp": "2025-03-08T04:35:51.000000Z"}, {"uuid": "656a5bf1-bedd-4d78-b099-e0b6c14a4bda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27597", "type": "seen", "source": "Telegram/JdRhtlbmlAjvwKcB8S75wJ5UgHg8p0glcxAuk_LyuqjTS6Mc", "content": "", "creation_timestamp": "2025-03-08T04:35:51.000000Z"}, {"uuid": "32b8d016-a686-47d0-a886-1a026144f6dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27218", "type": "seen", "source": "Telegram/bIWqiOjr1i5Jv8o-lCPyoqx7UdJEMKQ-dr8MIYLvX8SvXV-l", "content": "", "creation_timestamp": "2025-02-20T23:26:54.000000Z"}, {"uuid": "453b3a19-7ff7-4fbd-8550-c8df49a58fdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27100", "type": "seen", "source": "Telegram/gX2usgmFFKJ2pv-udzgAblLXZlxiQRuWHtTIOz9tTmPtMN88", "content": "", "creation_timestamp": "2025-02-21T02:11:50.000000Z"}, {"uuid": "5d0a408f-43aa-4303-b067-35f94ac747e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27096", "type": "seen", "source": "Telegram/q7oCMwcROB1eQLWf1QkZrf90Wa2jidDuhyNqW4Hbthe2J46c", "content": "", "creation_timestamp": "2025-02-20T23:26:56.000000Z"}, {"uuid": "617c4b36-4763-480c-bc1e-0eea3ddd87bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "exploited", "source": "https://t.me/TengkorakCyberCrewzz/30660", "content": "Update ASAP: Google Fixes Android Flaw (CVE-2025-27363) Exploited by Attackers \u2013 thehackernews.com\n\nTue, 06 May 2025 13:46:00", "creation_timestamp": "2025-05-06T10:03:13.000000Z"}, {"uuid": "26ec62a4-d63a-4852-ab1d-996da2481ba4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "exploited", "source": "https://t.me/TengkorakCyberCrewzz/28907", "content": "Meta Warns of FreeType Vulnerability (CVE-2025-27363) With Active Exploitation Risk \u2013 thehackernews.com\n\nThu, 13 Mar 2025 15:13:00", "creation_timestamp": "2025-03-13T13:03:13.000000Z"}, {"uuid": "8dde147f-8268-4a29-a65d-16d26f657469", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27423", "type": "seen", "source": "https://t.me/TengkorakCyberCrewzz/28663", "content": "Vim Vulnerability (CVE-2025-27423) Allows Code Execution via Malicious TAR Archives \u2013 gbhackers.com\n\nWed, 05 Mar 2025 18:28:30", "creation_timestamp": "2025-03-05T13:03:33.000000Z"}, {"uuid": "17f1cdd8-8311-4b5a-b4a3-90081e73b035", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "exploited", "source": "Telegram/O5Zvd0-ca5HrJAxxnw-Wgx96yQdbDg19VT0Mm7IwVclSRw", "content": "", "creation_timestamp": "2025-05-07T16:17:43.000000Z"}, {"uuid": "8cd198c5-77c1-4533-870a-7cc40de01d01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2777", "type": "seen", "source": "Telegram/yUbNsI-bWNV2K8tTPh4C-hxM85C-hrLLt_kDH9pSKaydCw", "content": "", "creation_timestamp": "2025-05-07T15:16:23.000000Z"}, {"uuid": "d212d2fb-b024-4a32-93ff-b29b780c165d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "seen", "source": "Telegram/yUbNsI-bWNV2K8tTPh4C-hxM85C-hrLLt_kDH9pSKaydCw", "content": "", "creation_timestamp": "2025-05-07T15:16:23.000000Z"}, {"uuid": "5865c4a8-953f-4b10-b945-5a63942af3bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "Telegram/yUbNsI-bWNV2K8tTPh4C-hxM85C-hrLLt_kDH9pSKaydCw", "content": "", "creation_timestamp": "2025-05-07T15:16:23.000000Z"}, {"uuid": "7c8fde86-b6b2-4633-8fff-bf59a32f3507", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "exploited", "source": "Telegram/2dDfk9NoaJRay94Ixbm81sqEUT8Xm6u65S3_s50tUPLHDg", "content": "", "creation_timestamp": "2025-05-06T14:19:33.000000Z"}, {"uuid": "9179e703-6154-41db-9c02-00168fb2cb78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27610", "type": "seen", "source": "Telegram/AWN4m35sY1ND-5kp9t1H-zdsNvbMEg1ZD7I9szmKxUwpOQ", "content": "", "creation_timestamp": "2025-04-25T12:07:48.000000Z"}, {"uuid": "3ff200ac-42ca-40b8-b7cb-3c25b37cb671", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "exploited", "source": "Telegram/Jmloz5cTfaAKHPrzEzdD49w88rvZb3XsHcaGGd9xnitdQA", "content": "", "creation_timestamp": "2025-03-26T09:33:40.000000Z"}, {"uuid": "ca1ec05b-9cea-4252-8770-d3d447b94d92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "exploited", "source": "Telegram/IiIagsZ3SKMUjuJEEbYV73kjeyzUfguWaNcoMKhmu_YmMQ", "content": "", "creation_timestamp": "2025-03-13T12:31:08.000000Z"}, {"uuid": "025bd839-9fbd-415f-8985-5894f0a9471c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "published-proof-of-concept", "source": "https://t.me/CyberDilara/1594", "content": "Apache Camel CVE-2025\u201327636 & CVE-2025-29891 PoC\n\nhttps://github.com/akamai/CVE-2025-27636-Apache-Camel-PoC", "creation_timestamp": "2025-03-13T13:16:58.000000Z"}, {"uuid": "c15dd793-125b-4489-ac51-e257927db259", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2769", "type": "published-proof-of-concept", "source": "Telegram/tGlnxgJ45kvnhr-0GuZEauiX58JIxK_MY4hRnR_Ek7fiyk0", "content": "", "creation_timestamp": "2025-04-23T20:32:34.000000Z"}, {"uuid": "0454c7a2-3dd8-4dbd-ada0-e5de0ca6633d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2768", "type": "published-proof-of-concept", "source": "Telegram/tGlnxgJ45kvnhr-0GuZEauiX58JIxK_MY4hRnR_Ek7fiyk0", "content": "", "creation_timestamp": "2025-04-23T20:32:34.000000Z"}, {"uuid": "b507f409-ffad-4478-92fb-02b1646acdb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2773", "type": "published-proof-of-concept", "source": "Telegram/tGlnxgJ45kvnhr-0GuZEauiX58JIxK_MY4hRnR_Ek7fiyk0", "content": "", "creation_timestamp": "2025-04-23T20:32:34.000000Z"}, {"uuid": "191f6679-50b0-44f8-962a-3c60d446afd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2784", "type": "published-proof-of-concept", "source": "Telegram/EmS9bgYgLpx5pRbXrtQctY-Iz8lbm4p2ZetMSDDYp7zCam8", "content": "", "creation_timestamp": "2025-04-03T07:31:02.000000Z"}, {"uuid": "6dcdd1c2-2def-4171-9223-92680fc90130", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "published-proof-of-concept", "source": "Telegram/QaDCHeyCTQEDx9YMMCpkZWSmm-dNNJ2lC0YJEGLd_C3RP10", "content": "", "creation_timestamp": "2025-03-31T21:00:07.000000Z"}, {"uuid": "534999db-ff98-4383-9340-1eef934dced6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "published-proof-of-concept", "source": "Telegram/eVE5YmoRFUZV8c7TTGPUWrAfKBs48EKz-_YLWjtS9xYVJuE", "content": "", "creation_timestamp": "2025-03-30T23:00:06.000000Z"}, {"uuid": "1ae70c83-bb23-466d-8034-baf32a244acb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27152", "type": "published-proof-of-concept", "source": "Telegram/qtf5UlSjl8ansax6HEFOWjNwUYd29vo_Y6ok0vpVyjxeaHc", "content": "", "creation_timestamp": "2025-03-30T17:00:07.000000Z"}, {"uuid": "5b4a7814-8827-4042-ba9c-207503734b56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "published-proof-of-concept", "source": "Telegram/fRz85g4eDbVFk_EmTWHzF9ll2KANwEqcSW_5eU9ztMIPBRw", "content": "", "creation_timestamp": "2025-04-06T09:00:07.000000Z"}, {"uuid": "6d4f70a5-7b82-4d61-a21a-6580e8de7669", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27147", "type": "seen", "source": "Telegram/UPegbdrUObQcnilNjDwpJsece7fi6CrosD2C8DpjNeOtPKM", "content": "", "creation_timestamp": "2025-03-25T16:30:59.000000Z"}, {"uuid": "842a913c-35cb-4e85-b881-04b1b6d77058", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2765", "type": "seen", "source": "Telegram/Eg-knjjPTR9ocTVizjx2pI3z_FSlAWu4SgE31pSS6iQco10", "content": "", "creation_timestamp": "2025-04-23T20:32:35.000000Z"}, {"uuid": "733f0e21-eb24-4b55-abd6-ddd891ab4273", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2767", "type": "seen", "source": "Telegram/Eg-knjjPTR9ocTVizjx2pI3z_FSlAWu4SgE31pSS6iQco10", "content": "", "creation_timestamp": "2025-04-23T20:32:35.000000Z"}, {"uuid": "36c5dc8f-1edb-44d3-8ad4-d97bdc1a37f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2764", "type": "seen", "source": "Telegram/Eg-knjjPTR9ocTVizjx2pI3z_FSlAWu4SgE31pSS6iQco10", "content": "", "creation_timestamp": "2025-04-23T20:32:35.000000Z"}, {"uuid": "837095a4-45eb-4a1a-ba46-bf4b7d72361a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27690", "type": "seen", "source": "Telegram/q1v6fpd4crrHq44DB9Nj1uDJuUzOEqw5zlM7k7RhTjpY9VU", "content": "", "creation_timestamp": "2025-04-10T05:30:42.000000Z"}, {"uuid": "99e52c35-4cec-440b-bf17-3b39898a8eda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27394", "type": "seen", "source": "Telegram/BUC-F_pXySBJlIgXgQmiFYagG3wm0MhpRzVS07GXFjNvPGc", "content": "", "creation_timestamp": "2025-03-11T11:35:11.000000Z"}, {"uuid": "07140b60-f057-42e9-8790-289ca5308645", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27009", "type": "seen", "source": "Telegram/z-eE4j_pd2xofaRpPR35edWI1QGb9fr2BIzfSaNm13p6uDA", "content": "", "creation_timestamp": "2025-04-14T13:30:26.000000Z"}, {"uuid": "8213a37b-e7ec-4d8a-8f06-c686a66a816a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "published-proof-of-concept", "source": "Telegram/1Ye6I10DoiNUNCKUX0jS-ECRE10Hbo3yqBFNi12KZRz-SVk", "content": "", "creation_timestamp": "2025-04-06T11:00:05.000000Z"}, {"uuid": "590892c9-4ad0-46fe-b701-a22673d0476d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2748", "type": "published-proof-of-concept", "source": "Telegram/UniB57STuDvdE48xUY8fEONrPJBrVxr-UljY-0_y9mj8GYk", "content": "", "creation_timestamp": "2025-04-06T10:00:59.000000Z"}, {"uuid": "70ba5633-243d-4ca9-9ded-e7211aafec9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "published-proof-of-concept", "source": "Telegram/pp3zaZuHAWmnA0kR0Tja0bjF9QWDV_Ck_mWcnSJpgSdDq38", "content": "", "creation_timestamp": "2025-04-08T23:00:05.000000Z"}, {"uuid": "1e1f1698-e05b-44a7-ad38-70da8f6af463", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27590", "type": "published-proof-of-concept", "source": "Telegram/p9d_ACvMhwgjQHzi_flG_te3gVSPsQD85yv29crmwoHofRE", "content": "", "creation_timestamp": "2025-03-03T06:00:40.000000Z"}, {"uuid": "d31fbba0-72a7-4ce1-b181-9d7979ca83a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "published-proof-of-concept", "source": "Telegram/WavE4TZalmMZH7ia3WHjEDQ1oei-w86-O_mAcu597Ww1-5E", "content": "", "creation_timestamp": "2025-05-01T14:00:35.000000Z"}, {"uuid": "c95f3a97-b506-4975-a971-5b7b137e1ce1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27134", "type": "seen", "source": "Telegram/Gwvh-n-ygZ7AZvt4Z14lI64V1AihU4WxZxoYYl7z1l7jTPI", "content": "", "creation_timestamp": "2025-04-30T17:32:01.000000Z"}, {"uuid": "62b66283-b310-4d86-b46c-1f89c4e639dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27409", "type": "seen", "source": "Telegram/Gwvh-n-ygZ7AZvt4Z14lI64V1AihU4WxZxoYYl7z1l7jTPI", "content": "", "creation_timestamp": "2025-04-30T17:32:01.000000Z"}, {"uuid": "b169fdd3-fe3b-4c86-a31e-564229640db0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27822", "type": "published-proof-of-concept", "source": "Telegram/_eDpAQjaVwA17w3Y5sBYHVYQe-wtpCg0af3TYkfxAg1BL6c", "content": "", "creation_timestamp": "2025-03-08T00:00:48.000000Z"}, {"uuid": "abd89332-1eb3-42b8-87c9-a0f597b2e4e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27392", "type": "seen", "source": "Telegram/7ohonUKXJXc8nNP-FA_LzHo1dYyqTYbEicJy56ekdY_6IuU", "content": "", "creation_timestamp": "2025-03-11T11:35:12.000000Z"}, {"uuid": "c60fe664-47ef-43d7-ae51-48d43f2bac2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27393", "type": "seen", "source": "Telegram/7ohonUKXJXc8nNP-FA_LzHo1dYyqTYbEicJy56ekdY_6IuU", "content": "", "creation_timestamp": "2025-03-11T11:35:12.000000Z"}, {"uuid": "38b2c71a-6712-42eb-a25c-fd9b436f87f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27394", "type": "seen", "source": "Telegram/7ohonUKXJXc8nNP-FA_LzHo1dYyqTYbEicJy56ekdY_6IuU", "content": "", "creation_timestamp": "2025-03-11T11:35:12.000000Z"}, {"uuid": "ec8db0c2-ed10-4ea9-84f1-bd1ea4dc41b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27395", "type": "seen", "source": "Telegram/BUC-F_pXySBJlIgXgQmiFYagG3wm0MhpRzVS07GXFjNvPGc", "content": "", "creation_timestamp": "2025-03-11T11:35:11.000000Z"}, {"uuid": "e01ce50a-2477-46b2-9605-5c2ef8b83697", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27438", "type": "seen", "source": "Telegram/BUC-F_pXySBJlIgXgQmiFYagG3wm0MhpRzVS07GXFjNvPGc", "content": "", "creation_timestamp": "2025-03-11T11:35:11.000000Z"}, {"uuid": "e43581d6-e62f-4e67-8020-01ade5ee1ebf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27493", "type": "seen", "source": "Telegram/BUC-F_pXySBJlIgXgQmiFYagG3wm0MhpRzVS07GXFjNvPGc", "content": "", "creation_timestamp": "2025-03-11T11:35:11.000000Z"}, {"uuid": "238d7739-6f13-417a-9821-944e34f58f3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27494", "type": "seen", "source": "Telegram/BUC-F_pXySBJlIgXgQmiFYagG3wm0MhpRzVS07GXFjNvPGc", "content": "", "creation_timestamp": "2025-03-11T11:35:11.000000Z"}, {"uuid": "539f7f67-7f34-4fc5-9b3f-3bf860e6e095", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27396", "type": "seen", "source": "Telegram/BUC-F_pXySBJlIgXgQmiFYagG3wm0MhpRzVS07GXFjNvPGc", "content": "", "creation_timestamp": "2025-03-11T11:35:11.000000Z"}, {"uuid": "ef6aa58c-4d59-4adb-a450-632f84969d89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27816", "type": "seen", "source": "Telegram/n12tkstpTBiha-g5cLpVGt34jbEMyCrF8bAKommPg_u2Wg4", "content": "", "creation_timestamp": "2025-03-07T10:01:20.000000Z"}, {"uuid": "7ae10675-cfbd-402f-9b89-bf891f865170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27510", "type": "published-proof-of-concept", "source": "Telegram/kKmhqMAO0G41xSuzHMEpIuMySOUPwocgu6rbuAMEaHx4Gt4", "content": "", "creation_timestamp": "2025-03-04T23:30:46.000000Z"}, {"uuid": "9b732a36-66e6-4e28-b433-b22913e31e8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27254", "type": "seen", "source": "Telegram/EwyoJpOhgvb_m390Z2MrJIvACD-jMnsMq8DjT6jMzog0-FA", "content": "", "creation_timestamp": "2025-03-10T10:31:21.000000Z"}, {"uuid": "e61406db-5654-40a3-b5d8-d16f2c247751", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "published-proof-of-concept", "source": "Telegram/ZUefEkmkQwFMO0TqAL2kJX0i2-tmG7HnAD4YlbPg5kyxc3w", "content": "", "creation_timestamp": "2025-03-08T22:00:26.000000Z"}, {"uuid": "39ca3cbd-0d4e-41ca-9c05-214ca29540c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27607", "type": "published-proof-of-concept", "source": "Telegram/pg7kvtgf18i2NSpY74T8eUGfUmlZbISb88s-xMWif3Xt7vA", "content": "", "creation_timestamp": "2025-03-14T16:00:08.000000Z"}, {"uuid": "39f8a7e0-7a44-4eef-a007-d8b33e44c3fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27255", "type": "seen", "source": "Telegram/EwyoJpOhgvb_m390Z2MrJIvACD-jMnsMq8DjT6jMzog0-FA", "content": "", "creation_timestamp": "2025-03-10T10:31:21.000000Z"}, {"uuid": "80090992-04bb-4d57-be18-b9432d0ce5b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27256", "type": "seen", "source": "Telegram/EwyoJpOhgvb_m390Z2MrJIvACD-jMnsMq8DjT6jMzog0-FA", "content": "", "creation_timestamp": "2025-03-10T10:31:21.000000Z"}, {"uuid": "c4ce80f8-78e7-45cf-98a3-39207297bfb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27912", "type": "seen", "source": "Telegram/VmMuGE7Rb8M0CTKtbBCx8A-ZtXlhfTER7CBMGSEtWA4_Slk", "content": "", "creation_timestamp": "2025-03-11T09:31:03.000000Z"}, {"uuid": "a25ac3c7-5b09-437b-9306-3d45fe0e6c7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27434", "type": "seen", "source": "Telegram/5dlNa934cDbv4j3j3lQCc40yS4J_bdTpn_glqzNig4nu0Ps", "content": "", "creation_timestamp": "2025-03-11T02:00:59.000000Z"}, {"uuid": "24787749-4f47-44a8-8f63-d1368b7cf20c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "published-proof-of-concept", "source": "Telegram/Y_xPY5an29zAjBEjsanjtpLbpBVw7mFfDR_wSaO-iTXPUi8", "content": "", "creation_timestamp": "2025-03-11T00:00:12.000000Z"}, {"uuid": "9c8a7347-bbfc-4191-8026-4ab8d3b5d1a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "published-proof-of-concept", "source": "Telegram/OtbbrBGaTX9xQfsVqBCkOe-xfQg63w2IwNNujWjvUyDz4Hs", "content": "", "creation_timestamp": "2025-03-09T22:00:06.000000Z"}, {"uuid": "e9d20616-82c9-43d3-8cbb-5e7d36ef0eb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27604", "type": "seen", "source": "Telegram/MKyyCJNfVvpUH0P_EmhW7az9OPnbIUC-jF-3Mo1io2kFbkQ", "content": "", "creation_timestamp": "2025-03-07T18:01:34.000000Z"}, {"uuid": "01591266-0522-4dc1-8c66-816b3ab2cdbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27597", "type": "seen", "source": "Telegram/MKyyCJNfVvpUH0P_EmhW7az9OPnbIUC-jF-3Mo1io2kFbkQ", "content": "", "creation_timestamp": "2025-03-07T18:01:34.000000Z"}, {"uuid": "91a998e1-7101-43da-86ae-116715ae25b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27603", "type": "seen", "source": "Telegram/MKyyCJNfVvpUH0P_EmhW7az9OPnbIUC-jF-3Mo1io2kFbkQ", "content": "", "creation_timestamp": "2025-03-07T18:01:34.000000Z"}, {"uuid": "2acce465-21cb-467c-abfb-c529b40b14d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27607", "type": "seen", "source": "Telegram/MKyyCJNfVvpUH0P_EmhW7az9OPnbIUC-jF-3Mo1io2kFbkQ", "content": "", "creation_timestamp": "2025-03-07T18:01:34.000000Z"}, {"uuid": "f09aed96-62a9-4c19-bfa4-c0a518a724a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27152", "type": "seen", "source": "Telegram/GvPZHyEbeVxrI-_IlIz9tH0tmbQ0NIgaQyLb0r6ME-4MX0o", "content": "", "creation_timestamp": "2025-03-07T17:01:02.000000Z"}, {"uuid": "e6375f96-b2c9-490a-9867-65f34406bad0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27519", "type": "seen", "source": "Telegram/GvPZHyEbeVxrI-_IlIz9tH0tmbQ0NIgaQyLb0r6ME-4MX0o", "content": "", "creation_timestamp": "2025-03-07T17:01:02.000000Z"}, {"uuid": "d2a8bf97-b5ee-4a8e-84e5-6136d5af3946", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27154", "type": "published-proof-of-concept", "source": "Telegram/18aGabcqT47rhbAtmBCfjbslvF7WShvEcg6GVkQNwRNaIHA", "content": "", "creation_timestamp": "2025-02-27T15:30:14.000000Z"}, {"uuid": "4b1ee268-59d2-48ab-8247-d0a87d23e0e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2750", "type": "published-proof-of-concept", "source": "Telegram/ZQ3C3m4Ye3beVMYz2gKMjZdL4GwrlBDCQ3H5nAEOrBBrLiA", "content": "", "creation_timestamp": "2025-03-25T09:00:30.000000Z"}, {"uuid": "c0abef9b-b8a0-479e-acbb-97ceac6772e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2739", "type": "published-proof-of-concept", "source": "Telegram/1huWIRueQzufqMISTEPMEyKE3aRIFqK3qoq5n6GjRtUUGx0", "content": "", "creation_timestamp": "2025-03-25T08:01:13.000000Z"}, {"uuid": "fb0c3153-ab1f-40c2-8ad9-a157c316f288", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2740", "type": "published-proof-of-concept", "source": "Telegram/1huWIRueQzufqMISTEPMEyKE3aRIFqK3qoq5n6GjRtUUGx0", "content": "", "creation_timestamp": "2025-03-25T08:01:13.000000Z"}, {"uuid": "1ca1c66d-53bb-44fa-93f3-d766180d923e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2736", "type": "published-proof-of-concept", "source": "Telegram/iQNXtFYOmWcRpTuzCMi1YOkdI6G4t6sPIp-48nspyrGoFkg", "content": "", "creation_timestamp": "2025-03-25T07:00:53.000000Z"}, {"uuid": "824a0a62-c543-4d09-a7b0-77d3dd074818", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "published-proof-of-concept", "source": "Telegram/Bv5dxy_V5soxsvLh8l7xGypCiAqkJocQ9bLW1ZDnBcCxd0M", "content": "", "creation_timestamp": "2025-03-24T20:00:05.000000Z"}, {"uuid": "bfc60986-d079-4650-b21a-e08caba3127a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27554", "type": "published-proof-of-concept", "source": "Telegram/IkiNpkr4ydRbaMZsPe1KBjztuK3oXyNcJtTYc9OLzTRlSk8", "content": "", "creation_timestamp": "2025-03-01T08:00:33.000000Z"}, {"uuid": "6bfd6fe1-fd8f-40d5-b0cb-d6909c5308ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2728", "type": "published-proof-of-concept", "source": "Telegram/MXLtd6D6lDs-X3W-toegTHLzYyO4SelR8FKZM3tOB5yKLoA", "content": "", "creation_timestamp": "2025-03-25T04:01:20.000000Z"}, {"uuid": "0d7d6eb9-32c6-4d18-b814-4871b98d5dc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27410", "type": "published-proof-of-concept", "source": "Telegram/eJDKfJJRdB7IziU9tM6Akn5eQEePx4THs7-VH_JyoGvA7ig", "content": "", "creation_timestamp": "2025-03-18T22:00:06.000000Z"}, {"uuid": "86449a3d-6a4a-4c18-9679-3d4fafcaca2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27688", "type": "seen", "source": "Telegram/ZmfziCHx2cuj0taxRv_bC9hjPhDUM9ZhE0x1NEedA7HOlQU", "content": "", "creation_timestamp": "2025-03-18T18:00:21.000000Z"}, {"uuid": "25f3bb43-829b-4b71-be0b-ab3ac10dca1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27109", "type": "published-proof-of-concept", "source": "Telegram/z-TEGJuLb-MI9QSBe5sQLLsDPvx9hpDxWNGhFcSyGduHviQ", "content": "", "creation_timestamp": "2025-02-21T23:31:55.000000Z"}, {"uuid": "d4c66ff0-9562-4f9c-8ae0-27ed2b5a914d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27108", "type": "published-proof-of-concept", "source": "Telegram/z-TEGJuLb-MI9QSBe5sQLLsDPvx9hpDxWNGhFcSyGduHviQ", "content": "", "creation_timestamp": "2025-02-21T23:31:55.000000Z"}, {"uuid": "841cbdba-c96b-4e71-8ba7-be69f5a5e4a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27507", "type": "seen", "source": "Telegram/1O5z91QcHmrjRz26b3O2xs57dQF3nVw-sSDMEN0aU64nGRA", "content": "", "creation_timestamp": "2025-03-04T18:31:35.000000Z"}, {"uuid": "4cc0abf9-d4b9-4281-bb4f-284821332ec3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27106", "type": "published-proof-of-concept", "source": "Telegram/z-TEGJuLb-MI9QSBe5sQLLsDPvx9hpDxWNGhFcSyGduHviQ", "content": "", "creation_timestamp": "2025-02-21T23:31:55.000000Z"}, {"uuid": "767da35a-9a70-4f21-945a-ec84af66fd45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2753", "type": "published-proof-of-concept", "source": "Telegram/d874YtfjRzSeJrj5ty8uatKWcKwQKjZYN7PQfn6_9YdZXOI", "content": "", "creation_timestamp": "2025-03-25T10:01:07.000000Z"}, {"uuid": "b480b8bb-1412-4fa2-a8df-8e56d0f2b37a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2737", "type": "published-proof-of-concept", "source": "Telegram/iQNXtFYOmWcRpTuzCMi1YOkdI6G4t6sPIp-48nspyrGoFkg", "content": "", "creation_timestamp": "2025-03-25T07:00:53.000000Z"}, {"uuid": "12998ef8-14d5-4193-8133-461c5d7c1c7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2735", "type": "published-proof-of-concept", "source": "Telegram/iQNXtFYOmWcRpTuzCMi1YOkdI6G4t6sPIp-48nspyrGoFkg", "content": "", "creation_timestamp": "2025-03-25T07:00:53.000000Z"}, {"uuid": "6b82a4ab-daff-4a3c-9419-c6bd27c2b10a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2734", "type": "seen", "source": "Telegram/HqYNofQCexlTfascDsUW8VPNq7MxD-XC954VYBvvHvvKV08", "content": "", "creation_timestamp": "2025-03-25T06:00:43.000000Z"}, {"uuid": "f45fa59d-2e07-401b-9e05-e2c84e173aac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2732", "type": "seen", "source": "Telegram/HqYNofQCexlTfascDsUW8VPNq7MxD-XC954VYBvvHvvKV08", "content": "", "creation_timestamp": "2025-03-25T06:00:43.000000Z"}, {"uuid": "a6cb3561-ab95-4ada-b4a9-9ec4c8bb1eda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2729", "type": "published-proof-of-concept", "source": "Telegram/62wlcu6BMfeUX6k3N4qjTaQ1yC4uU0CijwETSIj91Mc6w00", "content": "", "creation_timestamp": "2025-03-25T05:00:34.000000Z"}, {"uuid": "9f46dae9-6c1f-46ae-b213-8d518698d886", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27787", "type": "published-proof-of-concept", "source": "Telegram/f9bJ_Gi25q0ZeFbva3U2-T1otHLP8tha0QyjUNdGGgBSvDk", "content": "", "creation_timestamp": "2025-03-19T23:33:38.000000Z"}, {"uuid": "d1b07663-5979-456f-8266-2ba5d45be0da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27786", "type": "published-proof-of-concept", "source": "Telegram/f9bJ_Gi25q0ZeFbva3U2-T1otHLP8tha0QyjUNdGGgBSvDk", "content": "", "creation_timestamp": "2025-03-19T23:33:38.000000Z"}, {"uuid": "21a7201a-d9a9-4dd2-94c0-b3c42bba50a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27783", "type": "published-proof-of-concept", "source": "Telegram/f9bJ_Gi25q0ZeFbva3U2-T1otHLP8tha0QyjUNdGGgBSvDk", "content": "", "creation_timestamp": "2025-03-19T23:33:38.000000Z"}, {"uuid": "2544c446-b1b2-4915-bbae-08b83b4c914c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27780", "type": "published-proof-of-concept", "source": "Telegram/jlMT5pQePgK5GBSq5wMoupEVU9UT7ofYY1WgfO6aSFHSaLY", "content": "", "creation_timestamp": "2025-03-19T22:01:14.000000Z"}, {"uuid": "00df8b5d-6f07-4244-aebe-5595369f4df7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27415", "type": "published-proof-of-concept", "source": "Telegram/jlMT5pQePgK5GBSq5wMoupEVU9UT7ofYY1WgfO6aSFHSaLY", "content": "", "creation_timestamp": "2025-03-19T22:01:14.000000Z"}, {"uuid": "d25fbb56-8914-4922-b00e-023d1756ab21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2730", "type": "published-proof-of-concept", "source": "Telegram/62wlcu6BMfeUX6k3N4qjTaQ1yC4uU0CijwETSIj91Mc6w00", "content": "", "creation_timestamp": "2025-03-25T05:00:34.000000Z"}, {"uuid": "3e2a5eb0-6287-4f1d-934c-1770c111e629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2731", "type": "published-proof-of-concept", "source": "Telegram/62wlcu6BMfeUX6k3N4qjTaQ1yC4uU0CijwETSIj91Mc6w00", "content": "", "creation_timestamp": "2025-03-25T05:00:34.000000Z"}, {"uuid": "d2655bfb-40be-4379-91b2-989c292621fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2727", "type": "published-proof-of-concept", "source": "Telegram/MXLtd6D6lDs-X3W-toegTHLzYyO4SelR8FKZM3tOB5yKLoA", "content": "", "creation_timestamp": "2025-03-25T04:01:20.000000Z"}, {"uuid": "fd8ae4f1-3be0-4a84-9e2f-4d13fd643ecb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2725", "type": "published-proof-of-concept", "source": "Telegram/MXLtd6D6lDs-X3W-toegTHLzYyO4SelR8FKZM3tOB5yKLoA", "content": "", "creation_timestamp": "2025-03-25T04:01:20.000000Z"}, {"uuid": "18eaf851-e4ee-4078-a145-04eaa20989fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2726", "type": "published-proof-of-concept", "source": "Telegram/MXLtd6D6lDs-X3W-toegTHLzYyO4SelR8FKZM3tOB5yKLoA", "content": "", "creation_timestamp": "2025-03-25T04:01:20.000000Z"}, {"uuid": "07360f2b-8c4e-4c28-991e-70a189bb60e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2754", "type": "published-proof-of-concept", "source": "Telegram/d874YtfjRzSeJrj5ty8uatKWcKwQKjZYN7PQfn6_9YdZXOI", "content": "", "creation_timestamp": "2025-03-25T10:01:07.000000Z"}, {"uuid": "ad7815b8-eb75-4ba9-b9ef-994e6fea26ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2755", "type": "published-proof-of-concept", "source": "Telegram/KKNSfhz-mhha5P6fDB5hkKZz3e-3yzTpgadHwHFP70I_DHE", "content": "", "creation_timestamp": "2025-03-25T11:01:05.000000Z"}, {"uuid": "b22bd994-edbd-486e-a4fd-658eea6c1097", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2756", "type": "published-proof-of-concept", "source": "Telegram/KKNSfhz-mhha5P6fDB5hkKZz3e-3yzTpgadHwHFP70I_DHE", "content": "", "creation_timestamp": "2025-03-25T11:01:05.000000Z"}, {"uuid": "f4bac0c6-9187-4595-9216-f4b9f5d53fd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2757", "type": "published-proof-of-concept", "source": "Telegram/KKNSfhz-mhha5P6fDB5hkKZz3e-3yzTpgadHwHFP70I_DHE", "content": "", "creation_timestamp": "2025-03-25T11:01:05.000000Z"}, {"uuid": "51d959e3-aad5-45c2-9fc9-88d1bd9a88e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2738", "type": "published-proof-of-concept", "source": "Telegram/1huWIRueQzufqMISTEPMEyKE3aRIFqK3qoq5n6GjRtUUGx0", "content": "", "creation_timestamp": "2025-03-25T08:01:13.000000Z"}, {"uuid": "0cace92a-0ea8-4744-a995-75d04f5a53df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27777", "type": "published-proof-of-concept", "source": "Telegram/HMG4VIRM9m-XCFs0EcofkvAyhAqbRpFenRbXfQ1LU4_Gb4E", "content": "", "creation_timestamp": "2025-03-19T23:33:40.000000Z"}, {"uuid": "e3b9c3cf-2b23-442a-be82-a4ad528f8525", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27783", "type": "published-proof-of-concept", "source": "Telegram/e8K6ei2MJobaYeBw9lEyjrqpWhjWmsfq7ceAEPONUHatpcs", "content": "", "creation_timestamp": "2025-03-19T23:33:39.000000Z"}, {"uuid": "548906ba-149a-426d-a9e7-5e132249c176", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27778", "type": "published-proof-of-concept", "source": "Telegram/e8K6ei2MJobaYeBw9lEyjrqpWhjWmsfq7ceAEPONUHatpcs", "content": "", "creation_timestamp": "2025-03-19T23:33:39.000000Z"}, {"uuid": "92dbe806-5f42-4c15-85b0-6191f9397f84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27782", "type": "published-proof-of-concept", "source": "Telegram/e8K6ei2MJobaYeBw9lEyjrqpWhjWmsfq7ceAEPONUHatpcs", "content": "", "creation_timestamp": "2025-03-19T23:33:39.000000Z"}, {"uuid": "cfb01c9e-3869-4fbb-bc80-4738bdd52156", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27785", "type": "published-proof-of-concept", "source": "Telegram/f9bJ_Gi25q0ZeFbva3U2-T1otHLP8tha0QyjUNdGGgBSvDk", "content": "", "creation_timestamp": "2025-03-19T23:33:38.000000Z"}, {"uuid": "6fb74e28-7f86-44c8-a85c-e69c77ab2eed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27784", "type": "published-proof-of-concept", "source": "Telegram/f9bJ_Gi25q0ZeFbva3U2-T1otHLP8tha0QyjUNdGGgBSvDk", "content": "", "creation_timestamp": "2025-03-19T23:33:38.000000Z"}, {"uuid": "31add72f-adf5-4abd-8d91-c479bdbfd076", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27781", "type": "published-proof-of-concept", "source": "Telegram/jlMT5pQePgK5GBSq5wMoupEVU9UT7ofYY1WgfO6aSFHSaLY", "content": "", "creation_timestamp": "2025-03-19T22:01:14.000000Z"}, {"uuid": "9285e2e2-5dd5-40e2-831e-b30d794b65de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/4192", "content": "Apache Camel CVE-2025\u201327636 & CVE-2025-29891 PoC\n\nhttps://github.com/akamai/CVE-2025-27636-Apache-Camel-PoC", "creation_timestamp": "2025-03-13T13:17:13.000000Z"}, {"uuid": "4e069fd2-4022-4755-9191-5458905dc122", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27364", "type": "published-proof-of-concept", "source": "Telegram/7eRZIkWg2tEfjiyCZ07Sn8ZocqvQkPDJPk9hAGHLN0MhRp4", "content": "", "creation_timestamp": "2025-02-28T17:47:37.000000Z"}, {"uuid": "ee2691e4-1a27-4c7a-973f-b4cc210d8574", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "Telegram/c1QAGperVEw6VIF3NrlS6dCsXeZ1-EwV9btgreqsjpvbHWk", "content": "", "creation_timestamp": "2025-03-26T12:26:44.000000Z"}, {"uuid": "7d266110-c270-4fa0-9d85-2136bd94f4f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "exploited", "source": "Telegram/yB6tmjql3VWbWBuWcyMn6vhXbL6FvWyFOiZBxpRR8xaT_iQ", "content": "", "creation_timestamp": "2025-03-13T10:29:42.000000Z"}, {"uuid": "64a6a24d-1110-4788-942e-e9d3c385503e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27112", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1698", "content": "", "creation_timestamp": "2025-03-16T11:12:45.000000Z"}, {"uuid": "f990ece0-5ae6-4193-91c1-d208b6fa9b11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "exploited", "source": "https://t.me/true_secator/7033", "content": "Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome, \u0434\u043b\u044f \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445, \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430, \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-4664 (CVSS: 4,3) \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043d\u0435\u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u043c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u043c \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f  \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Loader \u0432 Google Chrome \u0434\u043e 136.0.7103.113.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u00ab\u0434\u043b\u044f \u0443\u0442\u0435\u0447\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0440\u0430\u0437\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443\u00bb \u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u043c\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u0430 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\nGoogle \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e  Solidlab \u0412\u0441\u0435\u0432\u043e\u043b\u043e\u0434\u0443 \u041a\u043e\u043a\u043e\u0440\u0438\u043d\u0443 (slonser_), \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0432\u0448\u0435\u0433\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 X 5 \u043c\u0430\u044f 2025 \u0433\u043e\u0434\u0430, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 \u0441\u0432\u043e\u0438 \u043e\u0441\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0432 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0434\u043b\u044f CVE-2025-4664 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439, \u0438\u043c\u0435\u043d\u043d\u043e \u0442\u0430\u043a\u0443\u044e \u0444\u043e\u0440\u043c\u0443\u043b\u0438\u0440\u043e\u0432\u043a\u0443 Google \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Chrome \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0430\u0442\u0430\u043a.\n\n\u0422\u0430\u043a \u0447\u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0441\u0447\u0438\u0442\u0430\u0442\u044c CVE-2025-4664 \u0432\u0442\u043e\u0440\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043f\u043e\u0441\u043b\u0435 CVE-2025-2783, \u043f\u043e\u043f\u0430\u0432\u0430\u0432\u0448\u0435\u0439 \u043f\u043e\u0434 \u00ab\u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e\u00bb.\n\nSlonser\u00a0\u043f\u043e\u044f\u0441\u043d\u0438\u043b, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a Link, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 Chrome \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u0435\u0442 \u0432 \u0437\u0430\u043f\u0440\u043e\u0441\u0430\u0445 \u043f\u043e\u0434\u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0437\u0430\u043f\u0440\u043e\u0441\u0430, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0440\u0435\u0434\u043a\u043e \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043a\u0440\u0430\u0436\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0447\u0435\u0440\u0435\u0437 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0435\u0433\u043e \u0440\u0435\u0441\u0443\u0440\u0441\u0430, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u044d\u0442\u043e\u0442 \u0442\u0440\u044e\u043a \u0438\u043d\u043e\u0433\u0434\u0430 \u0443\u0434\u0438\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u043c.\n\n\u0414\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0433\u0440\u043e\u0437 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0431\u0440\u0430\u0443\u0437\u0435\u0440 Chrome \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439 136.0.7103.113/.114 \u0434\u043b\u044f Windows \u0438 Mac \u0438 136.0.7103.113 \u0434\u043b\u044f Linux.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0434\u0440\u0443\u0433\u0438\u0445 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 \u043d\u0430 \u0431\u0430\u0437\u0435 Chromium, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Microsoft Edge, Brave, Opera \u0438 Vivaldi, \u0442\u0430\u043a\u0436\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e \u043c\u0435\u0440\u0435 \u0438\u0445 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f.", "creation_timestamp": "2025-05-15T12:51:17.000000Z"}, {"uuid": "b7427cf6-f3d2-457a-a407-9a8d15ff940a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27520", "type": "seen", "source": "https://t.me/true_secator/6951", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c\u0438 \u0443\u0433\u0440\u043e\u0437\u044b:\n\n1. \u0412 \u041f\u041e Apache Roller\u00a0\u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Java \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-24859 \u0438 \u0438\u043c\u0435\u0435\u0442 CVSS 10,0. \n\n\u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Roller \u0434\u043e 6.1.4 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0438 \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0425\u0430\u0439\u043d\u0438\u043d\u0433\u043e\u043c \u041c\u044d\u043d\u043e\u043c.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0442\u0435\u043c, \u0447\u0442\u043e \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u0441\u0435\u0430\u043d\u0441\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0435 \u0430\u043d\u043d\u0443\u043b\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u043e\u0441\u043b\u0435 \u0441\u043c\u0435\u043d\u044b \u043f\u0430\u0440\u043e\u043b\u044f.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044e \u0447\u0435\u0440\u0435\u0437 \u0441\u0442\u0430\u0440\u044b\u0435 \u0441\u0435\u0430\u043d\u0441\u044b \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u0441\u043c\u0435\u043d\u044b \u043f\u0430\u0440\u043e\u043b\u044f.\n\n2. SSD Disclosure \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 RCE-\u043e\u0448\u0438\u0431\u043a\u0443\u00a0\u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 Calix Gigacenter.\n\n\u0423\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0432\u044b\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u0432\u043e\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f CPE \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u043d\u0430 \u043f\u043e\u0440\u0442\u0443 TCP 6998 \u0438 \u043d\u0435 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0442 \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0432\u0445\u043e\u0434\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435. \n\n\u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u043c\u043e\u0434\u0435\u043b\u0438 \u0431\u044b\u043b\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u044b \u0442\u0440\u0435\u0442\u044c\u0435\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u043e\u0439 \u043f\u043e\u0434 \u0431\u0440\u0435\u043d\u0434\u043e\u043c Calix \u0438 \u0442\u0435\u043f\u0435\u0440\u044c EoL.\n\n3. Checkmarx \u0438\u0437\u0443\u0447\u0430\u0435\u0442\u00a0\u043d\u0435\u0434\u0430\u0432\u043d\u044e\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c RCE \u0441 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u043e\u043c 9,8 (CVE-2025-27520) \u0432 BentoML, \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 Python \u0434\u043b\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441\u043e \u0441\u043b\u0443\u0436\u0431\u0430\u043c\u0438 \u0418\u0418.\n\n\u0427\u0438\u0441\u043b\u043e \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043d\u0430\u043c\u043d\u043e\u0433\u043e \u043c\u0435\u043d\u044c\u0448\u0435, \u0447\u0435\u043c \u0443\u043a\u0430\u0437\u0430\u043d\u043e \u0432 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438, \u043d\u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043d\u0435 \u0443\u043c\u0435\u043d\u044c\u0448\u0430\u0435\u0442: \u043e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0418\u0418.\n\n4. Coinspect \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e\u0431\u00a0\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u043a\u043e\u0448\u0435\u043b\u044c\u043a\u0430\u0445 Stellar Freighter, Frontier Wallet \u0438 Coin98, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u043a\u0440\u0430\u0436\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n5. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Praetorian \u0430\u0434\u0430\u043f\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u0441\u0440\u0435\u0434 DICOM \u043d\u0430 \u0431\u0430\u0437\u0435 Windows, \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0432 Linux. C\u0432\u043e\u0439 PoC \u043e\u043d\u0438 \u043d\u0430\u0437\u0432\u0430\u043b\u0438 \u0430\u0442\u0430\u043a\u043e\u0439 ELFDICOM.\n\n6. \u0423\u0447\u0430\u0441\u0442\u043d\u0438\u043a Red Team, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u043a\u0430\u043a Vari.sh, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e Doppelganger, \u043d\u043e\u0432\u043e\u043c \u043c\u0435\u0442\u043e\u0434\u0435\u00a0(\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435), \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u043c \u0434\u043b\u044f \u043a\u043b\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f LSASS \u0438 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 \u0431\u0435\u0437 \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0439 \u043d\u0430 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u0435.\n\n7. Quarkslab \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0433\u043e \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0430\u0442\u043e\u0440\u0430 PHP, \u0432\u044b\u044f\u0432\u0438\u0432 \u043f\u0440\u0438 \u044d\u0442\u043e\u043c 17 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n8. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Positive Technologies \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0438 \u0430\u043f\u0440\u0435\u043b\u044c\u0441\u043a\u0443\u044e \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0443 c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043e\u043f\u0430\u0441\u043d\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438, \u043a\u0443\u0434\u0430 \u0432\u043e\u0448\u043b\u0438 11 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 Microsoft, VMware \u0438 Apache.", "creation_timestamp": "2025-04-15T19:52:12.000000Z"}, {"uuid": "3589aac7-28f0-422b-9e4b-a72097cd6379", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "exploited", "source": "https://t.me/true_secator/6878", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0438\u0437 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0437\u0430\u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0442\u044c \u0446\u0435\u043b\u0435\u0432\u0443\u044e APT-\u0430\u0442\u0430\u043a\u0443 \u043d\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0435\u0439 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u0421\u041c\u0418 \u0438 \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0439, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0435 \u0441\u043b\u043e\u0436\u043d\u043e\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u043d\u0430\u0440\u044f\u0434\u0443 \u0441 \u0432\u0435\u0441\u044c\u043c\u0430 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u043c 0-day \u0432 Chrome.\n\n\u0418\u0437\u043e\u0449\u0440\u0435\u043d\u043d\u0430\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0435\u043f\u0435\u0440\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u041e\u043f\u0435\u0440\u0430\u0446\u0438\u044f \u00ab\u0424\u043e\u0440\u0443\u043c\u043d\u044b\u0439 \u0442\u0440\u043e\u043b\u043b\u044c\u00bb, \u0430 \u043d\u0443\u043b\u044e \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2025-2783.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u0436\u0435\u0440\u0442\u0432 \u0438\u0437 \u0447\u0438\u0441\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Windows \u0437\u0430\u043c\u0430\u043d\u0438\u0432\u0430\u044e\u0442 \u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0430\u0439\u0442, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Chromium.\n\n\u041f\u043e\u0441\u043b\u0435 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u044f \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0438 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Google Chrome \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442\u0441\u044f \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0441 \u0446\u0435\u043b\u044c\u044e \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u043e\u0442 \u0436\u0435\u0440\u0442\u0432\u044b \u043d\u0435 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u043e\u0441\u044c.\n\n\u0414\u043b\u044f \u043e\u0431\u043c\u0430\u043d\u0430 \u0436\u0435\u0440\u0442\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0444\u0438\u0448\u0438\u043d\u0433 \u0441 \u043f\u0440\u0438\u043c\u0430\u043d\u043a\u043e\u0439 \u0432 \u0432\u0438\u0434\u0435 \u043f\u0440\u0438\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044f \u043d\u0430 \u043d\u0430\u0443\u0447\u043d\u044b\u0439 \u0444\u043e\u0440\u0443\u043c \u041f\u0440\u0438\u043c\u0430\u043a\u043e\u0432\u0441\u043a\u0438\u0435 \u0447\u0442\u0435\u043d\u0438\u044f. \n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0432\u0441\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u0441\u044b\u043b\u043a\u0438 \u0438\u043c\u0435\u043b\u0438 \u043e\u0447\u0435\u043d\u044c \u043a\u043e\u0440\u043e\u0442\u043a\u0438\u0439 \u0441\u0440\u043e\u043a \u0436\u0438\u0437\u043d\u0438, \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \u041b\u041a \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c 0-day \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u0434\u043b\u044f \u043f\u043e\u0431\u0435\u0433\u0430 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b Google Chrome.\n\n\u0410\u043d\u0430\u043b\u0438\u0437 \u043a\u043e\u0434\u0430 \u0438 \u043b\u043e\u0433\u0438\u043a\u0438 \u0440\u0430\u0431\u043e\u0442\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043f\u0440\u0438\u0432\u0435\u043b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u041b\u041a \u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044e \u043d\u0443\u043b\u044f (\u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0433\u043e \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Chrome), \u043e \u0447\u0435\u043c \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0438 Google.\n\n\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0432 \u043e\u0442\u0447\u0435\u0442\u0435 \u041b\u041a \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0438 Google \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043a 25 \u043c\u0430\u0440\u0442\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0451\u043d\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e Chrome 134.0.6998.177/.178\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c CVE-2025-2783 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437\u0440\u044f\u0434\u043d\u043e \u043f\u043e\u043b\u043e\u043c\u0430\u0442\u044c \u0433\u043e\u043b\u043e\u0432\u0443, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u043b\u0435\u0433\u043a\u043e \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b Google Chrome \u0431\u0435\u0437 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u043e\u0447\u0435\u0432\u0438\u0434\u043d\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439.\n\n\u041f\u0440\u0438\u0447\u0438\u043d\u043e\u0439 \u044d\u0442\u043e\u0433\u043e \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u043d\u0430 \u0441\u0442\u044b\u043a\u0435 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0438 \u041e\u0421 Windows.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u041e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u00ab\u0424\u043e\u0440\u0443\u043c\u043d\u044b\u0439 \u0442\u0440\u043e\u043b\u043b\u044c\u00bb \u043a \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0435\u0449\u0435 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f \u0438 \u043e\u0431\u0435\u0449\u0430\u0435\u0442 \u043c\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0440\u0438\u0433\u0443\u044e\u0449\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439. \n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0431\u044b\u043b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u041b\u041a \u043d\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0442\u043e\u0433\u0434\u0430 \u043f\u0440\u0438\u0448\u043b\u043e\u0441\u044c \u0431\u044b \u0434\u043e\u0436\u0438\u0434\u0430\u0442\u044c\u0441\u044f \u043d\u043e\u0432\u043e\u0439 \u0432\u043e\u043b\u043d\u044b \u0430\u0442\u0430\u043a \u0438 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0440\u0438\u0441\u043a\u0443 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0431\u0435\u0433\u0430 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u0441\u0435\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0434\u043b\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0438\u0445 \u0430\u0442\u0430\u043a.\n\n\u0412\u0441\u0435 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u044b \u0430\u0442\u0430\u043a \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u043d\u0430 \u0432\u0435\u0441\u044c\u043c\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u043e\u0442\u0447\u0435\u0442 \u0441 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 0-day \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u043c\u043e\u0433\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0438 \u0438\u0445 TTPs \u0432 \u041b\u041a \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u044b \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0432 \u0441\u043a\u043e\u0440\u043e\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0438.\n\n\u0411\u0443\u0434\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c.", "creation_timestamp": "2025-03-26T13:28:25.000000Z"}, {"uuid": "03ec38df-7f37-4477-8c0b-d80ff20ed9e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27920", "type": "seen", "source": "https://t.me/true_secator/7027", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Microsoft \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u043d\u043e\u0432\u0443\u044e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e \u0442\u0443\u0440\u0435\u0446\u043a\u043e\u0439 APT Marbled Dust, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u0443\u044e \u043d\u0430 \u043a\u0443\u0440\u0434\u0441\u043a\u0438\u0445 \u0432\u043e\u0435\u043d\u043d\u044b\u0445, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0432 \u0418\u0440\u0430\u043a\u0435.\n\n\u0414\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u0432\u043e\u0438\u0445 \u0446\u0435\u043b\u0435\u0439 \u0442\u0443\u0440\u0435\u0446\u043a\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0441 \u0430\u043f\u0440\u0435\u043b\u044f 2024 \u0433\u043e\u0434\u0430 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 0-day \u0432 \u0438\u043d\u0434\u0438\u0439\u0441\u043a\u043e\u0439 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Output Messenger \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u0432 Golang \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b.\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0438 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u0441\u0431\u043e\u0440\u0443 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441 \u0446\u0435\u043b\u0435\u0439 \u0432 \u0418\u0440\u0430\u043a\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u043c\u0435\u043b\u0438 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0435 \u043a\u0443\u0440\u0434\u0441\u043a\u0438\u043c \u0432\u043e\u0435\u043d\u043d\u044b\u043c, \u0447\u0442\u043e \u0432\u043f\u043e\u043b\u043d\u0435 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0440\u0430\u043d\u0435\u0435 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u043c  \u0443\u0441\u0442\u0440\u0435\u043c\u043b\u0435\u043d\u0438\u044f\u043c Marbled Dust.\n\n\u041d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438  \u043f\u0440\u0438\u043f\u0438\u0441\u0430\u043b\u0438 Marbled Dust (\u0440\u0430\u043d\u0435\u0435 Silicon), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430 \u043a\u0430\u043a Cosmic Wolf, Sea Turtle, Teal Kurma \u0438 UNC1326.\n\n\u0421\u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u0430 \u043f\u043e \u043a\u0440\u0430\u0439\u043d\u0435\u0439 \u043c\u0435\u0440\u0435 \u0441 2017 \u0433\u043e\u0434\u0430, \u043f\u0440\u0438 \u0442\u043e\u043c, \u0447\u0442\u043e \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043d\u0430 \u0411\u043b\u0438\u0436\u043d\u0435\u043c \u0412\u043e\u0441\u0442\u043e\u043a\u0435 \u0438 \u0432 \u0421\u0435\u0432\u0435\u0440\u043d\u043e\u0439 \u0410\u0444\u0440\u0438\u043a\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043b\u0438\u0448\u044c \u0441\u043f\u0443\u0441\u0442\u044f \u0434\u0432\u0430 \u0433\u043e\u0434\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Cisco Talos.\n\n\u0412 \u043d\u0430\u0447\u0430\u043b\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430 APT \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u043b\u0430\u0441\u044c \u043d\u0430 \u0442\u0435\u043b\u0435\u043a\u043e\u043c, \u0421\u041c\u0418, \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 ISP, IT \u0438 \u043a\u0443\u0440\u0434\u0441\u043a\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u044b \u0432 \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u0430\u0445.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0430\u0442\u0430\u043a\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 0-day Output Messenger, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u043b\u0438 \u044d\u0442\u0430\u043f \u0437\u0430\u0431\u043b\u0430\u0433\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0439  \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438, \u043f\u043e \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0431\u044b\u043b \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d \u043f\u0443\u043b \u0446\u0435\u043b\u0435\u0439 \u0438\u0437 \u0447\u0438\u0441\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043c\u0435\u0441\u0441\u0435\u043d\u0434\u0436\u0435\u0440\u0430.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 Microsoft, - CVE-2025-27920, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u044e 2.0.62, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0438\u0445.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 Srimax \u0432 \u043a\u043e\u043d\u0446\u0435 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 2.0.63. \u041e\u0434\u043d\u0430\u043a\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432 \u0441\u0432\u043e\u0435\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u043e \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442.\n\n\u0426\u0435\u043f\u043e\u0447\u043a\u0430 \u0430\u0442\u0430\u043a \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0441 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044e Output Messenger Server Manager \u043a\u0430\u043a \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c.\n\n\u0421\u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e Marbled Dust \u043f\u043e\u043b\u0430\u0433\u0430\u043b\u0430\u0441\u044c \u043d\u0430 DNS-\u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u0438\u043b\u0438 \u0442\u0430\u0439\u043f\u0441\u043a\u0432\u043e\u0442\u0442\u0438\u043d\u0433 \u0434\u043e\u043c\u0435\u043d\u043e\u0432, \u0447\u0442\u043e\u0431\u044b \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0417\u0430\u0442\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0441\u044f \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f Output Messenger \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-27920 \u0441 \u0446\u0435\u043b\u044c\u044e \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u043d\u0430\u0433\u0440\u0443\u0437\u043e\u043a OM.vbs \u0438 OMServerService.vbs, \u0432 \u043f\u0430\u043f\u043a\u0435 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0430 OMServerService.exe - \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 Users/public/videos \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\u041d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u044d\u0442\u0430\u043f\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b OMServerService.vbs \u0434\u043b\u044f \u0432\u044b\u0437\u043e\u0432\u0430 OM.vbs \u0438 OMServerService.exe, \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0431\u044d\u043a\u0434\u043e\u0440 Golang, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0441 \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0434\u043e\u043c\u0435\u043d\u043e\u043c (api.wordinfos[.]com) \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0435\u0442 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u043a\u0430\u043a \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0439 \u0444\u0430\u0439\u043b OutputMessenger.exe, \u0442\u0430\u043a \u0438 OMClientService.exe, \u0435\u0449\u0435 \u043e\u0434\u0438\u043d \u0431\u044d\u043a\u0434\u043e\u0440 Golang, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u043a \u04212 \u0434\u043e\u043c\u0435\u043d\u0443 Marbled Dust.\n\n\u042d\u0442\u043e\u0442 \u0431\u044d\u043a\u0434\u043e\u0440 \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0437\u0430\u043f\u0440\u043e\u0441\u0430 GET \u043a \u0434\u043e\u043c\u0435\u043d\u0443 C2 api.wordinfos[.]com.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0445\u0430 \u043d\u0430 \u0442\u043e\u0442 \u0436\u0435 C2 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432\u0442\u043e\u0440\u043e\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 GET, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u0438\u043c\u0435\u043d\u0438 \u0445\u043e\u0441\u0442\u0430 \u0434\u043b\u044f \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0436\u0435\u0440\u0442\u0432\u044b.\n\n\u0417\u0430\u0442\u0435\u043c \u043e\u0442\u0432\u0435\u0442 \u043e\u0442 C2 \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 Windows, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u0440\u0430\u0431\u043e\u0442\u0430 \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u0435\u0442\u0441\u044f.\n\n\u0412 \u043e\u0434\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0436\u0435\u0440\u0442\u0432\u044b \u0441 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435\u043c Output Messenger \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u043b\u043e\u0441\u044c \u043a IP-\u0430\u0434\u0440\u0435\u0441\u0443, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u043d\u0435\u0435 \u0431\u044b\u043b \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d \u043a\u0430\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 Marbled Dust \u0434\u043b\u044f \u044d\u043a\u0441\u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\nMicrosoft \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0432\u0442\u043e\u0440\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043d\u0433\u0430 (XSS) \u0432 \u0442\u043e\u0439 \u0436\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 (CVE-2025-27921), \u043d\u043e \u043d\u0435 \u043d\u0430\u0448\u043b\u0430 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0435\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041d\u043e\u0432\u044b\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c 0-day \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430, \u0441\u0438\u0433\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0442 \u043e \u0437\u0430\u043c\u0435\u0442\u043d\u043e\u043c \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439 Marbled Dust \u0438 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u043c\u044b\u0445 \u0430\u0442\u0430\u043a \u043f\u0440\u0438 \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u0438\u0445 \u043e\u0431\u0449\u0435\u0433\u043e \u043a\u0443\u0440\u0441\u0430 \u0432 \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0435.", "creation_timestamp": "2025-05-13T16:40:05.000000Z"}, {"uuid": "46f76bbf-7d4d-4858-a0c0-34d4ca6a1ece", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27921", "type": "seen", "source": "https://t.me/true_secator/7027", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Microsoft \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u043d\u043e\u0432\u0443\u044e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e \u0442\u0443\u0440\u0435\u0446\u043a\u043e\u0439 APT Marbled Dust, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u0443\u044e \u043d\u0430 \u043a\u0443\u0440\u0434\u0441\u043a\u0438\u0445 \u0432\u043e\u0435\u043d\u043d\u044b\u0445, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0432 \u0418\u0440\u0430\u043a\u0435.\n\n\u0414\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u0432\u043e\u0438\u0445 \u0446\u0435\u043b\u0435\u0439 \u0442\u0443\u0440\u0435\u0446\u043a\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0441 \u0430\u043f\u0440\u0435\u043b\u044f 2024 \u0433\u043e\u0434\u0430 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 0-day \u0432 \u0438\u043d\u0434\u0438\u0439\u0441\u043a\u043e\u0439 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Output Messenger \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u0432 Golang \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b.\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0438 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u0441\u0431\u043e\u0440\u0443 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441 \u0446\u0435\u043b\u0435\u0439 \u0432 \u0418\u0440\u0430\u043a\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u043c\u0435\u043b\u0438 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0435 \u043a\u0443\u0440\u0434\u0441\u043a\u0438\u043c \u0432\u043e\u0435\u043d\u043d\u044b\u043c, \u0447\u0442\u043e \u0432\u043f\u043e\u043b\u043d\u0435 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0440\u0430\u043d\u0435\u0435 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u043c  \u0443\u0441\u0442\u0440\u0435\u043c\u043b\u0435\u043d\u0438\u044f\u043c Marbled Dust.\n\n\u041d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438  \u043f\u0440\u0438\u043f\u0438\u0441\u0430\u043b\u0438 Marbled Dust (\u0440\u0430\u043d\u0435\u0435 Silicon), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430 \u043a\u0430\u043a Cosmic Wolf, Sea Turtle, Teal Kurma \u0438 UNC1326.\n\n\u0421\u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u0430 \u043f\u043e \u043a\u0440\u0430\u0439\u043d\u0435\u0439 \u043c\u0435\u0440\u0435 \u0441 2017 \u0433\u043e\u0434\u0430, \u043f\u0440\u0438 \u0442\u043e\u043c, \u0447\u0442\u043e \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043d\u0430 \u0411\u043b\u0438\u0436\u043d\u0435\u043c \u0412\u043e\u0441\u0442\u043e\u043a\u0435 \u0438 \u0432 \u0421\u0435\u0432\u0435\u0440\u043d\u043e\u0439 \u0410\u0444\u0440\u0438\u043a\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043b\u0438\u0448\u044c \u0441\u043f\u0443\u0441\u0442\u044f \u0434\u0432\u0430 \u0433\u043e\u0434\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Cisco Talos.\n\n\u0412 \u043d\u0430\u0447\u0430\u043b\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430 APT \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u043b\u0430\u0441\u044c \u043d\u0430 \u0442\u0435\u043b\u0435\u043a\u043e\u043c, \u0421\u041c\u0418, \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 ISP, IT \u0438 \u043a\u0443\u0440\u0434\u0441\u043a\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u044b \u0432 \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u0430\u0445.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0430\u0442\u0430\u043a\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 0-day Output Messenger, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u043b\u0438 \u044d\u0442\u0430\u043f \u0437\u0430\u0431\u043b\u0430\u0433\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0439  \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438, \u043f\u043e \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0431\u044b\u043b \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d \u043f\u0443\u043b \u0446\u0435\u043b\u0435\u0439 \u0438\u0437 \u0447\u0438\u0441\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043c\u0435\u0441\u0441\u0435\u043d\u0434\u0436\u0435\u0440\u0430.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 Microsoft, - CVE-2025-27920, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u044e 2.0.62, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0438\u0445.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 Srimax \u0432 \u043a\u043e\u043d\u0446\u0435 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 2.0.63. \u041e\u0434\u043d\u0430\u043a\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432 \u0441\u0432\u043e\u0435\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u043e \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442.\n\n\u0426\u0435\u043f\u043e\u0447\u043a\u0430 \u0430\u0442\u0430\u043a \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0441 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044e Output Messenger Server Manager \u043a\u0430\u043a \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c.\n\n\u0421\u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e Marbled Dust \u043f\u043e\u043b\u0430\u0433\u0430\u043b\u0430\u0441\u044c \u043d\u0430 DNS-\u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u0438\u043b\u0438 \u0442\u0430\u0439\u043f\u0441\u043a\u0432\u043e\u0442\u0442\u0438\u043d\u0433 \u0434\u043e\u043c\u0435\u043d\u043e\u0432, \u0447\u0442\u043e\u0431\u044b \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0417\u0430\u0442\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0441\u044f \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f Output Messenger \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-27920 \u0441 \u0446\u0435\u043b\u044c\u044e \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u043d\u0430\u0433\u0440\u0443\u0437\u043e\u043a OM.vbs \u0438 OMServerService.vbs, \u0432 \u043f\u0430\u043f\u043a\u0435 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0430 OMServerService.exe - \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 Users/public/videos \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\u041d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u044d\u0442\u0430\u043f\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b OMServerService.vbs \u0434\u043b\u044f \u0432\u044b\u0437\u043e\u0432\u0430 OM.vbs \u0438 OMServerService.exe, \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0431\u044d\u043a\u0434\u043e\u0440 Golang, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0441 \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0434\u043e\u043c\u0435\u043d\u043e\u043c (api.wordinfos[.]com) \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0435\u0442 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u043a\u0430\u043a \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0439 \u0444\u0430\u0439\u043b OutputMessenger.exe, \u0442\u0430\u043a \u0438 OMClientService.exe, \u0435\u0449\u0435 \u043e\u0434\u0438\u043d \u0431\u044d\u043a\u0434\u043e\u0440 Golang, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u043a \u04212 \u0434\u043e\u043c\u0435\u043d\u0443 Marbled Dust.\n\n\u042d\u0442\u043e\u0442 \u0431\u044d\u043a\u0434\u043e\u0440 \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0437\u0430\u043f\u0440\u043e\u0441\u0430 GET \u043a \u0434\u043e\u043c\u0435\u043d\u0443 C2 api.wordinfos[.]com.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0445\u0430 \u043d\u0430 \u0442\u043e\u0442 \u0436\u0435 C2 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432\u0442\u043e\u0440\u043e\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 GET, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u0438\u043c\u0435\u043d\u0438 \u0445\u043e\u0441\u0442\u0430 \u0434\u043b\u044f \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0436\u0435\u0440\u0442\u0432\u044b.\n\n\u0417\u0430\u0442\u0435\u043c \u043e\u0442\u0432\u0435\u0442 \u043e\u0442 C2 \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 Windows, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u0440\u0430\u0431\u043e\u0442\u0430 \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u0435\u0442\u0441\u044f.\n\n\u0412 \u043e\u0434\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0436\u0435\u0440\u0442\u0432\u044b \u0441 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435\u043c Output Messenger \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u043b\u043e\u0441\u044c \u043a IP-\u0430\u0434\u0440\u0435\u0441\u0443, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u043d\u0435\u0435 \u0431\u044b\u043b \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d \u043a\u0430\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 Marbled Dust \u0434\u043b\u044f \u044d\u043a\u0441\u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\nMicrosoft \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0432\u0442\u043e\u0440\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043d\u0433\u0430 (XSS) \u0432 \u0442\u043e\u0439 \u0436\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 (CVE-2025-27921), \u043d\u043e \u043d\u0435 \u043d\u0430\u0448\u043b\u0430 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0435\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041d\u043e\u0432\u044b\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c 0-day \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430, \u0441\u0438\u0433\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0442 \u043e \u0437\u0430\u043c\u0435\u0442\u043d\u043e\u043c \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439 Marbled Dust \u0438 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u043c\u044b\u0445 \u0430\u0442\u0430\u043a \u043f\u0440\u0438 \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u0438\u0445 \u043e\u0431\u0449\u0435\u0433\u043e \u043a\u0443\u0440\u0441\u0430 \u0432 \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0435.", "creation_timestamp": "2025-05-13T16:40:05.000000Z"}, {"uuid": "0f4f0122-8e06-4af2-ac8c-c6f4bd488c9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2778", "type": "exploited", "source": "https://t.me/true_secator/7023", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 WatchTowr Labs \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0442\u0440\u0438 \u043e\u0448\u0438\u0431\u043a\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u041f\u041e \u0418\u0422-\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 SysAid.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-2775 \u0438 CVE-2025-2776 (\u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 XXE \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 /mdm/checkin), CVE-2025-2777 (\u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 XXE \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 /lshw).\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c watchTowr Labs, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043b\u0435\u0433\u043a\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u0430 POST \u043a \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u043c \u0442\u043e\u0447\u043a\u0430\u043c.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0441 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f InitAccount.cmd, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u0442\u0435\u043a\u0441\u0442\u043e\u0432\u044b\u0439 \u043f\u0430\u0440\u043e\u043b\u044c.\n\n\u041f\u043e\u043b\u0443\u0447\u0438\u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0431\u0435\u0437 \u0442\u0440\u0443\u0434\u0430 \u043c\u043e\u0436\u0435\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a SysAid.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c XXE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0434\u0440\u0443\u0433\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u041e\u0421, \u043e\u0442\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 CVE-2025-2778, \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u0412\u0441\u0435 \u0447\u0435\u0442\u044b\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b SysAid \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 24.4.60 b16 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u043c\u0430\u0440\u0442\u0430 2025 \u0433\u043e\u0434\u0430.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u0434\u0430\u0432\u043d\u044e\u044e \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0443 \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u043d\u0438\u0435 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 SysAid\u00a0\u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0431\u0430\u043d\u0434 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 (\u0432 \u0447\u0438\u0441\u043b\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438\u0441\u044c Cl0p) \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 PoC, \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u044f\u044e\u0449\u0435\u0433\u043e \u0432\u0441\u0435 \u0447\u0435\u0442\u044b\u0440\u0435\u00a0\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043d\u0430\u043a\u0430\u0442\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.", "creation_timestamp": "2025-05-12T17:15:08.000000Z"}, {"uuid": "9545de1e-e189-4b74-a27f-06df5d9a6ff0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2777", "type": "exploited", "source": "https://t.me/true_secator/7023", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 WatchTowr Labs \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0442\u0440\u0438 \u043e\u0448\u0438\u0431\u043a\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u041f\u041e \u0418\u0422-\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 SysAid.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-2775 \u0438 CVE-2025-2776 (\u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 XXE \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 /mdm/checkin), CVE-2025-2777 (\u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 XXE \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 /lshw).\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c watchTowr Labs, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043b\u0435\u0433\u043a\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u0430 POST \u043a \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u043c \u0442\u043e\u0447\u043a\u0430\u043c.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0441 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f InitAccount.cmd, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u0442\u0435\u043a\u0441\u0442\u043e\u0432\u044b\u0439 \u043f\u0430\u0440\u043e\u043b\u044c.\n\n\u041f\u043e\u043b\u0443\u0447\u0438\u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0431\u0435\u0437 \u0442\u0440\u0443\u0434\u0430 \u043c\u043e\u0436\u0435\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a SysAid.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c XXE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0434\u0440\u0443\u0433\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u041e\u0421, \u043e\u0442\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 CVE-2025-2778, \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u0412\u0441\u0435 \u0447\u0435\u0442\u044b\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b SysAid \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 24.4.60 b16 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u043c\u0430\u0440\u0442\u0430 2025 \u0433\u043e\u0434\u0430.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u0434\u0430\u0432\u043d\u044e\u044e \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0443 \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u043d\u0438\u0435 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 SysAid\u00a0\u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0431\u0430\u043d\u0434 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 (\u0432 \u0447\u0438\u0441\u043b\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438\u0441\u044c Cl0p) \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 PoC, \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u044f\u044e\u0449\u0435\u0433\u043e \u0432\u0441\u0435 \u0447\u0435\u0442\u044b\u0440\u0435\u00a0\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043d\u0430\u043a\u0430\u0442\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.", "creation_timestamp": "2025-05-12T17:15:08.000000Z"}, {"uuid": "8d8f4b2e-fff9-4f66-99aa-d9b348cd7e9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "exploited", "source": "https://t.me/true_secator/7023", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 WatchTowr Labs \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0442\u0440\u0438 \u043e\u0448\u0438\u0431\u043a\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u041f\u041e \u0418\u0422-\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 SysAid.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-2775 \u0438 CVE-2025-2776 (\u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 XXE \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 /mdm/checkin), CVE-2025-2777 (\u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 XXE \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 /lshw).\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c watchTowr Labs, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043b\u0435\u0433\u043a\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u0430 POST \u043a \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u043c \u0442\u043e\u0447\u043a\u0430\u043c.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0441 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f InitAccount.cmd, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u0442\u0435\u043a\u0441\u0442\u043e\u0432\u044b\u0439 \u043f\u0430\u0440\u043e\u043b\u044c.\n\n\u041f\u043e\u043b\u0443\u0447\u0438\u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0431\u0435\u0437 \u0442\u0440\u0443\u0434\u0430 \u043c\u043e\u0436\u0435\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a SysAid.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c XXE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0434\u0440\u0443\u0433\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u041e\u0421, \u043e\u0442\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 CVE-2025-2778, \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u0412\u0441\u0435 \u0447\u0435\u0442\u044b\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b SysAid \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 24.4.60 b16 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u043c\u0430\u0440\u0442\u0430 2025 \u0433\u043e\u0434\u0430.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u0434\u0430\u0432\u043d\u044e\u044e \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0443 \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u043d\u0438\u0435 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 SysAid\u00a0\u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0431\u0430\u043d\u0434 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 (\u0432 \u0447\u0438\u0441\u043b\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438\u0441\u044c Cl0p) \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 PoC, \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u044f\u044e\u0449\u0435\u0433\u043e \u0432\u0441\u0435 \u0447\u0435\u0442\u044b\u0440\u0435\u00a0\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043d\u0430\u043a\u0430\u0442\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.", "creation_timestamp": "2025-05-12T17:15:08.000000Z"}, {"uuid": "767f2a9b-b8ab-4eed-80b4-fd11886a7195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "exploited", "source": "https://t.me/true_secator/7023", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 WatchTowr Labs \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0442\u0440\u0438 \u043e\u0448\u0438\u0431\u043a\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u041f\u041e \u0418\u0422-\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 SysAid.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-2775 \u0438 CVE-2025-2776 (\u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 XXE \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 /mdm/checkin), CVE-2025-2777 (\u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 XXE \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 /lshw).\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c watchTowr Labs, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043b\u0435\u0433\u043a\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u0430 POST \u043a \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u043c \u0442\u043e\u0447\u043a\u0430\u043c.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0441 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f InitAccount.cmd, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u0442\u0435\u043a\u0441\u0442\u043e\u0432\u044b\u0439 \u043f\u0430\u0440\u043e\u043b\u044c.\n\n\u041f\u043e\u043b\u0443\u0447\u0438\u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0431\u0435\u0437 \u0442\u0440\u0443\u0434\u0430 \u043c\u043e\u0436\u0435\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a SysAid.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c XXE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0434\u0440\u0443\u0433\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u041e\u0421, \u043e\u0442\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 CVE-2025-2778, \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u0412\u0441\u0435 \u0447\u0435\u0442\u044b\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b SysAid \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 24.4.60 b16 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u043c\u0430\u0440\u0442\u0430 2025 \u0433\u043e\u0434\u0430.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u0434\u0430\u0432\u043d\u044e\u044e \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0443 \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u043d\u0438\u0435 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 SysAid\u00a0\u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0431\u0430\u043d\u0434 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 (\u0432 \u0447\u0438\u0441\u043b\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438\u0441\u044c Cl0p) \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 PoC, \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u044f\u044e\u0449\u0435\u0433\u043e \u0432\u0441\u0435 \u0447\u0435\u0442\u044b\u0440\u0435\u00a0\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043d\u0430\u043a\u0430\u0442\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.", "creation_timestamp": "2025-05-12T17:15:08.000000Z"}, {"uuid": "4467d231-f949-4194-96d1-44753c792a09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "exploited", "source": "https://t.me/true_secator/7019", "content": "\u041a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u043f\u0435\u0440\u0435\u043a\u043b\u044e\u0447\u0438\u043b\u043e\u0441\u044c \u043d\u0430 \u0432\u0442\u043e\u0440\u0443\u044e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 OttoKit \u0434\u043b\u044f WordPress \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0430\u0439\u0442\u043e\u0432 WordPress.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Defiant \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442 \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432\u0442\u043e\u0440\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 OttoKit, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u0430 \u043c\u0435\u043d\u0435\u0435 \u0447\u0435\u043c \u0447\u0435\u0440\u0435\u0437 \u043c\u0435\u0441\u044f\u0446 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0431\u044b\u043b\u0438 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u044b \u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0434\u0440\u0443\u0433\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u043e\u0432.\n\n\u041f\u043b\u0430\u0433\u0438\u043d OttoKit: All-in-One Automation Platform (\u0440\u0430\u043d\u0435\u0435 SureTriggers), \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u0431\u043e\u043b\u0435\u0435 100 000 \u0440\u0430\u0437, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0441\u0430\u0439\u0442\u043e\u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u0430\u0434\u0430\u0447, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0438\u043c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u044b \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u043b\u0430\u0433\u0438\u043d\u044b.\n\n\u0412 \u043d\u0430\u0447\u0430\u043b\u0435 \u0430\u043f\u0440\u0435\u043b\u044f \u0431\u044b\u043b\u0430 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u0430\u044f \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-3102\u00a0- \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0435 \u0438 \u043d\u0435\u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 OttoKit, - \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043d\u043e\u0432\u044b\u0445 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u043e\u0432.\n\n\u041d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 Defiant \u043e\u0431\u0440\u0430\u0449\u0430\u0435\u0442 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u0430\u0442\u0430\u043a\u0438, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u043d\u043e\u0432\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435, CVE-2025-27007 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 9,8), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c\u0441\u044f \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0441\u0430\u0439\u0442\u0430\u043c.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0444\u0443\u043d\u043a\u0446\u0438\u0435\u0439 \u043f\u043b\u0430\u0433\u0438\u043d\u0430 create_wp_connection(), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043d\u0435 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u0430 \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0434\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e, \u0447\u0442\u043e\u0431\u044b \u0441\u0430\u0439\u0442 \u043d\u0438\u043a\u043e\u0433\u0434\u0430 \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u043b \u0438 \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u043f\u0430\u0440\u043e\u043b\u044c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0430 OttoKit/SureTriggers \u043d\u0438\u043a\u043e\u0433\u0434\u0430 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u043b\u0441\u044f \u043a \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u0443 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0430\u0440\u043e\u043b\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f.\n\n\u0412 \u044d\u0442\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043c\u043e\u0436\u0435\u0442 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u0434\u0430\u0436\u0435 \u043d\u0435 \u0437\u043d\u0430\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0434\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043f\u0430\u0440\u043e\u043b\u044c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0441\u0430\u0439\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0436\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u043b\u0438\u0441\u044c \u043a \u043f\u043b\u0430\u0433\u0438\u043d\u0443 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0430\u0440\u043e\u043b\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u043d\u0435 \u0434\u043e\u043b\u0436\u043d\u044b \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0439.", "creation_timestamp": "2025-05-07T19:00:09.000000Z"}, {"uuid": "eaa0f1df-4b3d-42a4-a1b4-8f6e7020dc20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "exploited", "source": "https://t.me/true_secator/7013", "content": "Google \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u0435\u0436\u0435\u043c\u0435\u0441\u044f\u0447\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f Android \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 46 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u0434\u043d\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430, \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0446\u0435\u043b\u044f\u0445.\n\nCVE-2025-27363 \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS: 8,1, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 System \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043d\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435.\n\n\u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u043e\u0439 \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433\u0430 \u0448\u0440\u0438\u0444\u0442\u043e\u0432 FreeType \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c.\n\n\u0412\u043f\u0435\u0440\u0432\u044b\u0435 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 Meta (\u043f\u0440\u0438\u0437\u043d\u0430\u043d\u0430 \u0432 \u0420\u0424 \u044d\u043a\u0441\u0442\u0440\u0435\u043c\u0438\u0441\u0442\u0441\u043a\u043e\u0439) \u0432 \u043c\u0430\u0440\u0442\u0435 2025 \u0433\u043e\u0434\u0430, \u043a\u043e\u0433\u0434\u0430 \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0431\u044b\u043b \u043e\u043f\u0438\u0441\u0430\u043d \u043a\u0430\u043a \u043e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u0440\u0430\u0437\u0431\u043e\u0440\u0435 \u0444\u0430\u0439\u043b\u043e\u0432 TrueType GX \u0438 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0448\u0440\u0438\u0444\u0442\u043e\u0432. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 FreeType \u0432\u044b\u0448\u0435 2.13.0.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0432 Google, \u0431\u044b\u043b\u0438 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e CVE-2025-27363 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0442\u044c\u0441\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0439 \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u043e\u0434\u043d\u0430\u043a\u043e \u0442\u043e\u0447\u043d\u044b\u0435 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u0438\u0441\u0442\u0438\u043a\u0438 \u0438 \u043e\u0431\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u0430\u0442\u0430\u043a \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b.\n\n\u041c\u0430\u0439\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Google \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0432\u043e\u0441\u0435\u043c\u044c \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Android \u0438 15 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 Framework, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 DoS.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043d\u043e\u0433\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 Android \u0437\u0430\u0442\u0440\u0443\u0434\u043d\u044f\u0435\u0442\u0441\u044f \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u044f\u043c\u0438 \u0432 \u043d\u043e\u0432\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b, Google \u043f\u0440\u0438\u0437\u044b\u0432\u0430\u0435\u0442 \u0432\u0441\u0435\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438.", "creation_timestamp": "2025-05-06T15:30:06.000000Z"}, {"uuid": "f2f2b69a-1d4c-4588-9c3e-56405563c71d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://t.me/true_secator/6970", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Positive Technologies \u0441\u0432\u044f\u0437\u0430\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0433\u0440\u0443\u043f\u043f\u044b Team46 (\u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u0443\u044e \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443 \u043f\u0440\u0438 \u0430\u0442\u0430\u043a\u0435 \u043d\u0430 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u0436/\u0434-\u043f\u0435\u0440\u0435\u0432\u043e\u0437\u043e\u043a) \u0441\u00a0\u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 TaxOff, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044f \u043e\u0431\u0435 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0435\u0434\u0438\u043d\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u044b.\n\n\u0412 \u043c\u0430\u0440\u0442\u0435 2025 \u0433\u043e\u0434\u0430 \u041f\u043e\u0437\u0438\u0442\u0438\u0432\u044b \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0430\u0442\u0430\u043a\u0443, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c 0-day \u0434\u043b\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Chrome, \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0440\u043e\u0432\u0430\u0432 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442 \u043a \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0435 TaxOff, \u0440\u0430\u043d\u0435\u0435 \u0443\u0436\u0435 \u043f\u043e\u043f\u0430\u0434\u0430\u0432\u0448\u0435\u0439 \u0432 \u043f\u043e\u043b\u0435 \u0437\u0440\u0435\u043d\u0438\u044f.\n\n\u0412 \u0430\u0442\u0430\u043a\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u043e\u0435 \u043f\u0438\u0441\u044c\u043c\u043e \u0441\u043e \u0441\u0441\u044b\u043b\u043a\u043e\u0439, \u043f\u0440\u0438 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0435 \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0436\u0435\u0440\u0442\u0432\u0430 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043b\u0430 1-click exploit (CVE-2025-2783) \u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u043b\u0430 \u0431\u044d\u043a\u0434\u043e\u0440\u00a0Trinper, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e \u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043b\u0430 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 TaxOff.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u0442\u043e\u0433\u043e \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 \u0438\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0432\u044b\u0439\u0442\u0438 \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u044e\u044e \u0430\u0442\u0430\u043a\u0443, \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u043d\u0443\u044e \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2024 \u0433\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043d\u0430\u0447\u0438\u043d\u0430\u043b\u0430\u0441\u044c \u0441 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u043e\u0433\u043e \u043f\u0438\u0441\u044c\u043c\u0430, \u043f\u043e \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u0438 \u0441\u0442\u0438\u043b\u0438\u0441\u0442\u0438\u043a\u0435 \u0434\u043e \u0431\u043e\u043b\u0438 \u043f\u043e\u0445\u043e\u0436\u0435\u0433\u043e \u043d\u0430 \u043f\u0438\u0441\u044c\u043c\u043e \u0438\u0437 \u043d\u043e\u0432\u043e\u0439 \u0430\u0442\u0430\u043a\u0438.\n\n\u041f\u043e \u0441\u0441\u044b\u043b\u043a\u0435\u00a0https[://]mil-by[.]info/#/i?id=[REDACTED] \u0438\u0437 \u043f\u0438\u0441\u044c\u043c\u0430 \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0430\u0440\u0445\u0438\u0432 \u0441 \u044f\u0440\u043b\u044b\u043a\u043e\u043c, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0438\u043c\u00a0powershell.exe\u00a0\u0441 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0440\u0430\u043d\u0435\u0435\u00a0\u0442\u0430\u043a\u0436\u0435 \u0444\u0438\u0433\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 Team46.\n\nPowershell-\u0441\u043a\u0440\u0438\u043f\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u043b\u0441\u044f \u043f\u043e\u0441\u043b\u0435 \u0435\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f, \u0438 \u0441\u043a\u0440\u0438\u043f\u0442 \u043f\u043e\u0441\u043b\u0435 \u0434\u0435\u043e\u0431\u0444\u0443\u0441\u043a\u0430\u0446\u0438\u0438 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0445\u043e\u0436\u0438 \u043d\u0430 \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0438\u0437 \u0430\u0440\u0441\u0435\u043d\u0430\u043b\u0430 Team46.\n\n\u0414\u043b\u044f \u043d\u0435\u0439\u043c\u0438\u043d\u0433\u0430 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430-\u043f\u0440\u0438\u043c\u0430\u043d\u043a\u0438 \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435 \u0436\u0435\u0440\u0442\u0432\u044b \u043e\u0431\u0435 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0438 \u043e\u0434\u0438\u043d \u0438 \u0442\u043e\u0442 \u0436\u0435 \u043f\u0430\u0442\u0442\u0435\u0440\u043d: umawbfez-bkw5-f85a-3idl-3z4ql69v8it0.pdf \u0438 399ha122-tt9d-6f14-s9li-lqw7di42c792.pdf.\n\n\u0412 \u043e\u0431\u043e\u0438\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u043f\u0440\u0438 \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u043d\u0438\u0438 \u0444\u0430\u0439\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f User-Agent Edge, \u0430 \u043f\u0440\u0438 \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u043d\u0438\u0438 \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438\u00a0- User\u2011Agent \u042f\u043d\u0434\u0435\u043a\u0441 \u0411\u0440\u0430\u0443\u0437\u0435\u0440\u0430.\n\n\u0422\u0430\u043a\u0436\u0435 \u0432 \u043e\u0431\u043e\u0438\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0438\u043c\u044f \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430 \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u043b\u043e\u0441\u044c \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u00a0query.\n\n\u041e\u0442\u043b\u0438\u0447\u0430\u043b\u0430\u0441\u044c \u043b\u0438\u0448\u044c \u043f\u043e\u043b\u0435\u0437\u043d\u0430\u044f \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0430.\n\n\u0420\u0430\u043d\u0435\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0434\u043b\u044f \u0435\u0435 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c DLL-Hijacking \u0434\u043b\u044f \u042f\u043d\u0434\u0435\u043a\u0441.\u0411\u0440\u0430\u0443\u0437\u0435\u0440\u0430 (CVE-2024-6473) \u0441 \u043f\u043e\u0434\u043c\u0435\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 Wldp.dll.\n\n\u0412 \u043d\u043e\u0432\u043e\u043c \u043a\u0435\u0439\u0441\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0439 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u00a0rdpclip.exe, \u0442\u0430\u043a\u0436\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u043a DLL-Hijacking, \u0441 \u043f\u043e\u0434\u043c\u0435\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 winsta.dll.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430 winsta.dll \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a \u0431\u044d\u043a\u0434\u043e\u0440\u0430 Trinper'a \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 TaxOff. \n\n\u0411\u044d\u043a\u0434\u043e\u0440 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0435\u0440\u0432\u0435\u0440\u00a0common-rdp-front.global.ssl.fastly.net.\n\n\u0412 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0435, \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0432 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435 2024 \u0433\u043e\u0434\u0430, \u0440\u0430\u0441\u0441\u044b\u043b\u0430\u043b\u0441\u044f \u0430\u0440\u0445\u0438\u0432 \u0441 \u044f\u0440\u043b\u044b\u043a\u043e\u043c\u00a0\u0420\u043e\u0441\u0442\u0435\u043b\u0435\u043a\u043e\u043c.pdf.lnk, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u043b powershell.exe \u0441 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u043e\u0439 \u0434\u043b\u044f Team46 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439.\n\n\u0414\u043e\u043a\u0443\u043c\u0435\u043d\u0442-\u043f\u0440\u0438\u043c\u0430\u043d\u043a\u0430 \u0432 \u0434\u0430\u043d\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u043b \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u0435 \u043d\u043e\u043c\u0435\u0440\u0430 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0430 \u0432 \u043a\u043e\u043d\u0446\u0435 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b, \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u0432 \u0441\u0442\u0438\u043b\u0435 Team46: \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u0439, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e \u043d\u0430\u0431\u0440\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 \u043a\u043b\u0430\u0432\u0438\u0430\u0442\u0443\u0440\u0435 \u043d\u0430\u0431\u043e\u0440 \u0446\u0438\u0444\u0440.\n\n\u041f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u043e\u0439 \u0432 \u0434\u0430\u043d\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0435 \u044f\u0432\u043b\u044f\u043b\u0441\u044f \u0444\u0430\u0439\u043b\u00a0AdobeARM.exe, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u043e\u0431\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u0438\u0437 \u043f\u0435\u0440\u0432\u043e\u0439 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u041f\u043e\u0437\u0438\u0442\u0438\u0432\u0430\u043c \u0430\u0442\u0430\u043a\u0438 Team46, \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0438\u0437 Dr.Web.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u0440\u0430\u043d\u0435\u0435 \u041f\u0422 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u044d\u0442\u043e\u0442 \u0431\u044d\u043a\u0434\u043e\u0440, \u0442\u0430\u043a\u0436\u0435 \u0438\u043c\u0435\u044e\u0449\u0438\u0439 \u0438\u043c\u044f\u00a0AdobeARM.exe, \u043d\u0430 \u043e\u0434\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0441 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u043c Trinper \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432, \u0430 \u0430\u043d\u0430\u043b\u0438\u0437 \u043f\u043e\u043a\u0430\u0437\u0430\u043b, \u0447\u0442\u043e \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a TaxOff \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e \u0438\u0434\u0435\u043d\u0442\u0438\u0447\u0435\u043d \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0443 Trojan.Siggen27.11306 Team46.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043e\u0431\u0435 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0441\u0438\u043d\u0442\u0430\u043a\u0441\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u0445\u043e\u0436\u0438\u0435 \u0434\u043e\u043c\u0435\u043d\u044b \u0441 \u043c\u0438\u043c\u0438\u043a\u0440\u0438\u0435\u0439 \u043f\u043e\u0434 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0441\u00a0\u0434\u0435\u0444\u0438\u0441\u0430\u043c\u0438 \u0432\u00a0\u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0438: ms\u2011appdata\u2011fonts.global.ssl.fastly[.]net (Team46) \u0438\u00a0fast\u2011telemetry\u2011api.global.ssl.fastly[.]net (TaxOff).\n\n\u041f\u043e \u0438\u0442\u043e\u0433\u0443, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0437\u0430\u043a\u043b\u044e\u0447\u0438\u043b\u0438, \u0447\u0442\u043e Team46 \u0438 TaxOff \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043e\u0434\u043d\u043e\u0439 \u0438 \u0442\u043e\u0439 \u0436\u0435 APT-\u0433\u0440\u0443\u043f\u043f\u043e\u0439, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u041f\u043e\u0437\u0438\u0442\u0438\u0432\u044b \u0442\u0435\u043f\u0435\u0440\u044c \u0432\u044b\u0431\u0440\u0430\u043b\u0438 \u0435\u0434\u0438\u043d\u043e\u0435 \u043d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 - Team46.", "creation_timestamp": "2025-04-21T20:20:05.000000Z"}, {"uuid": "4c2fe41a-2d03-49b5-8125-778adf29c694", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/6915", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0437\u0430 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u0441\u043a\u043e\u0432\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438, \u043a\u043e\u0438\u0445 \u043f\u043e\u0434 \u043d\u0430\u043a\u043e\u043f\u0438\u043b\u043e\u0441\u044c. \u0412\u043a\u0440\u0430\u0442\u0446\u0435 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c:\n\n1. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438\u00a0\u043d\u0430\u0447\u0430\u043b\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 \u043f\u043e\u043f\u044b\u0442\u0430\u0442\u043a\u0430\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Apache Camel \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u043e\u0439 CVE-2025-27636. \u041f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442\u0441\u044f \u0441\u0432\u0435\u0436\u0435\u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0439\u00a0PoC.\n\n2. Project Discovery \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0438 PoC \u0434\u043b\u044f \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0433\u043e \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 CrushFTP, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0433\u043e \u043a\u0430\u043a CVE-2025-2825. \u0422\u0430\u043a \u0447\u0442\u043e \u0442\u0435\u043f\u0435\u0440\u044c \u043e\u043d\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f.\n\n3. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Endor Labs \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Apache Parquet \u0441 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u043e\u043c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 10/10, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f RCE \u0438 \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438\u043b\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0438\u043c\u043f\u043e\u0440\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0444\u0430\u0439\u043b\u044b Parquet.\n\nCVE-2025-30065 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u043c\u043e\u0434\u0443\u043b\u044c \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 parquet-avro. \u0417\u0430\u043a\u0440\u0430\u043b\u0430\u0441\u044c \u0441 \u0432\u0435\u0440\u0441\u0438\u0438 1.8.0 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u0438 \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c Parquet \u0432\u0435\u0440\u0441\u0438\u0438 1.15.1.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Endor Labs, \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0442 \u0438\u043b\u0438 \u0438\u043c\u043f\u043e\u0440\u0442\u0438\u0440\u0443\u044e\u0442 \u0444\u0430\u0439\u043b\u044b Parquet \u0447\u0435\u0440\u0435\u0437 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0438 \u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a Hadoop \u0438\u043b\u0438 Spark, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0435 \u043a\u043e\u0434 Parquet Java.\n\n\u041f\u043e\u043a\u0430 \u043d\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-30065 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u043e\u0434\u043d\u0430\u043a\u043e \u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u044c, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432\u0441\u043a\u043e\u0440\u0435 \u043c\u043e\u0433\u0443\u0442 \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c \u0435\u0435 \u0432 \u0441\u0432\u043e\u0439 \u0430\u0440\u0441\u0435\u043d\u0430\u043b.\n\n4. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u041f\u044c\u0435\u0440 \u041a\u0438\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0434\u0435\u0441\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 Brocade Fiber Channel.\n\n\u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 - \u044d\u0442\u043e \u0434\u0432\u0435 RCE \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0441\u043b\u0430\u0431\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u0442\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u043c\u044c \u043e\u0448\u0438\u0431\u043e\u043a, \u0430 \u0442\u0440\u0438 \u043e\u0441\u0442\u0430\u043b\u0438\u0441\u044c \u043d\u0435\u0437\u0430\u043a\u0440\u044b\u0442\u044b\u043c\u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 EoL-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n5. \u041e\u043d \u0436\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043e\u0442\u0447\u0435\u0442 \u043e \u0442\u0440\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u0430\u0445 Palo Alto Network.\n\n6. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Tenable \u043f\u043e\u043c\u043e\u0433\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Google Cloud, \u043d\u0430\u0437\u0432\u0430\u043d\u043d\u0443\u044e ImageRunner, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u0432\u0437\u0430\u0438\u043c\u043e\u0441\u0432\u044f\u0437\u0438 \u043c\u0435\u0436\u0434\u0443 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c\u0438 Cloud Run, Container Registry \u0438 Artifact Registry \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0431\u0440\u043e\u0441\u043a\u0438 \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0432 \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430.\n\n7. Microsoft \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u044b \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430 Canon.\n\n8. ERNW \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0430\u0433\u0435\u043d\u0442\u0430\u0445 VMware Carbon Black Cloud. \u0412\u0441\u0435 \u043e\u043d\u0438 \u043f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b.\n\n9. Project Black \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 unauth RCE \u0432 \u041f\u041e \u0434\u043b\u044f \u043e\u0431\u043c\u0435\u043d\u0430 \u0444\u0430\u0439\u043b\u0430\u043c\u0438 ZendTo. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0435\u0449\u0435 \u0432 2021 \u0433\u043e\u0434\u0443, \u043d\u043e \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e CVE \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435\u0442.\n\n10. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u042d\u0432\u0430\u043d \u041a\u043e\u043d\u043d\u0435\u043b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 APIO \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f Verizon Call Filter, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0443\u0442\u0435\u0447\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 Verizon.\n\n11. Searchlight Cyber \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043e\u0442\u0447\u0435\u0442 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 SQLi \u0432 Halo ITSM, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0418\u0422-\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0432 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0430\u0445.\n\n12. Cisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0442\u0440\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432, \u0430 Jenkins - \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0435\u043c \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u043a\u043e\u0434\u0435 \u0438 \u0448\u0435\u0441\u0442\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 - \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0430\u0445.\n\n13. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c SafeBreach \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438\u00a0Google 10 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0435\u0439 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 Quick Share.\n\n\u041e\u0448\u0438\u0431\u043a\u0438 \u0431\u044b\u043b\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443 \u043d\u0430 DEFCON \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043b\u0435\u0433\u043a\u043e \u043e\u0431\u043c\u0435\u043d\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u0444\u0430\u0439\u043b\u0430\u043c\u0438 \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0431\u0435\u0437 \u0438\u0445 \u0441\u043e\u0433\u043b\u0430\u0441\u0438\u044f.", "creation_timestamp": "2025-04-04T19:30:05.000000Z"}, {"uuid": "546cc584-25c2-4bd0-89bd-b7fa1845d7cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "seen", "source": "https://t.me/true_secator/6823", "content": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0432 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 1 \u043c\u043b\u0440\u0434. \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 IoT \u043c\u0438\u043a\u0440\u043e\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 ESP32 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f Espressif, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043f\u043e WiFi \u0438 Bluetooth, \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043d\u0435\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0430\u0442\u0430\u043a.\n\n\u041e\u043d\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u0442\u044c \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c, \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u0442\u044c \u043d\u0430 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0432 \u0441\u0435\u0442\u0438 \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u0434\u043e\u043b\u0433\u043e\u0441\u0440\u043e\u0447\u043d\u043e\u0435 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435.\n\n\u041a \u0442\u0430\u043a\u0438\u043c \u0432\u044b\u0432\u043e\u0434\u0430\u043c \u043f\u0440\u0438\u0448\u043b\u0438 \u0438\u0441\u043f\u0430\u043d\u0441\u043a\u0438\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Tarlogic Security,\u00a0\u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0441\u0432\u043e\u0435\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 RootedCON\u00a0\u0432 \u041c\u0430\u0434\u0440\u0438\u0434\u0435.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0442\u0430\u043a\u043e\u0433\u043e \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043d\u0430\u0432\u0441\u0435\u0433\u0434\u0430 \u0437\u0430\u0440\u0430\u0436\u0430\u0442\u044c \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0435 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u044b, \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u044b, \u0438\u043d\u0442\u0435\u043b\u043b\u0435\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0437\u0430\u043c\u043a\u0438 \u0438\u043b\u0438 \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u043e\u0435 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435, \u043e\u0431\u0445\u043e\u0434\u044f \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0430\u0443\u0434\u0438\u0442\u0430 \u043a\u043e\u0434\u0430.\n\n\u0412 \u0441\u0432\u043e\u0435\u0439 \u043f\u0440\u0435\u0437\u0435\u043d\u0442\u0430\u0446\u0438\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Tarlogic \u043f\u043e\u044f\u0441\u043d\u0438\u043b\u0438, \u0447\u0442\u043e \u0438\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0439 \u0434\u0440\u0430\u0439\u0432\u0435\u0440 USB Bluetooth \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 C, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e-\u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u043c \u0438 \u043a\u0440\u043e\u0441\u0441\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435\u043d\u043d\u044b\u043c, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044f \u043f\u0440\u044f\u043c\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044e \u0431\u0435\u0437 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f API-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043e\u0432, \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u043d\u044b\u0445 \u0434\u043b\u044f \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u0439 \u041e\u0421.\n\n\u0412\u043e\u043e\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0441\u044c \u043d\u043e\u0432\u044b\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u043c \u0441 \u043f\u0440\u044f\u043c\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0442\u0440\u0430\u0444\u0438\u043a\u0443 Bluetooth, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u043d\u044b\u0435 \u0434\u043b\u044f \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u044b (\u043a\u043e\u0434 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 0x3F) \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 ESP32 Bluetooth, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c \u043d\u0438\u0437\u043a\u043e\u0443\u0440\u043e\u0432\u043d\u0435\u0432\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438 Bluetooth.\n\n\u0412\u0441\u0435\u0433\u043e \u043d\u0430\u0439\u0434\u0435\u043d\u043e 29 \u043d\u0435\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432 \u0441\u043e\u0432\u043e\u043a\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0439 \u0431\u044d\u043a\u0434\u043e\u0440 \u0434\u043b\u044f \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0438 \u043f\u0430\u043c\u044f\u0442\u044c\u044e (\u0447\u0442\u0435\u043d\u0438\u0435/\u0437\u0430\u043f\u0438\u0441\u044c \u041e\u0417\u0423 \u0438 \u0444\u043b\u044d\u0448-\u043f\u0430\u043c\u044f\u0442\u0438), \u043f\u043e\u0434\u043c\u0435\u043d\u044b MAC-\u0430\u0434\u0440\u0435\u0441\u0430 (\u0432\u044b\u0434\u0430\u0447\u0430 \u0441\u0435\u0431\u044f \u0437\u0430 \u0434\u0440\u0443\u0433\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e) \u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043f\u0430\u043a\u0435\u0442\u043e\u0432 LMP/LLCP.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c Espressif \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043d\u0435 \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u044d\u0442\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043b\u0438\u0431\u043e \u0432\u043e\u0432\u0441\u0435 \u0434\u043e\u043b\u0436\u043d\u044b \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c, \u043b\u0438\u0431\u043e \u043e\u0441\u0442\u0430\u043b\u0438\u0441\u044c \u043f\u043e \u043e\u0448\u0438\u0431\u043a\u0435.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0442\u0435\u043f\u0435\u0440\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-27840.\n\n\u0421\u0440\u0435\u0434\u0438 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u0440\u0438\u0441\u043a\u043e\u0432, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u044d\u0442\u0438\u0445 \u043a\u043e\u043c\u0430\u043d\u0434, - \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 OEM \u0438 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a.\n\n\u0412 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0441\u0442\u0435\u043a\u0438 Bluetooth \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0442 \u043a\u043e\u043c\u0430\u043d\u0434\u044b HCI \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435, \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0438\u043b\u0438 \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0439 Bluetooth.\n\n\u042d\u0442\u043e \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e, \u0435\u0441\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0443\u0436\u0435 \u0438\u043c\u0435\u0435\u0442 \u043f\u0440\u0430\u0432\u0430 root, \u0432\u043d\u0435\u0434\u0440\u0438\u043b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0438\u043b\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435, \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044e\u0449\u0435\u0435 \u043d\u0438\u0437\u043a\u043e\u0443\u0440\u043e\u0432\u043d\u0435\u0432\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0432 \u0446\u0435\u043b\u043e\u043c \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 USB \u0438\u043b\u0438 UART \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0431\u044b\u043b \u0431\u044b \u0433\u043e\u0440\u0430\u0437\u0434\u043e \u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c \u0438 \u0440\u0435\u0430\u043b\u0438\u0441\u0442\u0438\u0447\u043d\u044b\u043c \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u043c \u0430\u0442\u0430\u043a\u0438.\n\n\u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0447\u0438\u043f\u043e\u043c ESP32 \u0438 \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0447\u0438\u043f\u0435 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u043c\u0430\u043d\u0434, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u0443\u044e \u043f\u0430\u043c\u044f\u0442\u044c \u0438 \u0444\u043b\u044d\u0448-\u043f\u0430\u043c\u044f\u0442\u044c.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0447\u0438\u043f\u0435, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u043d\u0430 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 ESP32 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0442\u0430\u043a\u0436\u0435 \u0441\u043b\u043e\u0436\u043d\u044b\u0435 Bluetooth-\u0430\u0442\u0430\u043a\u0438.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0438 \u0440\u0435\u0430\u043a\u0446\u0438\u0438 Espressif, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u0441\u0447\u0438\u0442\u0430\u044e\u0442, \u0447\u0442\u043e \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0447\u0430\u0441\u0442\u044c\u044e \u043d\u0435\u043a\u043e\u0435\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0430,\u00a0\u0430 \u043d\u0435 \u0431\u044d\u043a\u0434\u043e\u0440\u0430.", "creation_timestamp": "2025-03-10T13:30:05.000000Z"}, {"uuid": "70376a70-b86d-4965-a6d8-13adadf58460", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27218", "type": "seen", "source": "https://t.me/true_secator/6820", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0434\u0435\u043b\u0438\u0442\u044c\u0441\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u043c\u0438 \u0441 \u043d\u0438\u043c\u0438 \u0443\u0433\u0440\u043e\u0437\u0430\u043c\u0438:\n\n1. Google \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u00a0EntrySign, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u043c\u0438\u043a\u0440\u043e\u043a\u043e\u0434\u0430 AMD Zen (CVE-2024-56161), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 Zentool, \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0434\u043b\u044f \u0434\u0436\u0435\u0439\u043b\u0431\u0440\u0435\u0439\u043a\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 AMD.\n\n2. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Assetnote \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 Sitecore CMS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0430\u0442\u0430\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430\u00a0- CVE-2025-27218.\n\n3. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Jenkins \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0435 \u0447\u0435\u0442\u044b\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u044f\u0434\u0440\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b.\n\n4. Elastic \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f Kibana. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u0430 \u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b.\n\n5. \u0413\u0440\u0443\u043f\u043f\u0430 \u0443\u0447\u0435\u043d\u044b\u0445 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e \u043d\u043e\u0432\u043e\u043c \u0442\u0438\u043f\u0435 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0438\u043d\u0432\u0435\u0440\u0442\u043e\u0440\u044b \u043c\u043e\u0449\u043d\u043e\u0441\u0442\u0438, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0444\u043e\u0442\u043e\u044d\u043b\u0435\u043a\u0442\u0440\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0442\u0430\u043d\u0446\u0438\u044f\u0445.\n\n\u0410\u0442\u0430\u043a\u0430, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u00a0ReThink \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u0430 \u043d\u0430\u043d\u0435\u0441\u0442\u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0449\u0435\u0440\u0431 \u0438\u043d\u0432\u0435\u0440\u0442\u043e\u0440\u0430\u043c \u0438 \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0444\u043e\u0442\u043e\u044d\u043b\u0435\u043a\u0442\u0440\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n6. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 SEC Consult \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u00ab\u0421\u043f\u044f\u0449\u0435\u0439 \u043a\u0440\u0430\u0441\u0430\u0432\u0438\u0446\u044b\u00bb, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u0438\u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443 \u0434\u0430\u0442\u0447\u0438\u043a\u0430 CrowdStrike Falcon.\n\nSEC Consult \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u044d\u0442\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0443 \u043f\u043e\u0441\u043b\u0435 \u0441\u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043a\u043e\u043d\u0446\u0435 2023 \u0433\u043e\u0434\u0430, \u043d\u043e \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0437\u0430\u043a\u0440\u044b\u043b \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0431\u0435\u0437 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043e\u0442\u0432\u0435\u0442\u0438\u0432, \u0447\u0442\u043e \u044d\u0442\u043e \u0432\u0441\u0435\u0433\u043e \u043b\u0438\u0448\u044c \u00ab\u043f\u0440\u043e\u0431\u0435\u043b \u0432 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438\u00bb.\n\n\u0425\u043e\u0442\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u0441\u0435 \u0436\u0435 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 2025 \u0433\u043e\u0434\u0443, \u0438 \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0437\u0430\u043c\u0430\u043b\u0447\u0438\u0432\u0430\u043d\u0438\u0435 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 SEC Consult \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e.\n\n7. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 SquareX \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u043f\u043e\u043b\u0438\u043c\u043e\u0440\u0444\u043d\u043e\u0435 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 Chrome, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e \u0438\u043c\u0438\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u043e\u0435 \u0434\u0440\u0443\u0433\u043e\u0435 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0435 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435.\n\n\u0422\u0430\u043a\u0438\u0435 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f \u0441\u043e\u0437\u0434\u0430\u044e\u0442 \u0442\u043e\u0447\u043d\u0443\u044e \u043a\u043e\u043f\u0438\u044e \u0437\u043d\u0430\u0447\u043a\u0430 \u0446\u0435\u043b\u0438, \u0432\u0441\u043f\u043b\u044b\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u043e\u043a\u043d\u0430 HTML, \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u0438 \u0434\u0430\u0436\u0435 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043b\u0435\u0433\u0430\u043b\u044c\u043d\u043e\u0435  \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435, \u0447\u0442\u043e \u0437\u0430\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u0436\u0435\u0440\u0442\u0432 \u043f\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0432 \u0442\u043e, \u0447\u0442\u043e \u043e\u043d\u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0433\u043e \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f \u0441\u043e \u0432\u0441\u0435\u043c\u0438 \u0432\u044b\u0442\u0435\u043a\u0430\u044e\u0449\u0438\u043c\u0438.", "creation_timestamp": "2025-03-07T19:00:07.000000Z"}, {"uuid": "c6d5881a-28d7-47af-bcf6-1462e5e0cef6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://t.me/ctinow/232218", "content": "Meta Warns of FreeType Vulnerability (CVE-2025-27363) With Active Exploitation Risk\nhttps://ift.tt/dk35WyA", "creation_timestamp": "2025-03-13T09:35:01.000000Z"}, {"uuid": "6f47cdeb-163c-430f-85e2-f09fefe86490", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "exploited", "source": "https://t.me/ctinow/234892", "content": "Google fixed actively exploited Android flaw CVE-2025-27363\nhttps://ift.tt/asAj1Bd", "creation_timestamp": "2025-05-06T12:44:14.000000Z"}, {"uuid": "76c136c0-47b4-4c93-8edc-4b7537a3637f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://t.me/ctinow/233101", "content": "Apache Camel Exploit Attempt by Vulnerability Scan (CVE-2025-27636, CVE-2025-29891), (Mon, Mar 31st)\nhttps://ift.tt/yRozrXM", "creation_timestamp": "2025-03-31T15:44:26.000000Z"}, {"uuid": "a1b2c18f-468f-496a-945c-d9b683be6869", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27218", "type": "seen", "source": "https://t.me/ctinow/232956", "content": "Sitecore \"thumbnailsaccesstoken\" Deserialization Scans (and some new reports) CVE-2025-27218, (Thu, Mar 27th)\nhttps://ift.tt/zkXV8vs", "creation_timestamp": "2025-03-27T18:25:05.000000Z"}, {"uuid": "b1cd4786-c802-461e-b0c1-193f65006c2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-29)", "content": "", "creation_timestamp": "2026-04-29T00:00:00.000000Z"}, {"uuid": "f693683b-5707-479c-8bc5-8f515884df35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-29)", "content": "", "creation_timestamp": "2026-04-29T00:00:00.000000Z"}, {"uuid": "c99a3d7b-d1a0-4e3c-92d6-19c0c2b7495c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2777", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-29)", "content": "", "creation_timestamp": "2026-04-29T00:00:00.000000Z"}, {"uuid": "e01189e1-584f-4af0-a287-469e7b1d749f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27093", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/5517", "content": "Sliver C2 Insecure Default Network Policy (CVE-2025-27093) #SliverC2 #Wireguard #CVE202527093 #NetworkPolicy #CommandAndControl https://hngnh.com/posts/Sliver-CVE-2025-27093/", "creation_timestamp": "2026-08-03T00:14:09.311113Z"}, {"uuid": "d7e18a6c-c667-4252-9580-7e36992bdab6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://t.me/purp_sec/367", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-27363 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433\u0430 \u0448\u0440\u0438\u0444\u0442\u043e\u0432 FreeType. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u043f\u043e\u0434\u0433\u043b\u0438\u0444\u043e\u0432 \u0432 TrueType GX \u0438 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0448\u0440\u0438\u0444\u0442\u0430\u0445, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0437\u0430\u043f\u0438\u0441\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\ud83d\udd35CVE-2025-26865 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Apache OFBiz \u0434\u043b\u044f e-commerce, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0435\u0439 \u0448\u0430\u0431\u043b\u043e\u043d\u043e\u0432 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\n\ud83d\udd35CVE-2025-1661 \u2014 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 HUSKY \u0434\u043b\u044f Wordpress \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 LFI-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0438 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\ud83d\udd35CVE-2025-24983, CVE-2025-24984, CVE-2025-24985, CVE-2025-24991, CVE-2025-24993 \u0438 CVE-2025-26633 \u2014 CISA \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0448\u0435\u0441\u0442\u044c \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Windows NTFS, Win32k, Fast FAT \u0438 Management Console (MMC).\n\n\ud83d\udd35CVE-2024-56336 \u2014 Siemens \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u0438\u0432\u043e\u0434\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 SINAMICS S200, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043d\u0435\u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u043e\u043c. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438, \u043e\u0431\u0445\u043e\u0434\u044f \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0435 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd35CVE-2025-26319 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Flowise, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0439 open-source \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f AI-\u043f\u0430\u0439\u043f\u043b\u0430\u0439\u043d\u043e\u0432. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:31.327803Z"}, {"uuid": "aedd8334-ad66-412d-ac91-ad1884e9ee59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27218", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/5076", "content": "Sitecore: Unsafe Deserialisation Again! (CVE-2025-27218) #Sitecore #UnsafeDeserialisation #RemoteCommandExecution #CVE-2025-27218 #SearchlightCyber https://slcyber.io/blog/sitecore-unsafe-deserialization-again-cve-2025-27218/", "creation_timestamp": "2026-08-03T02:14:01.173097Z"}, {"uuid": "a8b8f920-911e-471b-af35-40b5fda3a2b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2704", "type": "exploited", "source": "https://t.me/DerechodelaRed/5036", "content": "Vulnerabilidad de OpenVPN permite a atacantes bloquear servidores y ejecutar c\u00f3digo remoto\n\n\u25b6\ufe0f CVE-2025-2704\n\nhttps://cybersecuritynews.com/openvpn-vulnerability-let-attackers-crash-servers/", "creation_timestamp": "2025-04-06T15:45:05.000000Z"}, {"uuid": "dc93e9af-26b5-4ed2-8f94-3ebf1ccd9522", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "Telegram/1WrzDiTr_ZsJWhWEcgoJAqGWKPt7kbRd5nb2KvQoDOtByXJI", "content": "", "creation_timestamp": "2025-05-17T22:10:48.000000Z"}, {"uuid": "cacef301-6270-4bd3-a2b9-a1d6dec31afd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "exploited", "source": "https://t.me/information_security_channel/53288", "content": "Google Patches Chrome Sandbox Escape Zero-Day Caught by Kaspersky\nhttps://www.securityweek.com/google-patches-chrome-sandbox-escape-zero-day-caught-by-kaspersky/\n\nThe vulnerability, tracked as CVE-2025-2783, was chained with a second exploit for remote code execution in attacks targeting organizations in Russia.\nThe post Google Patches Chrome Sandbox Escape Zero-Day Caught by Kaspersky (https://www.securityweek.com/google-patches-chrome-sandbox-escape-zero-day-caught-by-kaspersky/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2025-03-26T02:31:31.000000Z"}, {"uuid": "91457e07-a6a8-49d6-aec7-fcd1473b90ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "exploited", "source": "https://t.me/thehackernews/6571", "content": "\ud83d\udea8 Firefox users, update now!\n\nA critical bug (CVE-2025-2857) just got patched\u2014same sandbox escape class as the Chrome zero-day (CVE-2025-2783) actively exploited in the wild.\n\n\ud83d\udcd6 Full story: https://thehackernews.com/2025/03/mozilla-patches-critical-firefox-bug.html\n\n\ud83d\udd12 Patch now | Spread the word | Stay safe", "creation_timestamp": "2025-03-28T06:48:21.000000Z"}, {"uuid": "a8c078e2-4c1a-454b-8901-26c2bf1073e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "exploited", "source": "https://t.me/thehackernews/6552", "content": "\ud83d\udea8 Chrome zero-day exploited in the wild...\n\nGoogle patches CVE-2025-2783, a high-severity flaw in Chrome for Windows\u2014actively used in attacks on Russian orgs.\n\n\ud83d\udc40 Update Chrome now | Details: https://thehackernews.com/2025/03/zero-day-alert-google-releases-chrome.html", "creation_timestamp": "2025-03-26T05:59:15.000000Z"}, {"uuid": "6d804715-1d61-451a-bfc5-afe39c20ddc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "exploited", "source": "https://t.me/thehackernews/6776", "content": "\ud83d\udea8 Exploited in the wild. No user click needed.\n\nGoogle patches 46 Android flaws, including CVE-2025-27363\u2014a critical System bug tied to the FreeType font engine.\n\nDiscovered by Meta in March, it's now confirmed active.\n\n\ud83d\udd17 Learn more: https://thehackernews.com/2025/05/google-fixes-actively-exploited-android.html", "creation_timestamp": "2025-05-06T07:56:05.000000Z"}, {"uuid": "4584ca8e-c43e-4bed-93ba-9132ec764bda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27610", "type": "exploited", "source": "https://t.me/thehackernews/6724", "content": "\ud83d\udc40 Hackers could be one path away from your sensitive files!\n\n\ud83d\udea8 New CVEs expose major flaws in Rack & Infodraw systems:\n\n\ud83d\udd39 CVE-2025-27610 lets attackers read config files & credentials via path traversal.\n\n\ud83d\udd39 Infodraw CVE-2025-43928 allows any file to be read or deleted\u2014no login needed.\n\nLearn more: https://thehackernews.com/2025/04/researchers-identify-rackstatic.html\n\n\ud83d\udd25 Exploits are trivial & patches missing. Systems in Belgium & Luxembourg already hit. Update now or go offline!", "creation_timestamp": "2025-04-25T11:00:58.000000Z"}, {"uuid": "84ae0b53-cd47-4bda-9a09-4e539520244b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27920", "type": "exploited", "source": "https://t.me/thehackernews/6819", "content": "\ud83d\udea8 A zero-day exploit, a chat app, and a silent cyberwar.\n\nA T\u00fcrkiye-linked hacker group Marbled Dust exploited CVE-2025-27920 in India's Output Messenger\u2014targeting Kurdish military users in Iraq via a stealthy backdoor.\n\nRead details \u27a1\ufe0f https://thehackernews.com/2025/05/turkiye-hackers-exploited-output.html", "creation_timestamp": "2025-05-13T07:22:18.000000Z"}, {"uuid": "08b5a55e-8806-4c57-ab07-0180dbbcee9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "exploited", "source": "https://t.me/thehackernews/6485", "content": "\ud83d\udea8 Critical Alert: A severe vulnerability (CVE-2025-27363) in the FreeType font library, used by millions, is being actively exploited.\n\nThis flaw allows RCE, risking numerous systems. Affected platforms include Linux distributions, Android, and iOS.\n\nRead: https://thehackernews.com/2025/03/meta-warns-of-freetype-vulnerability.html\n\nUpdate to FreeType version 2.13.3 immediately to protect your devices. Act now!", "creation_timestamp": "2025-03-13T08:15:30.000000Z"}, {"uuid": "b49eb8fe-4dc3-4ba6-8deb-70545e942452", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "exploited", "source": "https://t.me/xakep_ru/17289", "content": "\u0412 Chrome \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Google Chrome \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f (CVE-2025-2783), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u043f\u043e\u0431\u0435\u0433 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u00ab\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e\u00bb, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0438\u0448\u0443\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0435\u0439 \u00ab\u0424\u043e\u0440\u0443\u043c\u043d\u044b\u0439 \u0442\u0440\u043e\u043b\u043b\u044c\u00bb, APT-\u0430\u0442\u0430\u043a\u043e\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0435\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f.\n\nhttps://xakep.ru/2025/03/26/operation-forumtroll/", "creation_timestamp": "2025-03-26T09:35:33.000000Z"}, {"uuid": "d36e0129-d259-4525-ab89-32bf8f13c461", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "exploited", "source": "https://t.me/SecLabNews/16352", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-2783 \u0432 Chrome: \u043a\u0430\u043a \u0441\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u0430\u0442\u0430\u043a\u0430 \u00ab\u0424\u043e\u0440\u0443\u043c\u043d\u044b\u0439 \u0442\u0440\u043e\u043b\u043b\u044c\u00bb\n\n\ud83d\udee1 \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u00ab\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e\u00bb \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0441\u043b\u043e\u0436\u043d\u0443\u044e \u0446\u0435\u043b\u0435\u0432\u0443\u044e \u0430\u0442\u0430\u043a\u0443 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Chrome, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0443 \u0431\u0435\u0437 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\ud83c\udfad \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0438 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u043f\u0438\u0441\u044c\u043c\u0430 \u0441 \u043f\u0440\u0438\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044f\u043c\u0438 \u043d\u0430 \u00ab\u041f\u0440\u0438\u043c\u0430\u043a\u043e\u0432\u0441\u043a\u0438\u0435 \u0447\u0442\u0435\u043d\u0438\u044f\u00bb, \u0432\u0435\u0434\u0443\u0449\u0438\u0435 \u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u0441\u0430\u0439\u0442 primakovreadings[.]info, \u0430\u0442\u0430\u043a\u0443\u044f \u0433\u043e\u0441\u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u0438 \u0421\u041c\u0418.\n\n\ud83d\udee0 Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043f\u0430\u0442\u0447 25 \u043c\u0430\u0440\u0442\u0430, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-2783 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Mojo, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043c\u0435\u0436\u0434\u0443 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0435\u0439 Chrome \u0438 Windows.\n\n\u0410\u043d\u0430\u043b\u0438\u0437 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 APT-\u0433\u0440\u0443\u043f\u043f\u0443 \u0441 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0439 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439, \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0432\u0448\u0443\u044e \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Chrome, \u0447\u0442\u043e \u043f\u043e\u0434\u0447\u0451\u0440\u043a\u0438\u0432\u0430\u0435\u0442 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u041f\u041e.\n\n#ChromeExploit #zeroday #APT\u0443\u0433\u0440\u043e\u0437\u044b #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\n\n@ZerodayAlert", "creation_timestamp": "2025-03-26T10:37:06.000000Z"}, {"uuid": "3573e282-4e5c-4f39-9ea8-90f567b70b1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "exploited", "source": "https://t.me/SecLabNews/16286", "content": "\ud83d\udd75\u200d\u2642\ufe0f \u0411\u044d\u043a\u0434\u043e\u0440 \u0432 \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432: \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 ESP32 \u0443\u0433\u0440\u043e\u0436\u0430\u044e\u0442 IoT\n\n\ud83e\udda0  \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Tarlogic Security \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 29 \u043d\u0435\u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u043c\u0438\u043a\u0440\u043e\u0447\u0438\u043f\u0435 ESP32 \u043e\u0442 Espressif. \u042d\u0442\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0447\u0438\u043f \u043a\u0430\u043a \u0442\u043e\u0447\u043a\u0443 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0432 \u0441\u0435\u0442\u0438.\n\n\ud83d\udce1 \u041c\u0438\u043a\u0440\u043e\u0447\u0438\u043f ESP32 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u0432 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u0432\u0435\u0449\u0435\u0439 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u043c\u043d\u044b\u0435 \u0437\u0430\u043c\u043a\u0438 \u0438 \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u043e\u0435 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2025-27840, \u043e\u0434\u043d\u0430\u043a\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Espressif \u043f\u043e\u043a\u0430 \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0435\u0432 \u043f\u043e \u043f\u043e\u0432\u043e\u0434\u0443 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b.\n\n\ud83d\udca5\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u0434\u0440\u0430\u0439\u0432\u0435\u0440 USB-Bluetooth \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 C \u0434\u043b\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0440\u0430\u0431\u043e\u0442\u044b ESP32 \u043d\u0430 \u043d\u0438\u0437\u043a\u043e\u043c \u0443\u0440\u043e\u0432\u043d\u0435. \u0421 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u044d\u0442\u043e\u0433\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 Bluetooth ESP32 (Opcode 0x3F), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u043d\u0438\u0437\u043a\u043e\u0443\u0440\u043e\u0432\u043d\u0435\u0432\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438 Bluetooth.\n\n#IoT #\u041a\u0438\u0431\u0435\u0440\u0443\u0433\u0440\u043e\u0437\u044b #ESP32\n\n@SecLabNews", "creation_timestamp": "2025-03-11T11:12:23.000000Z"}, {"uuid": "7869b5f5-f797-4dea-a886-6e07b5538226", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "exploited", "source": "https://t.me/SecLabNews/16304", "content": "\ud83d\udd75\u200d\u2642\ufe0f\u0423\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f Android, Linux \u0438 \u0438\u0433\u0440\u043e\u0432\u044b\u0445 \u0434\u0432\u0438\u0436\u043a\u043e\u0432: FreeType \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\n\n\ud83d\udea8 Facebook* \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 FreeType, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432\u043e \u0432\u0441\u0435\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0434\u043e 2.13 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430. \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0434\u0430\u043d\u043d\u0430\u044f \u0431\u0440\u0435\u0448\u044c \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\ud83d\udd0d \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2025-27363, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u0431\u0443\u0444\u0435\u0440\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u043f\u043e\u0434\u0433\u043b\u0438\u0444\u043e\u0432 \u0432 \u0448\u0440\u0438\u0444\u0442\u0430\u0445. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u2014 8.1 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS v3, \u0447\u0442\u043e \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u0438\u0432\u0430\u0435\u0442 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u044c \u0443\u0433\u0440\u043e\u0437\u044b.\n\n\u26a0\ufe0f FreeType \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u043e\u0439 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0439 \u0432 Linux, Android, \u0438\u0433\u0440\u043e\u0432\u044b\u0445 \u0434\u0432\u0438\u0436\u043a\u0430\u0445 \u0438 \u0432\u0435\u0431-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.13.3 \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0445 \u0430\u0442\u0430\u043a.\n\n* \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Meta \u0438 \u0435\u0451 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u044b \u044d\u043a\u0441\u0442\u0440\u0435\u043c\u0438\u0441\u0442\u0441\u043a\u0438\u043c\u0438, \u0438\u0445 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0440\u0435\u0449\u0435\u043d\u0430 \u043d\u0430 \u0442\u0435\u0440\u0440\u0438\u0442\u043e\u0440\u0438\u0438 \u0420\u0424.\n\n#\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #FreeType \n\n@SecLabNews", "creation_timestamp": "2025-03-14T06:04:05.000000Z"}, {"uuid": "b622c6b9-4111-4887-9132-2c36df6709d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://t.me/anti_malware/20393", "content": "\ud83d\udea8 \u041a\u0438\u0431\u0435\u0440\u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0437\u0430 6 \u043c\u0430\u044f: \u043e\u0442 \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0433\u043e \u0444\u0438\u0448\u0438\u043d\u0433\u0430 \u0434\u043e \u0443\u0431\u0438\u0439\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 Go-\u043c\u043e\u0434\u0443\u043b\u0435\u0439 \u0438 \u0431\u0430\u0433\u043e\u0432 \u0432 macOS \u0438 Android\n\n\ud83d\udccc 1. \u041f\u043e\u0441\u043b\u0435 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f Skype \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c \u0432\u043e\u043b\u043d\u0430 \u0444\u0438\u0448\u0438\u043d\u0433\u0430\n\u041c\u043e\u0448\u0435\u043d\u043d\u0438\u043a\u0438 \u0440\u0430\u0441\u0441\u044b\u043b\u0430\u044e\u0442 \u043f\u0438\u0441\u044c\u043c\u0430 \u0441 \u0442\u0435\u043c\u0430\u043c\u0438 \u0432\u0440\u043e\u0434\u0435 \u00ab\u043f\u0435\u0440\u0435\u043d\u043e\u0441 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 Teams\u00bb \u2014 \u043d\u0430 \u0441\u0430\u043c\u043e\u043c \u0434\u0435\u043b\u0435 \u044d\u0442\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u044b. \u0412 \u0437\u043e\u043d\u0435 \u0440\u0438\u0441\u043a\u0430 \u2014 \u043c\u0430\u043b\u044b\u0439 \u0438 \u0441\u0440\u0435\u0434\u043d\u0438\u0439 \u0431\u0438\u0437\u043d\u0435\u0441.\n\n\ud83d\udccc 2. \u041c\u043e\u0434\u0443\u043b\u0438 \u043d\u0430 Go \u0441\u0442\u0438\u0440\u0430\u044e\u0442 \u0434\u0438\u0441\u043a\u0438 Linux-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 GitHub\n\u041f\u043e\u0434 \u0432\u0438\u0434\u043e\u043c \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0437\u0430\u0442\u0438\u0440\u0430\u044e\u0449\u0438\u0435 \u0434\u0438\u0441\u043a. \u0422\u0440\u043e\u044f\u043d\u044b \u0431\u044b\u0441\u0442\u0440\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u044b, \u043d\u043e \u0440\u0435\u043f\u0443\u0442\u0430\u0446\u0438\u044f \u0443 \u044d\u043a\u043e\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u043e\u0448\u0430\u0442\u043d\u0443\u043b\u0430\u0441\u044c.\n\n\ud83d\udccc 3. Microsoft \u043f\u043e\u0447\u0438\u043d\u0438\u043b\u0430 \u0431\u0430\u0433 \u0441 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0434\u043e Windows 11 24H2 \u0447\u0435\u0440\u0435\u0437 WSUS\n\u041e\u0448\u0438\u0431\u043a\u0430 0x80240069 \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0435 \u043c\u0435\u0448\u0430\u0435\u0442. \u041d\u0443\u0436\u043d\u043e \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0443 Known Issue Rollback, \u0435\u0441\u043b\u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043e\u0442\u043a\u0430\u0442 \u0435\u0449\u0451 \u043d\u0435 \u0441\u0440\u0430\u0431\u043e\u0442\u0430\u043b.\n\n\ud83d\udccc 4. Android \u0441\u043d\u043e\u0432\u0430 \u043f\u043e\u0434 \u0430\u0442\u0430\u043a\u043e\u0439: \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 FreeType\nCVE-2025-27363 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043a\u043e\u0434 \u0431\u0435\u0437 \u043a\u043b\u0438\u043a\u043e\u0432. Google \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0430\u0442\u0447, \u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043d\u0435 \u0432\u0441\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\ud83d\udccc 5. \u0421\u0442\u0443\u0434\u0435\u043d\u0442\u044b \u0418\u0411-\u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0435\u0439 \u0432\u044b\u0431\u0438\u0440\u0430\u044e\u0442 \u0434\u0435\u043d\u044c\u0433\u0438, \u0430 \u043d\u0435 \u043a\u0430\u0440\u044c\u0435\u0440\u0443\n74% \u043e\u043f\u0440\u043e\u0448\u0435\u043d\u043d\u044b\u0445 \u0441\u0442\u0443\u0434\u0435\u043d\u0442\u043e\u0432 \u0441\u0442\u0430\u0432\u044f\u0442 \u043d\u0430 \u043f\u0435\u0440\u0432\u043e\u0435 \u043c\u0435\u0441\u0442\u043e \u0437\u0430\u0440\u043f\u043b\u0430\u0442\u0443. \u0418 \u0442\u043e\u043b\u044c\u043a\u043e \u0442\u0440\u0435\u0442\u044c \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u044b \u0432\u0443\u0437\u043e\u0432\u0441\u043a\u043e\u0439 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u043e\u0439.\n\n\ud83d\udccc 6. Core Werewolf \u0441\u043d\u043e\u0432\u0430 \u0430\u0442\u0430\u043a\u0443\u0435\u0442 \u043e\u0431\u043e\u0440\u043e\u043d\u043a\u0443 \u0447\u0435\u0440\u0435\u0437 PDF-\u043f\u0440\u0438\u043c\u0430\u043d\u043a\u0438\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f VNC \u0438 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0431\u0430\u0442\u043d\u0438\u043a\u0438. \u0412\u0441\u0451 \u0432 \u0434\u0443\u0445\u0435 APT-\u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438, \u043e\u0440\u0438\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043d\u0430 \u0432\u043e\u0435\u043d\u043d\u044b\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0420\u0424 \u0438 \u0420\u0411.\n\n#\u043a\u0438\u0431\u0435\u0440\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #\u0418\u0411 #\u0444\u0438\u0448\u0438\u043d\u0433 #\u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441 #Android #Microsoft #Linux #\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b #APT #AM\u043c\u0435\u0434\u0438\u0430 #AM\u043c\u0435\u0434\u0438\u0430_\u043d\u043e\u0432\u043e\u0441\u0442\u0438", "creation_timestamp": "2025-05-06T19:11:46.000000Z"}, {"uuid": "f1052f15-9f1f-461e-9fb0-e5db78deba16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2748", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/9788", "content": "XSS To RCE By Abusing Custom File Handlers - Kentico Xperience CMS (CVE-2025-2748)\n\nhttps://labs.watchtowr.com/xss-to-rce-by-abusing-custom-file-handlers-kentico-xperience-cms-cve-2025-2748/", "creation_timestamp": "2025-04-07T22:30:57.000000Z"}, {"uuid": "9f02bddf-6dc1-4c6b-96a2-cbfbb72be6c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/5155", "content": "SysOwned, Your Friendly Support Ticket - SysAid On-Premise Pre-Auth RCE Chain (CVE-2025-2775 And Friends) #SysOwned #SysAid #Vulnerabilities #PreAuthRCE #CVE20252775 https://labs.watchtowr.com/sysowned-your-friendly-rce-support-ticket/", "creation_timestamp": "2026-08-03T02:14:15.867359Z"}, {"uuid": "971896ed-29be-40f9-b738-863768e24d23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "exploited", "source": "https://t.me/Russian_OSINT/5340", "content": "\u041a\u0430\u043d\u0430\u043b \ud83d\udd28SecAtor \u2014 @true_secator \u043f\u0438\u0448\u0435\u0442 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0435\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0438\u0437 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0437\u0430\u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0442\u044c \u0446\u0435\u043b\u0435\u0432\u0443\u044e APT-\u0430\u0442\u0430\u043a\u0443 \u043d\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0435\u0439 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u0421\u041c\u0418 \u0438 \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0439, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0435 \u0441\u043b\u043e\u0436\u043d\u043e\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u043d\u0430\u0440\u044f\u0434\u0443 \u0441 \u0432\u0435\u0441\u044c\u043c\u0430 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u043c 0-day \u0432 Chrome.\n\n\u0418\u0437\u043e\u0449\u0440\u0435\u043d\u043d\u0430\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0435\u043f\u0435\u0440\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u041e\u043f\u0435\u0440\u0430\u0446\u0438\u044f \u00ab\u0424\u043e\u0440\u0443\u043c\u043d\u044b\u0439 \u0442\u0440\u043e\u043b\u043b\u044c\u00bb, \u0430 \u043d\u0443\u043b\u044e \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2025-2783.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u0436\u0435\u0440\u0442\u0432 \u0438\u0437 \u0447\u0438\u0441\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Windows \u0437\u0430\u043c\u0430\u043d\u0438\u0432\u0430\u044e\u0442 \u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0430\u0439\u0442, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Chromium.\n\n\u041f\u043e\u0441\u043b\u0435 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u044f \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0438 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Google Chrome \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442\u0441\u044f \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0441 \u0446\u0435\u043b\u044c\u044e \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u043e\u0442 \u0436\u0435\u0440\u0442\u0432\u044b \u043d\u0435 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u043e\u0441\u044c.\n\n\u0414\u043b\u044f \u043e\u0431\u043c\u0430\u043d\u0430 \u0436\u0435\u0440\u0442\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0444\u0438\u0448\u0438\u043d\u0433 \u0441 \u043f\u0440\u0438\u043c\u0430\u043d\u043a\u043e\u0439 \u0432 \u0432\u0438\u0434\u0435 \u043f\u0440\u0438\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044f \u043d\u0430 \u043d\u0430\u0443\u0447\u043d\u044b\u0439 \u0444\u043e\u0440\u0443\u043c \u041f\u0440\u0438\u043c\u0430\u043a\u043e\u0432\u0441\u043a\u0438\u0435 \u0447\u0442\u0435\u043d\u0438\u044f. \n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0432\u0441\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u0441\u044b\u043b\u043a\u0438 \u0438\u043c\u0435\u043b\u0438 \u043e\u0447\u0435\u043d\u044c \u043a\u043e\u0440\u043e\u0442\u043a\u0438\u0439 \u0441\u0440\u043e\u043a \u0436\u0438\u0437\u043d\u0438, \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \u041b\u041a \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c 0-day \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u0434\u043b\u044f \u043f\u043e\u0431\u0435\u0433\u0430 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b Google Chrome.\n\n\u0410\u043d\u0430\u043b\u0438\u0437 \u043a\u043e\u0434\u0430 \u0438 \u043b\u043e\u0433\u0438\u043a\u0438 \u0440\u0430\u0431\u043e\u0442\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043f\u0440\u0438\u0432\u0435\u043b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u041b\u041a \u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044e \u043d\u0443\u043b\u044f (\u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0433\u043e \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Chrome), \u043e \u0447\u0435\u043c \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0438 Google.\n\n\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0432 \u043e\u0442\u0447\u0435\u0442\u0435 \u041b\u041a \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0438 Google \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043a 25 \u043c\u0430\u0440\u0442\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0451\u043d\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e Chrome 134.0.6998.177/.178\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c CVE-2025-2783 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437\u0440\u044f\u0434\u043d\u043e \u043f\u043e\u043b\u043e\u043c\u0430\u0442\u044c \u0433\u043e\u043b\u043e\u0432\u0443, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u043b\u0435\u0433\u043a\u043e \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b Google Chrome \u0431\u0435\u0437 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u043e\u0447\u0435\u0432\u0438\u0434\u043d\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439.\n\n\u041f\u0440\u0438\u0447\u0438\u043d\u043e\u0439 \u044d\u0442\u043e\u0433\u043e \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u043d\u0430 \u0441\u0442\u044b\u043a\u0435 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0438 \u041e\u0421 Windows.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u041e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u00ab\u0424\u043e\u0440\u0443\u043c\u043d\u044b\u0439 \u0442\u0440\u043e\u043b\u043b\u044c\u00bb \u043a \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0435\u0449\u0435 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f \u0438 \u043e\u0431\u0435\u0449\u0430\u0435\u0442 \u043c\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0440\u0438\u0433\u0443\u044e\u0449\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439. \n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0431\u044b\u043b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u041b\u041a \u043d\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0442\u043e\u0433\u0434\u0430 \u043f\u0440\u0438\u0448\u043b\u043e\u0441\u044c \u0431\u044b \u0434\u043e\u0436\u0438\u0434\u0430\u0442\u044c\u0441\u044f \u043d\u043e\u0432\u043e\u0439 \u0432\u043e\u043b\u043d\u044b \u0430\u0442\u0430\u043a \u0438 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0440\u0438\u0441\u043a\u0443 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0431\u0435\u0433\u0430 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u0441\u0435\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0434\u043b\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0438\u0445 \u0430\u0442\u0430\u043a.\n\n\u0412\u0441\u0435 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u044b \u0430\u0442\u0430\u043a \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u043d\u0430 \u0432\u0435\u0441\u044c\u043c\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u043e\u0442\u0447\u0435\u0442 \u0441 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 0-day \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u043c\u043e\u0433\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0438 \u0438\u0445 TTPs \u0432 \u041b\u041a \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u044b \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0432 \u0441\u043a\u043e\u0440\u043e\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0438.\n\n\u0411\u0443\u0434\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c.", "creation_timestamp": "2025-03-27T07:32:52.000000Z"}, {"uuid": "32ae2e9c-8d28-4454-b86b-c34618ca9f65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "exploited", "source": "https://t.me/S_E_Reborn/5624", "content": "Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome, \u0434\u043b\u044f \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445, \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430, \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-4664 (CVSS: 4,3) \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043d\u0435\u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u043c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u043c \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f  \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Loader \u0432 Google Chrome \u0434\u043e 136.0.7103.113.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u00ab\u0434\u043b\u044f \u0443\u0442\u0435\u0447\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0440\u0430\u0437\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443\u00bb \u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u043c\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u0430 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\nGoogle \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e  Solidlab \u0412\u0441\u0435\u0432\u043e\u043b\u043e\u0434\u0443 \u041a\u043e\u043a\u043e\u0440\u0438\u043d\u0443 (slonser_), \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0432\u0448\u0435\u0433\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 X 5 \u043c\u0430\u044f 2025 \u0433\u043e\u0434\u0430, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 \u0441\u0432\u043e\u0438 \u043e\u0441\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0432 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0434\u043b\u044f CVE-2025-4664 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439, \u0438\u043c\u0435\u043d\u043d\u043e \u0442\u0430\u043a\u0443\u044e \u0444\u043e\u0440\u043c\u0443\u043b\u0438\u0440\u043e\u0432\u043a\u0443 Google \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Chrome \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0430\u0442\u0430\u043a.\n\n\u0422\u0430\u043a \u0447\u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0441\u0447\u0438\u0442\u0430\u0442\u044c CVE-2025-4664 \u0432\u0442\u043e\u0440\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043f\u043e\u0441\u043b\u0435 CVE-2025-2783, \u043f\u043e\u043f\u0430\u0432\u0430\u0432\u0448\u0435\u0439 \u043f\u043e\u0434 \u00ab\u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e\u00bb.\n\nSlonser\u00a0\u043f\u043e\u044f\u0441\u043d\u0438\u043b, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a Link, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 Chrome \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u0435\u0442 \u0432 \u0437\u0430\u043f\u0440\u043e\u0441\u0430\u0445 \u043f\u043e\u0434\u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0437\u0430\u043f\u0440\u043e\u0441\u0430, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0440\u0435\u0434\u043a\u043e \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043a\u0440\u0430\u0436\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0447\u0435\u0440\u0435\u0437 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0435\u0433\u043e \u0440\u0435\u0441\u0443\u0440\u0441\u0430, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u044d\u0442\u043e\u0442 \u0442\u0440\u044e\u043a \u0438\u043d\u043e\u0433\u0434\u0430 \u0443\u0434\u0438\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u043c.\n\n\u0414\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0433\u0440\u043e\u0437 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0431\u0440\u0430\u0443\u0437\u0435\u0440 Chrome \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439 136.0.7103.113/.114 \u0434\u043b\u044f Windows \u0438 Mac \u0438 136.0.7103.113 \u0434\u043b\u044f Linux.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0434\u0440\u0443\u0433\u0438\u0445 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 \u043d\u0430 \u0431\u0430\u0437\u0435 Chromium, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Microsoft Edge, Brave, Opera \u0438 Vivaldi, \u0442\u0430\u043a\u0436\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e \u043c\u0435\u0440\u0435 \u0438\u0445 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f.", "creation_timestamp": "2025-05-15T14:52:51.000000Z"}, {"uuid": "c38dbca0-9300-4134-84e6-3341af1e686e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27505", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-03)", "content": "", "creation_timestamp": "2026-05-03T00:00:00.000000Z"}, {"uuid": "117a77ca-9fd0-4c9b-b72a-eece43f6ef8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2778", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/12025", "content": "#exploit\nCVE-2025-2775 CVE-2025-2776 CVE-2025-2777 CVE-2025-2778\nSysOwned, Your Friendly Support Ticket - SysAid On-Premise Pre-Auth RCE Chain\n]-> https://labs.watchtowr.com/sysowned-your-friendly-rce-support-ticket/\n\n]-> https://github.com/watchtowrlabs/watchTowr-vs-SysAid-PreAuth-RCE-Chain", "creation_timestamp": "2025-05-10T00:52:20.000000Z"}, {"uuid": "46a25fc5-ec5f-4744-a891-653113f06023", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2777", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/12025", "content": "#exploit\nCVE-2025-2775 CVE-2025-2776 CVE-2025-2777 CVE-2025-2778\nSysOwned, Your Friendly Support Ticket - SysAid On-Premise Pre-Auth RCE Chain\n]-> https://labs.watchtowr.com/sysowned-your-friendly-rce-support-ticket/\n\n]-> https://github.com/watchtowrlabs/watchTowr-vs-SysAid-PreAuth-RCE-Chain", "creation_timestamp": "2025-05-10T00:52:20.000000Z"}, {"uuid": "d0bd492f-d812-417c-b27b-eff7ffcba63e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/12025", "content": "#exploit\nCVE-2025-2775 CVE-2025-2776 CVE-2025-2777 CVE-2025-2778\nSysOwned, Your Friendly Support Ticket - SysAid On-Premise Pre-Auth RCE Chain\n]-> https://labs.watchtowr.com/sysowned-your-friendly-rce-support-ticket/\n\n]-> https://github.com/watchtowrlabs/watchTowr-vs-SysAid-PreAuth-RCE-Chain", "creation_timestamp": "2025-05-10T00:52:20.000000Z"}, {"uuid": "0e9a91ed-6d67-414f-9686-d66515eb0bf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/11924", "content": "#exploit\n1. CVE-2025-27636, CVE-2025-29891:\nApache Camel RCE PoC/Detection\n\n2. CVE-2024-0760:\nDoS in ISC BIND DNS\n\n3. CVE-2025-24813:\nApache Tomcat RCE\n\n4. CVE-2015-0009:\nSMB Security Feature Bypass (SMB Signing)\n\n5. CVE-2024-0582, CVE-2024-35880:\nA Series of io_uring pbuf Vulnerabilities", "creation_timestamp": "2025-03-13T23:40:19.000000Z"}, {"uuid": "123c3438-b787-4a44-8503-1847c5c71eb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11988", "content": "#exploit\n1. CVE-2024-55963:\nUnauth RCE in Default-Install of Appsmith\nhttps://rhinosecuritylabs.com/research/cve-2024-55963-unauthenticated-rce-in-appsmith\n\n2. CVE-2025-26909:\nLFI to RCE in WP Ghost Plugin\nhttps://github.com/zerodayx/cve-2025-26909\n\n3. CVE-2025-27840:\nVulnerability in ESP32 Microcontrollers\nhttps://github.com/demining/Bluetooth-Attacks-CVE-2025-27840", "creation_timestamp": "2025-03-31T12:29:08.000000Z"}, {"uuid": "6b8ab760-8716-4d1b-bd6c-051a15352240", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2748", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/12011", "content": "#exploit\n1. CVE-2025-2748:\nXSS To RCE By Abusing Custom File Handlers - Kentico Xperience CMS\nhttps://labs.watchtowr.com/xss-to-rce-by-abusing-custom-file-handlers-kentico-xperience-cms-cve-2025-2748\n\n2. CVE-2025-44228:\nAnyDesk RCE PoC\nhttps://github.com/ThoristKaw/Anydesk-Exploit-CVE-2025-12654-RCE-Builder\n\n3. CVE-2025-30065:\nApache Parquet RCE\nhttps://github.com/ron-imperva/CVE-2025-30065-PoC", "creation_timestamp": "2025-04-07T16:10:19.000000Z"}, {"uuid": "91f60d9b-6272-49cb-a8a1-169717a84bf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/12025", "content": "#exploit\nCVE-2025-2775 CVE-2025-2776 CVE-2025-2777 CVE-2025-2778\nSysOwned, Your Friendly Support Ticket - SysAid On-Premise Pre-Auth RCE Chain\n]-> https://labs.watchtowr.com/sysowned-your-friendly-rce-support-ticket/\n\n]-> https://github.com/watchtowrlabs/watchTowr-vs-SysAid-PreAuth-RCE-Chain", "creation_timestamp": "2025-05-10T00:52:20.000000Z"}, {"uuid": "81081ca1-3bf6-452d-89c2-fbe3a99ddaa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27113", "type": "seen", "source": "https://t.me/purp_sec/304", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35\u0421VE-2024-56171, CVE-2025-24928 \u0438 CVE-2025-27113 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 libxml2, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 \u0434\u043b\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430 XML-\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u043a\u0430\u043a \u043e\u0442\u043a\u0430\u0437\u0430 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438, \u0442\u0430\u043a \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\ud83d\udd35CVE-2024-37361 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Hitachi Vantara Pentaho. \u041f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 JSON \u0431\u0435\u0437 \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0435\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438\u0445 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0441\u0442\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f.\n\n\ud83d\udd35CVE-2024-56000 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0442\u0435\u043c\u0435 KLEO \u0434\u043b\u044f WordPress. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u043b\u0430\u0433\u0438\u043d K Elements, \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0439 \u0432 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442\u0435 \u0441 KLEO, \u0438 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u043d\u043e\u0439 \u043b\u043e\u0433\u0438\u043a\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0432\u0445\u043e\u0434\u0430 \u0432 \u0441\u043e\u0446\u0441\u0435\u0442\u0438. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0439\u0442\u0438 \u0432 \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u043b\u044e\u0431\u043e\u0433\u043e \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0443\u043a\u0430\u0437\u0430\u0432 \u0442\u043e\u043b\u044c\u043a\u043e \u0430\u0434\u0440\u0435\u0441 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b, \u043f\u0440\u0438\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u043a \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u0443.\n\n\ud83d\udd35CVE-2025-26794 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0430\u0433\u0435\u043d\u0442\u0435 Exim, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c SQLi-\u0430\u0442\u0430\u043a\u0438. \u041e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 ETRN-\u0437\u0430\u043f\u0440\u043e\u0441\u044b, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:23.744407Z"}, {"uuid": "ddc0fb41-c0bc-4837-aee7-6b1d621f95a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27132", "type": "seen", "source": "https://t.me/cvedetector/24570", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27132 - OpenHarmony Out-of-Bounds Write Arbitrary Code Execution\", \n  \"Content\": \"CVE ID : CVE-2025-27132 \nPublished : May 6, 2025, 9:15 a.m. | 44\u00a0minutes ago \nDescription : in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios. \nSeverity: 3.8 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-06T12:48:18.000000Z"}, {"uuid": "16af9e26-f14d-4bdd-9d80-b6207f722610", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27241", "type": "seen", "source": "https://t.me/cvedetector/24571", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27241 - OpenHarmony NULL Pointer Dereference Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27241 \nPublished : May 6, 2025, 9:15 a.m. | 44\u00a0minutes ago \nDescription : in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference. \nSeverity: 3.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-06T12:48:19.000000Z"}, {"uuid": "0d468c30-caa6-49a0-8a2b-1ef9ddfeff85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27365", "type": "seen", "source": "https://t.me/cvedetector/24299", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27365 - IBM MQ Operator SIGSEGV Memory Corruption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27365 \nPublished : May 1, 2025, 10:15 p.m. | 2\u00a0hours, 27\u00a0minutes ago \nDescription : IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, and MQ Operator SC2 3.2.0 through 3.2.10\u00a0  \n  \nClient connecting to a MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA channel process terminating it. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-02T03:23:47.000000Z"}, {"uuid": "192e371f-93c8-46a5-a0b9-e9371a6b4c09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27921", "type": "seen", "source": "https://t.me/cvedetector/24474", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27921 - Output Messenger Reflected Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-27921 \nPublished : May 5, 2025, 4:15 p.m. | 1\u00a0hour, 19\u00a0minutes ago \nDescription : A reflected cross-site scripting (XSS) vulnerability was discovered in Output Messenger before 2.0.63, where unsanitized input could be injected into the web application\u2019s response. This vulnerability occurs when user-controlled input is reflected back into the browser without proper sanitization or encoding. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-05T20:03:54.000000Z"}, {"uuid": "3abe60f1-89dd-47f5-86ce-0b5ff7c6418a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27248", "type": "seen", "source": "https://t.me/cvedetector/24572", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27248 - Huawei OpenHarmony NULL Pointer Dereference DOS\", \n  \"Content\": \"CVE ID : CVE-2025-27248 \nPublished : May 6, 2025, 9:15 a.m. | 44\u00a0minutes ago \nDescription : in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference. \nSeverity: 3.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-06T12:48:22.000000Z"}, {"uuid": "a6aedf9d-9c35-43dd-8f00-e5c9d62f6161", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27533", "type": "seen", "source": "https://t.me/cvedetector/24689", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27533 - Apache ActiveMQ Memory Allocation with Excessive Size Value Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2025-27533 \nPublished : May 7, 2025, 9:15 a.m. | 1\u00a0hour, 14\u00a0minutes ago \nDescription : Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ.  \n  \nDuring unmarshalling of OpenWire commands the size value of buffers was not properly validated which could lead to excessive memory allocation and be exploited to cause a denial of service (DoS) by depleting process memory, thereby affecting applications and services that rely on the availability of the ActiveMQ broker when not using mutual TLS connections.  \nThis issue affects Apache ActiveMQ: from 6.0.0 before 6.1.6, from 5.18.0 before 5.18.7, from 5.17.0 before 5.17.7, before 5.16.8. ActiveMQ 5.19.0 is not affected.  \n  \nUsers are recommended to upgrade to version 6.1.6+, 5.19.0+,  5.18.7+, 5.17.7, or 5.16.8 or which fixes the issue.  \n  \nExisting users may implement mutual TLS to mitigate the risk on affected brokers. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-07T13:09:05.000000Z"}, {"uuid": "f2eba248-3aca-4946-8a24-99d05d6db3a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27090", "type": "exploited", "source": "https://t.me/suboxone_chatroom/7446", "content": "\ud83d\udc7b\ud83d\udc7b\ud83d\udc7bSSRF in Sliver C2 (CVE-2025-27090), allowing an attacker to read and write TCP traffic through affected teamservers. \n\n\ud83d\udd25\ud83d\udd25\ud83d\udd25Demo shows leaking the IP of a Sliver teamserver hidden behind redirectors.\n\nWriteup- https://blog.chebuya.com/posts/server-side-request-forgery-on-sliver-c2/\n\nPOC- https://github.com/chebuya/exploits/tree/main/CVE-2025-27090%3A%20Sliver%20C2%20SSRF", "creation_timestamp": "2025-04-01T14:48:40.000000Z"}, {"uuid": "c8a0f5a9-f25e-42e4-a68e-f6d5b49acce2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27093", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/5517", "content": "Sliver C2 Insecure Default Network Policy (CVE-2025-27093) #SliverC2 #Wireguard #CVE202527093 #NetworkPolicy #CommandAndControl https://hngnh.com/posts/Sliver-CVE-2025-27093/", "creation_timestamp": "2026-08-01T23:00:05.075237Z"}, {"uuid": "79d0cee5-5e69-49d1-9e6f-004b4051f1e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2778", "type": "published-proof-of-concept", "source": "https://t.me/liwaamohammad/1962", "content": "https://github.com/watchtowrlabs/watchTowr-vs-SysAid-PreAuth-RCE-Chain\n\nPoC for SysAid PreAuth RCE Chain (CVE-2025-2775, CVE-2025-2776, CVE-2025-2777, CVE-2025-2778)\n#github #exploit", "creation_timestamp": "2025-05-09T14:18:17.000000Z"}, {"uuid": "df2068b2-c4a7-4414-a695-3cd566e14f61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2777", "type": "published-proof-of-concept", "source": "https://t.me/liwaamohammad/1962", "content": "https://github.com/watchtowrlabs/watchTowr-vs-SysAid-PreAuth-RCE-Chain\n\nPoC for SysAid PreAuth RCE Chain (CVE-2025-2775, CVE-2025-2776, CVE-2025-2777, CVE-2025-2778)\n#github #exploit", "creation_timestamp": "2025-05-09T14:18:17.000000Z"}, {"uuid": "7dcce15b-ceb3-46c6-a6d0-1c922674dec8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "published-proof-of-concept", "source": "https://t.me/liwaamohammad/1962", "content": "https://github.com/watchtowrlabs/watchTowr-vs-SysAid-PreAuth-RCE-Chain\n\nPoC for SysAid PreAuth RCE Chain (CVE-2025-2775, CVE-2025-2776, CVE-2025-2777, CVE-2025-2778)\n#github #exploit", "creation_timestamp": "2025-05-09T14:18:17.000000Z"}, {"uuid": "9e787924-a69e-4b89-a1ba-227433cdb478", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "published-proof-of-concept", "source": "https://t.me/liwaamohammad/1962", "content": "https://github.com/watchtowrlabs/watchTowr-vs-SysAid-PreAuth-RCE-Chain\n\nPoC for SysAid PreAuth RCE Chain (CVE-2025-2775, CVE-2025-2776, CVE-2025-2777, CVE-2025-2778)\n#github #exploit", "creation_timestamp": "2025-05-09T14:18:17.000000Z"}, {"uuid": "50170635-fdab-45f3-8827-63a9fc6edd96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27507", "type": "seen", "source": "https://t.me/suboxone_chatroom/7471", "content": "\ud83d\udee1CVE-2025-27507(CVSS 9.0): Zitadel Insecure Direct Object Reference (IDOR) Vulnerability\n\n\ud83d\udc7bDork:\nHUNTER : http://product.name=\"Zitadel\"\n\n\u26a0\ufe0fRefer:https://securityonline.info/cve-2025-27507-cvss-9-0-zitadel-users-at-risk-of-account-takeover/\n\n\ud83d\udda5https://github.com/zitadel/zitadel/security/advisories/GHSA-f3gh-529w-v32x\n\n#hunterhow #infosec #infosecurity #OSINT #Vulnerability", "creation_timestamp": "2025-04-01T12:38:04.000000Z"}, {"uuid": "764f681d-5960-4446-849d-d3605ae2fb21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27423", "type": "seen", "source": "https://t.me/purp_sec/339", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-23388 \u0438 CVE-2025-23389 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Rancher. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u044b\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c DOS-\u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35\u0411\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Android \u2014 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u0441\u0432\u0435\u0436\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u041e\u0421 Android, \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a \u043d\u0438\u043c \u043e\u0442 05.03.2025.\n\n\ud83d\udd35CVE-2025-0364 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 BigAnt Server, \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c \u0447\u0430\u0442\u0435 \u0434\u043b\u044f Windows, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 PHP-\u0444\u0430\u0439\u043b\u043e\u0432.\n\n\ud83d\udd35CVE-2025-27423 \u2014 \u0431\u0430\u0433 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0442\u0435\u043a\u0441\u0442\u043e\u0432\u043e\u043c \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0435 Vim, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\n\u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c (\u0441\u0436\u0430\u0442\u044b\u0435 \u0438\u043b\u0438 \u043d\u0435\u0441\u0436\u0430\u0442\u044b\u0435) tar-\u0444\u0430\u0439\u043b\u044b \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35CVE-2025-0912 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c PHP Object Injection \u0432 GiveWP, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u043f\u043b\u0430\u0433\u0438\u043d\u0435 \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u0430 \u0434\u043e\u043d\u0430\u0442\u043e\u0432 \u0432 WordPress. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 PHP-\u043e\u0431\u044a\u0435\u043a\u0442 \u0432 \u0437\u0430\u043f\u0440\u043e\u0441. \u0415\u0441\u043b\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 POP-\u0446\u0435\u043f\u043e\u0447\u043a\u0430, \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 (RCE) \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:25.364798Z"}, {"uuid": "38e8a1d9-4265-4c8e-8de1-1aaa6557b510", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27915", "type": "exploited", "source": "Telegram/0VbZe_23vYi0IKTPuqKPwqF12jNEdlxyMQXTwhA2tCZvTw", "content": "", "creation_timestamp": "2025-10-06T11:36:06.000000Z"}, {"uuid": "fd9db878-728b-4bf1-a5a5-cca108fd2493", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2749", "type": "seen", "source": "https://t.me/CyberDispatch/1348", "content": "CISA Adds 8 Actively Exploited Vulnerabilities to KEV Catalog\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) urgently added eight zero-day vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog on April 20, 2026, confirming active exploitation across enterprise tools from Cisco, Quest, PaperCut, TeamCity, Kentico, and Zimbra.\n\nKey flaws include three Cisco SD-WAN vulnerabilities\u2014CVE-2026-20127 (authentication bypass), CVE-2022-20775 (privilege escalation), and CVE-2026-20133 (sensitive info exposure)\u2014plus CVE-2025-32975 (CVSS 10.0) in Quest KACE SMA, enabling full user impersonation without credentials.\n\nOthers: CVE-2023-27351 (PaperCut improper auth, CVSS 8.2); CVE-2024-27199 (TeamCity path traversal, CVSS 7.3); CVE-2025-2749 (Kentico path traversal, CVSS 7.2).", "creation_timestamp": "2026-08-29T20:00:17.340666Z"}, {"uuid": "3beb5a45-258d-44ea-a3fd-5e6b2d09858c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27915", "type": "exploited", "source": "https://t.me/thehackernews/7662", "content": "A \u201charmless\u201d ICS calendar file exploited Zimbra\u2019s XSS zero-day flaw (CVE-2025-27915) \u2014 turning an invite into a full data stealer.\n\nTarget: Brazil\u2019s military.\nThe script waited 72 hours before exfiltrating credentials.\n\nRead \u2192 https://thehackernews.com/2025/10/zimbra-zero-day-exploited-to-target.html", "creation_timestamp": "2025-10-06T06:05:40.000000Z"}, {"uuid": "e146eb98-1c98-4804-a275-67288735a704", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "seen", "source": "https://t.me/purp_sec/349", "content": "\ud83d\udee1\u0412 \u043c\u0438\u043a\u0440\u043e\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 ESP32 \u043e\u0442 Espressif \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u043d\u0435\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Tarlogic Security \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 29 \u0441\u043a\u0440\u044b\u0442\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 ESP32, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c\u044e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043c\u0435\u043d\u044f\u0442\u044c MAC-\u0430\u0434\u0440\u0435\u0441\u0430 \u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u043f\u0430\u043a\u0435\u0442\u044b LMP/LLCP. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 OEM \u0438 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a.\n\n\u0415\u0441\u043b\u0438 \u041f\u041e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0441 ESP32 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 HCI-\u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0435 Bluetooth-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0438\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443. \u0415\u0441\u043b\u0438 \u0436\u0435 \u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u0443\u0436\u0435 \u0435\u0441\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u0438\u043b\u0438 \u043e\u043d \u0441\u043c\u043e\u0433 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435, \u043e\u043d \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c \u0438 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c ESP32 \u043a\u0430\u043a \u0442\u043e\u0447\u043a\u0443 \u0432\u0445\u043e\u0434\u0430 \u0434\u043b\u044f \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0430\u0442\u0430\u043a \u0438 \u0441\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u0442\u043e\u0438\u0442 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044e, \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 \u0438 \u0432\u043d\u0438\u043c\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0437\u0430 \u0441\u0435\u0442\u044c\u044e. Espressif \u043f\u043e\u043a\u0430 \u043d\u0435 \u043f\u0440\u043e\u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e, \u043d\u043e, \u043d\u0430\u0434\u0435\u044e\u0441\u044c, \u0432 \u0441\u043a\u043e\u0440\u043e\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u043e CVE-2025-27840.\n\n#blue_team #IoT", "creation_timestamp": "2026-08-05T00:00:25.821612Z"}, {"uuid": "33ebd264-5acd-45a7-94af-d1b1ec291228", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27816", "type": "seen", "source": "https://t.me/purp_sec/363", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-12297 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 MOXA PT Switch, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0435\u0432\u043e\u043c\u0443 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044e. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd35CVE-2025-27509 \u2014 \u0431\u0430\u0433 \u0432 Fleet, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0430\u043c\u0438. \u041e\u0448\u0438\u0431\u043a\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 SAML-\u0442\u043e\u043a\u0435\u043d\u043e\u0432, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\ud83d\udd35CVE-2024-38311, CVE-2024-56195, CVE-2024-56196 \u0438 CVE-2024-5620 \u2014 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Apache Traffic Server \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043f\u0430\u0442\u0447, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0439 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c DoS-\u0430\u0442\u0430\u043a\u0438, \u043a\u0440\u0430\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0442\u0440\u0430\u0444\u0438\u043a\u043e\u043c.\n\n\ud83d\udd35CVE-2025-25181, CVE-2024-57968, CVE-2024-13159, CVE-2024-13160, CVE-2024-13161 \u2014 \u043f\u044f\u0442\u044c \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Advantive VeraCore \u0438 Ivanti Endpoint Manager \u043f\u043e\u043f\u0430\u043b\u0438 \u0432 \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0443 CISA \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\ud83d\udd35CVE-2025-27816 \u2014 Veritas \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Alta Recovery Vault, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c, \u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0435 \u043a\u043e\u043f\u0438\u0438. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0435 .NET.\n\n\ud83d\udd35CVE-2025\u201327636 \u2014 PoC \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Apache Camel. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Camel, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:27.288167Z"}, {"uuid": "3c7a5af1-299e-490b-83d5-c2cf4946d8eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-30)", "content": "", "creation_timestamp": "2026-07-31T10:00:05.568813Z"}, {"uuid": "29ae4121-60a5-4ba2-b6b4-fdda246a1212", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27218", "type": "seen", "source": "https://t.me/purp_sec/347", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-25015 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0430 prototype pollution \u0432 Elastic Kiban, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\n\ud83d\udd35CVE-2025-1393 \u2014 \u0431\u0430\u0433 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Weidm\u00fcller PROCON-WIN, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u0432 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0445 \u0432 \u043a\u043e\u0434 \u043a\u0440\u0435\u0434\u0435\u043d\u0448\u0435\u043b\u043e\u0432 (hard-coded credentials). \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0445 \u0445\u0430\u043a\u0435\u0440 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0430 \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435.\n\n\ud83d\udd35CVE-2025-27507 \u2014 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e IDOR (Insecure direct object references) \u0432 Admin API ZITADEL. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0431\u0435\u0437 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0440\u043e\u043b\u0435\u0439 IAM \u043c\u0435\u043d\u044f\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0437\u0430\u043f\u0438\u0441\u044f\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\ud83d\udd35CVE-2025-27218 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Sitecore Experience Platform (XP). \u0418\u0437-\u0437\u0430 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35CVE-2025-26776 \u2014 \u0431\u0430\u0433 \u0432 Chaty Pro, \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u043f\u043b\u0430\u0433\u0438\u043d\u0435 \u0434\u043b\u044f WordPress. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0438\u0445 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u0434\u0435, \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u0432\u0432\u043e\u0434. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0435\u0431-\u0441\u0430\u0439\u0442.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:25.916212Z"}, {"uuid": "4e2454a0-e1d0-4aca-9bf0-2bada3f6136b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27507", "type": "seen", "source": "https://t.me/purp_sec/347", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-25015 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0430 prototype pollution \u0432 Elastic Kiban, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\n\ud83d\udd35CVE-2025-1393 \u2014 \u0431\u0430\u0433 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Weidm\u00fcller PROCON-WIN, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u0432 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0445 \u0432 \u043a\u043e\u0434 \u043a\u0440\u0435\u0434\u0435\u043d\u0448\u0435\u043b\u043e\u0432 (hard-coded credentials). \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0445 \u0445\u0430\u043a\u0435\u0440 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0430 \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435.\n\n\ud83d\udd35CVE-2025-27507 \u2014 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e IDOR (Insecure direct object references) \u0432 Admin API ZITADEL. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0431\u0435\u0437 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0440\u043e\u043b\u0435\u0439 IAM \u043c\u0435\u043d\u044f\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0437\u0430\u043f\u0438\u0441\u044f\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\ud83d\udd35CVE-2025-27218 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Sitecore Experience Platform (XP). \u0418\u0437-\u0437\u0430 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35CVE-2025-26776 \u2014 \u0431\u0430\u0433 \u0432 Chaty Pro, \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u043f\u043b\u0430\u0433\u0438\u043d\u0435 \u0434\u043b\u044f WordPress. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0438\u0445 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u0434\u0435, \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u0432\u0432\u043e\u0434. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0435\u0431-\u0441\u0430\u0439\u0442.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:25.952316Z"}, {"uuid": "e953aa25-e59f-472a-9af0-48acaac98b9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27093", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/5517", "content": "Sliver C2 Insecure Default Network Policy (CVE-2025-27093) #SliverC2 #Wireguard #CVE202527093 #NetworkPolicy #CommandAndControl https://hngnh.com/posts/Sliver-CVE-2025-27093/", "creation_timestamp": "2026-08-02T00:00:09.966297Z"}, {"uuid": "19eed745-f864-482b-b636-57b08720b03f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27607", "type": "seen", "source": "https://t.me/purp_sec/351", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-27607 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 python-json-logger, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f JSON-\u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432. \u0412 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u044c msgspec-python313-pre. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c \u043d\u0430 PyPI \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043f\u0430\u043a\u0435\u0442 \u0441 \u0442\u0430\u043a\u0438\u043c \u0436\u0435 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c \u0438, \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c, \u0441\u043e\u0432\u0435\u0440\u0448\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0443.\n\n\ud83d\udd35CVE-2025-0337 \u2014 \u0431\u0430\u0433 \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Now \u043e\u0442 ServiceNow, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c, \u0445\u0440\u0430\u043d\u044f\u0449\u0438\u043c\u0441\u044f \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Now.\n\n\ud83d\udd35CVE-2025-1316 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u0430\u043c\u0435\u0440\u0430\u0445 Edimax IC-7100 IP, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0430\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432. \u0411\u043e\u0442\u043d\u0435\u0442\u044b \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Mirai \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u043a\u0430\u043c\u0435\u0440\u044b.\n\n\ud83d\udd35CVE-2024-50394 \u2014 CVE \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 Helpdesk, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:26.130786Z"}, {"uuid": "6d9e2a7a-7115-4fb0-a9ae-8529f2cf1043", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27152", "type": "seen", "source": "https://t.me/purp_sec/358", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-28989 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 SolarWinds Web Help Desk, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043a\u043b\u044e\u0447\u0430. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u043a\u043b\u044e\u0447\u043e\u043c \u0434\u043b\u044f \u0434\u0435\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e.\n\n\ud83d\udd35CVE-2024-1182, CVE-2024-7587, CVE-2024-8299, CVE-2024-8300, CVE-2024-9852 \u2014 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0441\u0435 Iconics Suite, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u043c\u0441\u044f \u0432 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f SCADA. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0438 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u043d\u043e\u0441\u0438\u0442\u044c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e SCADA-\u0441\u0438\u0441\u0442\u0435\u043c.\n\n\ud83d\udd35CVE-2024-4577 \u2014 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043c\u0430\u0441\u0441\u043e\u0432\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u044d\u0442\u043e\u0439 CVE \u0432 PHP-CGI. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 PHP.\n\n\ud83d\udd35CVE-2025-27152 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 Axios, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u0430\u043c\u0438 \u0432 Node.js \u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\u0445. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0440\u0435\u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0432 (HTTP 30x). \u0415\u0441\u043b\u0438 \u0441\u0435\u0440\u0432\u0435\u0440, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0437\u0430\u043f\u0440\u043e\u0441, \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0435\u0433\u043e \u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 URL, Axios \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u044d\u0442\u043e\u0442 \u0437\u0430\u043f\u0440\u043e\u0441 \u0431\u0435\u0437 \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0435\u0439 \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35CVE-2025-24813 \u2014 \u0431\u0430\u0433 \u0432 Apache Tomcat, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u0438 \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435.\n\n\ud83d\udd35CVE-2024-56325 \u2014 \u043e\u0448\u0438\u0431\u043a\u0430 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 Apache Pinot, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0435\u0437 \u0432\u0432\u043e\u0434\u0430 \u043b\u043e\u0433\u0438\u043d\u0430 \u0438 \u043f\u0430\u0440\u043e\u043b\u044f. \n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:26.627924Z"}, {"uuid": "47137cea-733c-4f5a-8430-2abf8fcb5aa4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://t.me/sysodmins/28411", "content": "\u0414\u0438\u0440\u0435\u043a\u0442\u043e\u0440 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0430 \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0442\u0440\u043e\u044f\u043d\u0430 \ud83d\ude02\n\n\u0418\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Paragon Solutions, \u043f\u0438\u0448\u0443\u0449\u0430\u044f \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0432\u043e\u0435\u043d\u043d\u044b\u0439 \u0438 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0441\u043e\u0444\u0442... \u043d\u0430 \u0434\u043d\u044f\u0445 \u043e\u0444\u0430\u043a\u0430\u043f\u0438\u043b\u0430\u0441\u044c. \u0418\u0445 \u0433\u043b\u0430\u0432\u043d\u044b\u0439 \u044e\u0440\u0438\u0441\u0442 \u0438 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440 \u043f\u043e \u043a\u0430\u043a\u043e\u043c\u0443-\u0442\u043e \u043e\u0442\u0434\u0435\u043b\u0443 \u0432\u044b\u043b\u043e\u0436\u0438\u043b\u0430 \u0432 \u0441\u043e\u0446\u0441\u0435\u0442\u0438 \u043d\u0435\u043e\u0431\u044b\u0447\u043d\u0443\u044e \u0444\u043e\u0442\u043e\u0447\u043a\u0443 \ud83d\ude0f \u041d\u0430 \u0437\u0430\u0434\u043d\u0435\u043c \u0444\u043e\u043d\u0435 \u0441\u0438\u044f\u043b \u043c\u043e\u043d\u0438\u0442\u043e\u0440 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0440\u0430\u0431\u043e\u0447\u0438\u043c \u0434\u0430\u0448\u0431\u043e\u0440\u0434\u043e\u043c \u0438\u0445 \u0442\u0440\u043e\u044f\u043d\u0430 Graphite. \u041f\u043e\u0441\u0442 \u0441\u043d\u0435\u0441\u043b\u0438 \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u0431\u044b\u0441\u0442\u0440\u043e, \u043d\u043e \u0432\u0441\u0435 \u043a\u0442\u043e \u0445\u043e\u0442\u0435\u043b \u0443\u0436\u0435 \u0443\u0441\u043f\u0435\u043b\u0438 \u0441\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u044c \u0438 \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u0442\u044c \u043f\u043e \u043f\u0438\u043a\u0441\u0435\u043b\u044f\u043c.\n\n\u041d\u0430 \u0444\u043e\u0442\u043e \u0432\u0438\u0434\u043d\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u0441\u0435\u0441\u0441\u0438\u044f \u0441\u043b\u0435\u0436\u043a\u0438 \u0437\u0430 \u0430\u0431\u043e\u043d\u0435\u043d\u0442\u043e\u043c \u0438\u0437 \u0427\u0435\u0445\u0438\u0438 (\u043d\u0435\u043a\u0430\u044f Valentina). \u0412 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u0432\u0438\u0434\u043d\u044b \u0441\u0442\u0430\u0442\u0443\u0441\u044b \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043f\u0430\u043d\u0435\u043b\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0434\u043b\u044f \u0432\u044b\u043a\u0430\u0447\u0438\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 (\u0417\u0435\u043b\u0435\u043d\u044b\u0439 \u0447\u0430\u0442, \u0421\u0438\u0433\u043d\u0430\u043b, \u0422\u0435\u043b\u0435\u0433\u0430, Line, \u0421\u043d\u0430\u043f\u0447\u0430\u0442 \u0438 \u0422\u0438\u043a\u0422\u043e\u043a). \u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043c\u043e\u0434\u0443\u043b\u0438 Graphite \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u041e\u0421, \u043f\u043e\u043b\u0443\u0447\u0430\u044f \u043f\u043e\u043b\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0430, \u0442\u043e \u0438\u043c \u0430\u0431\u0441\u043e\u043b\u044e\u0442\u043d\u043e \u043f\u043e \u0431\u043e\u043a\u0443 \u0441\u043a\u0432\u043e\u0437\u043d\u043e\u0435 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043c\u0435\u0441\u0441\u0435\u043d\u0434\u0436\u0435\u0440\u043e\u0432, \u0442.\u043a. \u0441\u043e\u0444\u0442 \u0447\u0438\u0442\u0430\u0435\u0442 \u043f\u0430\u043c\u044f\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u044f \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0434\u043e \u0438\u0445 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u043b\u0438 \u0441\u0440\u0430\u0437\u0443 \u043f\u043e\u0441\u043b\u0435 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0438.\n\n\u0414\u043b\u044f \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u0441\u0432\u043e\u0435\u0433\u043e \u0430\u0433\u0435\u043d\u0442\u0430 Paragon \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 zero-click \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0435 \u043e\u0442 \u0436\u0435\u0440\u0442\u0432\u044b \u0432\u043e\u043e\u0431\u0449\u0435 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439. \u0420\u0430\u043d\u0435\u0435 \u0438\u0445 \u043b\u043e\u0432\u0438\u043b\u0438 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 FreeType (CVE-2025-27363), \u043a\u043e\u0433\u0434\u0430 \u0442\u0435\u043b\u0435\u0444\u043e\u043d \u0437\u0430\u0440\u0430\u0436\u0430\u043b\u0441\u044f \u043f\u0440\u043e\u0441\u0442\u043e \u043e\u0442 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0432 \u0444\u043e\u043d\u043e\u0432\u043e\u043c \u043a\u044d\u0448\u0435 \u0417\u0435\u043b\u0435\u043d\u043e\u0433\u043e \u0427\u0430\u0442\u0430 \u043e\u0442\u0440\u0438\u0441\u043e\u0432\u044b\u0432\u0430\u043b\u0441\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 PDF. \u0410 \u0431\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e Apple \u0432 iOS 18.3.1 \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u043b\u0430 \u0434\u044b\u0440\u0443 CVE-2025-43200 \u0432 iMessage, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0442\u043e\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b Graphite \u0434\u043b\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f. \u0418 \u0432\u043e\u0442 \u044d\u0442\u043e \u0432\u043e\u0442 \u0432\u0441\u0451 \u0433\u0435\u043d\u0434\u0438\u0440 \u0441\u043b\u0438\u043b\u0430 \u0432 \u0441\u043e\u0446\u0441\u0435\u0442\u0438 \u0440\u0430\u0434\u0438 \u043b\u0430\u0439\u043a\u043e\u0432 \ud83d\udc69\u200d\ud83e\uddb0\n\n\u0422\u0438\u043f\u0438\u0447\u043d\u044b\u0439 \ud83e\udd78 \u0421\u0438\u0441\u0430\u0434\u043c\u0438\u043d", "creation_timestamp": "2026-03-03T01:15:24.000000Z"}, {"uuid": "42e8778d-c0fa-4cbd-acda-25b08aeda6ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27218", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/5076", "content": "Sitecore: Unsafe Deserialisation Again! (CVE-2025-27218) #Sitecore #UnsafeDeserialisation #RemoteCommandExecution #CVE-2025-27218 #SearchlightCyber https://slcyber.io/blog/sitecore-unsafe-deserialization-again-cve-2025-27218/", "creation_timestamp": "2026-08-02T03:00:05.194514Z"}, {"uuid": "925e1adc-e61f-45e2-971e-97f5e3a42900", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/5155", "content": "SysOwned, Your Friendly Support Ticket - SysAid On-Premise Pre-Auth RCE Chain (CVE-2025-2775 And Friends) #SysOwned #SysAid #Vulnerabilities #PreAuthRCE #CVE20252775 https://labs.watchtowr.com/sysowned-your-friendly-rce-support-ticket/", "creation_timestamp": "2026-08-02T03:00:06.036674Z"}, {"uuid": "c7506a91-eebf-493d-9e55-76f334e06c20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://t.me/purp_sec/367", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-27363 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433\u0430 \u0448\u0440\u0438\u0444\u0442\u043e\u0432 FreeType. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u043f\u043e\u0434\u0433\u043b\u0438\u0444\u043e\u0432 \u0432 TrueType GX \u0438 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0448\u0440\u0438\u0444\u0442\u0430\u0445, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0437\u0430\u043f\u0438\u0441\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\ud83d\udd35CVE-2025-26865 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Apache OFBiz \u0434\u043b\u044f e-commerce, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0435\u0439 \u0448\u0430\u0431\u043b\u043e\u043d\u043e\u0432 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\n\ud83d\udd35CVE-2025-1661 \u2014 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 HUSKY \u0434\u043b\u044f Wordpress \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 LFI-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0438 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\ud83d\udd35CVE-2025-24983, CVE-2025-24984, CVE-2025-24985, CVE-2025-24991, CVE-2025-24993 \u0438 CVE-2025-26633 \u2014 CISA \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0448\u0435\u0441\u0442\u044c \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Windows NTFS, Win32k, Fast FAT \u0438 Management Console (MMC).\n\n\ud83d\udd35CVE-2024-56336 \u2014 Siemens \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u0438\u0432\u043e\u0434\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 SINAMICS S200, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043d\u0435\u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u043e\u043c. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438, \u043e\u0431\u0445\u043e\u0434\u044f \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0435 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd35CVE-2025-26319 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Flowise, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0439 open-source \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f AI-\u043f\u0430\u0439\u043f\u043b\u0430\u0439\u043d\u043e\u0432. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:05.764833Z"}, {"uuid": "7a080776-586e-411c-8ace-a14c532d25fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27407", "type": "seen", "source": "https://t.me/purp_sec/380", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-1960 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 WebHMI, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u0445 EcoStruxure Power Automation System User Interface \u0438 EcoStruxure Microgrid Operation Large (EMO-L). \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0435\u0441\u043b\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043d\u0435 \u0431\u044b\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u044b \u043f\u0440\u0438 \u043f\u0435\u0440\u0432\u043e\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438.\n\n\ud83d\udd35CVE-2025-27407 \u2014 \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 graphql-ruby, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Ruby. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 GraphQL-\u0441\u0445\u0435\u043c\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043c\u0435\u0442\u043e\u0434\u043e\u0432 GraphQL::Schema.from_introspection \u0438\u043b\u0438 GraphQL::Schema::Loader.load.\n\n\ud83d\udd35CVE-2024-13918 \u0438 CVE-2024-13919 \u2014 \u0434\u0432\u0435 \u043e\u0442\u0440\u0430\u0436\u0435\u043d\u043d\u044b\u0435 XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Laravel, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 JavaScript-\u043a\u043e\u0434 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0412\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0430 \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u043e\u0442\u043b\u0430\u0434\u043a\u0438.\n\n\ud83d\udd35CVE-2024-55591 \u0438 CVE-2025-24472 \u2014 \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Fortinet, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u043d\u043e\u0432\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u043e\u0439 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 Mora_001. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0438 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e SuperBlack.\n\n\ud83d\udd35CVE-2025-30066 \u2014 \u0442\u0430\u043a\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0439 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u043c GitHub Action tj-actions/changed-files. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u043a\u0440\u0435\u0442\u0430\u043c CI/CD, \u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0435\u043a\u0442\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0439 Action.\n\n\ud83d\udd35CVE-2025-26701 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Percona Monitoring and Management (PMM) Open Virtual Appliance (OVA), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0441 root-\u043f\u0440\u0430\u0432\u0430\u043c\u0438.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:06.131669Z"}, {"uuid": "674d7cc3-0267-417c-81eb-683224d226e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27920", "type": "seen", "source": "https://t.me/knowyouradversary/143", "content": "\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442!\n\n\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u043e\u0431\u0441\u0443\u0434\u0438\u043c \u0441\u0432\u0435\u0436\u0438\u0439 \u043e\u0442\u0447\u0451\u0442 \u043e\u0442 Microsoft Threat Intelligence \u043e \u0433\u0440\u0443\u043f\u043f\u0435 Marbled Dust. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Output Messenger Server Manager (CVE-2025-27920).\n\n\u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u043f\u0430\u043f\u043a\u0443 \u0430\u0432\u0442\u043e\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043c\u0435\u0441\u0442\u0438\u043b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b OM.vbs \u0438 OMServerService.vbs \u0432 \u043f\u0430\u043f\u043a\u0443 \u0430\u0432\u0442\u043e\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 Output Messenger \u0438 \u0444\u0430\u0439\u043b OMServerService.exe \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 C:\\Users\\public\\videos \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\u0412\u043e-\u043f\u0435\u0440\u0432\u044b\u0445, \u043c\u043e\u0436\u043d\u043e \u043e\u0445\u043e\u0442\u0438\u0442\u044c\u0441\u044f \u0437\u0430 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 .vbs-\u0444\u0430\u0439\u043b\u0430\u043c\u0438, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u044b\u043c\u0438 \u0438\u0437 \u043f\u0430\u043f\u043a\u0438 \u0430\u0432\u0442\u043e\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438:\n\nevent_type: \"processcreatewin\"\n\nAND\n\ncmdline: (\"startup\" AND \"vbs\")\n\n\u0412\u043e-\u0432\u0442\u043e\u0440\u044b\u0445, \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043a\u0430\u0442\u044c \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u044b\u0435 \u0438\u0437 C:\\Users\\public\\videos:\n\nevent_type: \"processcreatewin\"\n\nAND\n\nproc_file_path: \"users\\\\public\\\\videos\"\n\n\u0423\u0432\u0438\u0434\u0438\u043c\u0441\u044f \u0437\u0430\u0432\u0442\u0440\u0430!\n\nEnglish version", "creation_timestamp": "2026-08-04T13:00:06.609721Z"}, {"uuid": "67f6604c-b68b-40a4-981a-74edace0e7a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27816", "type": "seen", "source": "https://t.me/purp_sec/363", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-12297 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 MOXA PT Switch, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0435\u0432\u043e\u043c\u0443 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044e. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd35CVE-2025-27509 \u2014 \u0431\u0430\u0433 \u0432 Fleet, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0430\u043c\u0438. \u041e\u0448\u0438\u0431\u043a\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 SAML-\u0442\u043e\u043a\u0435\u043d\u043e\u0432, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\ud83d\udd35CVE-2024-38311, CVE-2024-56195, CVE-2024-56196 \u0438 CVE-2024-5620 \u2014 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Apache Traffic Server \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043f\u0430\u0442\u0447, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0439 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c DoS-\u0430\u0442\u0430\u043a\u0438, \u043a\u0440\u0430\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0442\u0440\u0430\u0444\u0438\u043a\u043e\u043c.\n\n\ud83d\udd35CVE-2025-25181, CVE-2024-57968, CVE-2024-13159, CVE-2024-13160, CVE-2024-13161 \u2014 \u043f\u044f\u0442\u044c \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Advantive VeraCore \u0438 Ivanti Endpoint Manager \u043f\u043e\u043f\u0430\u043b\u0438 \u0432 \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0443 CISA \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\ud83d\udd35CVE-2025-27816 \u2014 Veritas \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Alta Recovery Vault, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c, \u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0435 \u043a\u043e\u043f\u0438\u0438. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0435 .NET.\n\n\ud83d\udd35CVE-2025\u201327636 \u2014 PoC \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Apache Camel. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Camel, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:06.788039Z"}, {"uuid": "763ff3b6-6425-495f-a8e2-71ebb3fd303f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27509", "type": "seen", "source": "https://t.me/purp_sec/363", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-12297 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 MOXA PT Switch, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0435\u0432\u043e\u043c\u0443 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044e. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd35CVE-2025-27509 \u2014 \u0431\u0430\u0433 \u0432 Fleet, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0430\u043c\u0438. \u041e\u0448\u0438\u0431\u043a\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 SAML-\u0442\u043e\u043a\u0435\u043d\u043e\u0432, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\ud83d\udd35CVE-2024-38311, CVE-2024-56195, CVE-2024-56196 \u0438 CVE-2024-5620 \u2014 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Apache Traffic Server \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043f\u0430\u0442\u0447, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0439 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c DoS-\u0430\u0442\u0430\u043a\u0438, \u043a\u0440\u0430\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0442\u0440\u0430\u0444\u0438\u043a\u043e\u043c.\n\n\ud83d\udd35CVE-2025-25181, CVE-2024-57968, CVE-2024-13159, CVE-2024-13160, CVE-2024-13161 \u2014 \u043f\u044f\u0442\u044c \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Advantive VeraCore \u0438 Ivanti Endpoint Manager \u043f\u043e\u043f\u0430\u043b\u0438 \u0432 \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0443 CISA \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\ud83d\udd35CVE-2025-27816 \u2014 Veritas \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Alta Recovery Vault, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c, \u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0435 \u043a\u043e\u043f\u0438\u0438. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0435 .NET.\n\n\ud83d\udd35CVE-2025\u201327636 \u2014 PoC \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Apache Camel. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Camel, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:06.879299Z"}, {"uuid": "561714d6-5533-4cdb-86f8-18fbdce6837b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27607", "type": "seen", "source": "https://t.me/purp_sec/351", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-27607 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 python-json-logger, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f JSON-\u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432. \u0412 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u044c msgspec-python313-pre. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c \u043d\u0430 PyPI \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043f\u0430\u043a\u0435\u0442 \u0441 \u0442\u0430\u043a\u0438\u043c \u0436\u0435 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c \u0438, \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c, \u0441\u043e\u0432\u0435\u0440\u0448\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0443.\n\n\ud83d\udd35CVE-2025-0337 \u2014 \u0431\u0430\u0433 \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Now \u043e\u0442 ServiceNow, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c, \u0445\u0440\u0430\u043d\u044f\u0449\u0438\u043c\u0441\u044f \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Now.\n\n\ud83d\udd35CVE-2025-1316 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u0430\u043c\u0435\u0440\u0430\u0445 Edimax IC-7100 IP, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0430\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432. \u0411\u043e\u0442\u043d\u0435\u0442\u044b \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Mirai \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u043a\u0430\u043c\u0435\u0440\u044b.\n\n\ud83d\udd35CVE-2024-50394 \u2014 CVE \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 Helpdesk, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:08.680872Z"}, {"uuid": "f30ca540-d4a0-4e64-8c17-c5ec15acfbd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27152", "type": "seen", "source": "https://t.me/purp_sec/358", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-28989 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 SolarWinds Web Help Desk, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043a\u043b\u044e\u0447\u0430. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u043a\u043b\u044e\u0447\u043e\u043c \u0434\u043b\u044f \u0434\u0435\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e.\n\n\ud83d\udd35CVE-2024-1182, CVE-2024-7587, CVE-2024-8299, CVE-2024-8300, CVE-2024-9852 \u2014 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0441\u0435 Iconics Suite, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u043c\u0441\u044f \u0432 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f SCADA. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0438 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u043d\u043e\u0441\u0438\u0442\u044c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e SCADA-\u0441\u0438\u0441\u0442\u0435\u043c.\n\n\ud83d\udd35CVE-2024-4577 \u2014 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043c\u0430\u0441\u0441\u043e\u0432\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u044d\u0442\u043e\u0439 CVE \u0432 PHP-CGI. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 PHP.\n\n\ud83d\udd35CVE-2025-27152 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 Axios, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u0430\u043c\u0438 \u0432 Node.js \u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\u0445. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0440\u0435\u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0432 (HTTP 30x). \u0415\u0441\u043b\u0438 \u0441\u0435\u0440\u0432\u0435\u0440, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0437\u0430\u043f\u0440\u043e\u0441, \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0435\u0433\u043e \u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 URL, Axios \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u044d\u0442\u043e\u0442 \u0437\u0430\u043f\u0440\u043e\u0441 \u0431\u0435\u0437 \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0435\u0439 \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35CVE-2025-24813 \u2014 \u0431\u0430\u0433 \u0432 Apache Tomcat, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u0438 \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435.\n\n\ud83d\udd35CVE-2024-56325 \u2014 \u043e\u0448\u0438\u0431\u043a\u0430 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 Apache Pinot, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0435\u0437 \u0432\u0432\u043e\u0434\u0430 \u043b\u043e\u0433\u0438\u043d\u0430 \u0438 \u043f\u0430\u0440\u043e\u043b\u044f. \n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:08.776997Z"}, {"uuid": "491cd1dd-2ee7-489d-b668-8f35a8859ba2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27218", "type": "seen", "source": "https://t.me/purp_sec/347", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-25015 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0430 prototype pollution \u0432 Elastic Kiban, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\n\ud83d\udd35CVE-2025-1393 \u2014 \u0431\u0430\u0433 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Weidm\u00fcller PROCON-WIN, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u0432 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0445 \u0432 \u043a\u043e\u0434 \u043a\u0440\u0435\u0434\u0435\u043d\u0448\u0435\u043b\u043e\u0432 (hard-coded credentials). \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0445 \u0445\u0430\u043a\u0435\u0440 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0430 \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435.\n\n\ud83d\udd35CVE-2025-27507 \u2014 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e IDOR (Insecure direct object references) \u0432 Admin API ZITADEL. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0431\u0435\u0437 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0440\u043e\u043b\u0435\u0439 IAM \u043c\u0435\u043d\u044f\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0437\u0430\u043f\u0438\u0441\u044f\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\ud83d\udd35CVE-2025-27218 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Sitecore Experience Platform (XP). \u0418\u0437-\u0437\u0430 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35CVE-2025-26776 \u2014 \u0431\u0430\u0433 \u0432 Chaty Pro, \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u043f\u043b\u0430\u0433\u0438\u043d\u0435 \u0434\u043b\u044f WordPress. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0438\u0445 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u0434\u0435, \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u0432\u0432\u043e\u0434. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0435\u0431-\u0441\u0430\u0439\u0442.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:08.904799Z"}, {"uuid": "725859b2-1d09-4bde-b717-436761c71178", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27507", "type": "seen", "source": "https://t.me/purp_sec/347", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-25015 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0430 prototype pollution \u0432 Elastic Kiban, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\n\ud83d\udd35CVE-2025-1393 \u2014 \u0431\u0430\u0433 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Weidm\u00fcller PROCON-WIN, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u0432 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0445 \u0432 \u043a\u043e\u0434 \u043a\u0440\u0435\u0434\u0435\u043d\u0448\u0435\u043b\u043e\u0432 (hard-coded credentials). \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0445 \u0445\u0430\u043a\u0435\u0440 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0430 \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435.\n\n\ud83d\udd35CVE-2025-27507 \u2014 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e IDOR (Insecure direct object references) \u0432 Admin API ZITADEL. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0431\u0435\u0437 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0440\u043e\u043b\u0435\u0439 IAM \u043c\u0435\u043d\u044f\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0437\u0430\u043f\u0438\u0441\u044f\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\ud83d\udd35CVE-2025-27218 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Sitecore Experience Platform (XP). \u0418\u0437-\u0437\u0430 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35CVE-2025-26776 \u2014 \u0431\u0430\u0433 \u0432 Chaty Pro, \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u043f\u043b\u0430\u0433\u0438\u043d\u0435 \u0434\u043b\u044f WordPress. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0438\u0445 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u0434\u0435, \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u0432\u0432\u043e\u0434. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0435\u0431-\u0441\u0430\u0439\u0442.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:08.937505Z"}, {"uuid": "2217c533-89e4-4f43-81f0-edfb075bd96c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27152", "type": "seen", "source": "Telegram/cK5NtptjlMdElJbpSQ8Y7Fku-wEnUVxwgkaZiaZLOBnL_CY_", "content": "", "creation_timestamp": "2026-08-03T18:00:05.220389Z"}, {"uuid": "161d2089-c8f8-4c41-97d1-3497ed517912", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "seen", "source": "https://t.me/purp_sec/349", "content": "\ud83d\udee1\u0412 \u043c\u0438\u043a\u0440\u043e\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 ESP32 \u043e\u0442 Espressif \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u043d\u0435\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Tarlogic Security \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 29 \u0441\u043a\u0440\u044b\u0442\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 ESP32, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c\u044e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043c\u0435\u043d\u044f\u0442\u044c MAC-\u0430\u0434\u0440\u0435\u0441\u0430 \u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u043f\u0430\u043a\u0435\u0442\u044b LMP/LLCP. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 OEM \u0438 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a.\n\n\u0415\u0441\u043b\u0438 \u041f\u041e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0441 ESP32 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 HCI-\u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0435 Bluetooth-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0438\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443. \u0415\u0441\u043b\u0438 \u0436\u0435 \u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u0443\u0436\u0435 \u0435\u0441\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u0438\u043b\u0438 \u043e\u043d \u0441\u043c\u043e\u0433 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435, \u043e\u043d \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c \u0438 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c ESP32 \u043a\u0430\u043a \u0442\u043e\u0447\u043a\u0443 \u0432\u0445\u043e\u0434\u0430 \u0434\u043b\u044f \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0430\u0442\u0430\u043a \u0438 \u0441\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u0442\u043e\u0438\u0442 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044e, \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 \u0438 \u0432\u043d\u0438\u043c\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0437\u0430 \u0441\u0435\u0442\u044c\u044e. Espressif \u043f\u043e\u043a\u0430 \u043d\u0435 \u043f\u0440\u043e\u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e, \u043d\u043e, \u043d\u0430\u0434\u0435\u044e\u0441\u044c, \u0432 \u0441\u043a\u043e\u0440\u043e\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u043e CVE-2025-27840.\n\n#blue_team #IoT", "creation_timestamp": "2026-08-04T13:00:09.021939Z"}, {"uuid": "32b5b0eb-08e3-4457-9362-947106f32f14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27423", "type": "seen", "source": "https://t.me/purp_sec/339", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-23388 \u0438 CVE-2025-23389 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Rancher. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u044b\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c DOS-\u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35\u0411\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Android \u2014 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u0441\u0432\u0435\u0436\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u041e\u0421 Android, \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a \u043d\u0438\u043c \u043e\u0442 05.03.2025.\n\n\ud83d\udd35CVE-2025-0364 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 BigAnt Server, \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c \u0447\u0430\u0442\u0435 \u0434\u043b\u044f Windows, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 PHP-\u0444\u0430\u0439\u043b\u043e\u0432.\n\n\ud83d\udd35CVE-2025-27423 \u2014 \u0431\u0430\u0433 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0442\u0435\u043a\u0441\u0442\u043e\u0432\u043e\u043c \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0435 Vim, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\n\u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c (\u0441\u0436\u0430\u0442\u044b\u0435 \u0438\u043b\u0438 \u043d\u0435\u0441\u0436\u0430\u0442\u044b\u0435) tar-\u0444\u0430\u0439\u043b\u044b \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35CVE-2025-0912 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c PHP Object Injection \u0432 GiveWP, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u043f\u043b\u0430\u0433\u0438\u043d\u0435 \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u0430 \u0434\u043e\u043d\u0430\u0442\u043e\u0432 \u0432 WordPress. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 PHP-\u043e\u0431\u044a\u0435\u043a\u0442 \u0432 \u0437\u0430\u043f\u0440\u043e\u0441. \u0415\u0441\u043b\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 POP-\u0446\u0435\u043f\u043e\u0447\u043a\u0430, \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 (RCE) \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:09.379039Z"}, {"uuid": "c2a40e77-5104-4e94-8c06-586a4b2b2877", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27113", "type": "seen", "source": "https://t.me/purp_sec/304", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35\u0421VE-2024-56171, CVE-2025-24928 \u0438 CVE-2025-27113 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 libxml2, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 \u0434\u043b\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430 XML-\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u043a\u0430\u043a \u043e\u0442\u043a\u0430\u0437\u0430 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438, \u0442\u0430\u043a \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\ud83d\udd35CVE-2024-37361 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Hitachi Vantara Pentaho. \u041f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 JSON \u0431\u0435\u0437 \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0435\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438\u0445 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0441\u0442\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f.\n\n\ud83d\udd35CVE-2024-56000 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0442\u0435\u043c\u0435 KLEO \u0434\u043b\u044f WordPress. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u043b\u0430\u0433\u0438\u043d K Elements, \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0439 \u0432 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442\u0435 \u0441 KLEO, \u0438 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u043d\u043e\u0439 \u043b\u043e\u0433\u0438\u043a\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0432\u0445\u043e\u0434\u0430 \u0432 \u0441\u043e\u0446\u0441\u0435\u0442\u0438. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0439\u0442\u0438 \u0432 \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u043b\u044e\u0431\u043e\u0433\u043e \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0443\u043a\u0430\u0437\u0430\u0432 \u0442\u043e\u043b\u044c\u043a\u043e \u0430\u0434\u0440\u0435\u0441 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b, \u043f\u0440\u0438\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u043a \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u0443.\n\n\ud83d\udd35CVE-2025-26794 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0430\u0433\u0435\u043d\u0442\u0435 Exim, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c SQLi-\u0430\u0442\u0430\u043a\u0438. \u041e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 ETRN-\u0437\u0430\u043f\u0440\u043e\u0441\u044b, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:10.213078Z"}, {"uuid": "00e4dbee-3597-4e13-885a-a2265c0640d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-09)", "content": "", "creation_timestamp": "2026-05-09T00:00:00.000000Z"}, {"uuid": "4622da24-fd46-4ec5-a0c8-a0607d43cee4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-09)", "content": "", "creation_timestamp": "2026-05-09T00:00:00.000000Z"}, {"uuid": "dcd8b911-fc5c-434e-b195-0ff4672e8c26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2777", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-09)", "content": "", "creation_timestamp": "2026-05-09T00:00:00.000000Z"}, {"uuid": "e30d36a0-8ae2-4d2a-8674-b664913bae5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27509", "type": "seen", "source": "https://t.me/purp_sec/363", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-12297 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 MOXA PT Switch, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0435\u0432\u043e\u043c\u0443 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044e. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd35CVE-2025-27509 \u2014 \u0431\u0430\u0433 \u0432 Fleet, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0430\u043c\u0438. \u041e\u0448\u0438\u0431\u043a\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 SAML-\u0442\u043e\u043a\u0435\u043d\u043e\u0432, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\ud83d\udd35CVE-2024-38311, CVE-2024-56195, CVE-2024-56196 \u0438 CVE-2024-5620 \u2014 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Apache Traffic Server \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043f\u0430\u0442\u0447, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0439 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c DoS-\u0430\u0442\u0430\u043a\u0438, \u043a\u0440\u0430\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0442\u0440\u0430\u0444\u0438\u043a\u043e\u043c.\n\n\ud83d\udd35CVE-2025-25181, CVE-2024-57968, CVE-2024-13159, CVE-2024-13160, CVE-2024-13161 \u2014 \u043f\u044f\u0442\u044c \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Advantive VeraCore \u0438 Ivanti Endpoint Manager \u043f\u043e\u043f\u0430\u043b\u0438 \u0432 \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0443 CISA \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\ud83d\udd35CVE-2025-27816 \u2014 Veritas \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Alta Recovery Vault, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c, \u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0435 \u043a\u043e\u043f\u0438\u0438. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0435 .NET.\n\n\ud83d\udd35CVE-2025\u201327636 \u2014 PoC \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Apache Camel. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Camel, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:26.909638Z"}, {"uuid": "5a8d58fb-f2cb-4cf2-b2f3-a964d30b1c04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27136", "type": "seen", "source": "https://t.me/GithubRedTeam/83916", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XXE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2025-27136-XXE-LocalS3\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ZaidMkh32\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-12 09:47:31\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nProof of Concept for CVE-2025-27136 (XXE in Local-S3)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-12T10:02:47.000000Z"}, {"uuid": "6121efee-a5b7-4e1d-9b24-dc622886ed97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27237", "type": "seen", "source": "https://t.me/bhhub/1167", "content": "Top exploited vulns of the Week\n\nThis week\u2019s Vulnerability Trend shows a mix of big-platform remote RCEs (Oracle EBS, DrayTek), high-impact web plugin and local network exploits (WordPress Spirit, SillyTavern), plus client/runtime abuse in widely distributed software (Unity, Zabbix agent). Notable: an enterprise-scale, pre-auth Oracle RCE is already weaponized by ransomware groups (Cl0p / GRACEFUL SPIDER) and added to CISA KEV \u2014 treat it as highest priority.\n\nQuick hit list:\n\n\u2b50\ufe0f CVE-2025-61882 \u2014 Oracle E-Business Suite (BI Publisher integration) \u2014 CVSS 9.8, pre-auth RCE, actively used by Cl0p & GRACEFUL SPIDER; on CISA KEV. Patch immediately or isolate EBS HTTP endpoints.\n\u2b50\ufe0f CVE-2025-6388 \u2014 Spirit Framework (WordPress) \u2014 CVSS 9.8, unauthenticated admin takeover. Update to 1.2.15 or remove the plugin.\n\u2b50\ufe0f CVE-2025-59159 \u2014 SillyTavern (DNS rebinding) \u2014 CVSS ~9.6, local network\u2192API key theft. Upgrade to 1.13.4 + enable host whitelist.\n\u2b50\ufe0f CVE-2025-10547 \u2014 DrayTek Vigor routers \u2014 CVSS 8.8, unauth RCE in HTTP CGI; remote root possible. Apply vendor fixes and audit external-facing routers.\n\u2b50\ufe0f CVE-2025-59489 \u2014 Unity Runtime \u2014 Arg injection / DLL hijack in apps; PoCs available; exploited via trojanized games. Treat as supply-chain / app-store risk for distributed clients.\n\u2b50\ufe0f CVE-2025-27237 \u2014 Zabbix Agent (Windows LPE) \u2014 DLL injection via writable OpenSSL path; observed in targeted ops. Harden file perms and monitor for local privilege escalations.", "creation_timestamp": "2025-10-07T08:14:58.000000Z"}, {"uuid": "38d82f19-ffcb-40c6-9462-3a30c9c6d2ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27152", "type": "seen", "source": "Telegram/cK5NtptjlMdElJbpSQ8Y7Fku-wEnUVxwgkaZiaZLOBnL_CY_", "content": "", "creation_timestamp": "2026-08-04T00:00:30.370115Z"}, {"uuid": "7290ac9b-ee0d-4ae4-a5ca-ba60274fee6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27407", "type": "seen", "source": "https://t.me/purp_sec/380", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-1960 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 WebHMI, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u0445 EcoStruxure Power Automation System User Interface \u0438 EcoStruxure Microgrid Operation Large (EMO-L). \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0435\u0441\u043b\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043d\u0435 \u0431\u044b\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u044b \u043f\u0440\u0438 \u043f\u0435\u0440\u0432\u043e\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438.\n\n\ud83d\udd35CVE-2025-27407 \u2014 \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 graphql-ruby, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Ruby. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 GraphQL-\u0441\u0445\u0435\u043c\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043c\u0435\u0442\u043e\u0434\u043e\u0432 GraphQL::Schema.from_introspection \u0438\u043b\u0438 GraphQL::Schema::Loader.load.\n\n\ud83d\udd35CVE-2024-13918 \u0438 CVE-2024-13919 \u2014 \u0434\u0432\u0435 \u043e\u0442\u0440\u0430\u0436\u0435\u043d\u043d\u044b\u0435 XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Laravel, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 JavaScript-\u043a\u043e\u0434 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0412\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0430 \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u043e\u0442\u043b\u0430\u0434\u043a\u0438.\n\n\ud83d\udd35CVE-2024-55591 \u0438 CVE-2025-24472 \u2014 \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Fortinet, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u043d\u043e\u0432\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u043e\u0439 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 Mora_001. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0438 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e SuperBlack.\n\n\ud83d\udd35CVE-2025-30066 \u2014 \u0442\u0430\u043a\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0439 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u043c GitHub Action tj-actions/changed-files. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u043a\u0440\u0435\u0442\u0430\u043c CI/CD, \u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0435\u043a\u0442\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0439 Action.\n\n\ud83d\udd35CVE-2025-26701 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Percona Monitoring and Management (PMM) Open Virtual Appliance (OVA), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0441 root-\u043f\u0440\u0430\u0432\u0430\u043c\u0438.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:31.636255Z"}, {"uuid": "6ca1415b-d268-442f-b719-773eea4ad64c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27920", "type": "seen", "source": "https://t.me/knowyouradversary/143", "content": "\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442!\n\n\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u043e\u0431\u0441\u0443\u0434\u0438\u043c \u0441\u0432\u0435\u0436\u0438\u0439 \u043e\u0442\u0447\u0451\u0442 \u043e\u0442 Microsoft Threat Intelligence \u043e \u0433\u0440\u0443\u043f\u043f\u0435 Marbled Dust. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Output Messenger Server Manager (CVE-2025-27920).\n\n\u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u043f\u0430\u043f\u043a\u0443 \u0430\u0432\u0442\u043e\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043c\u0435\u0441\u0442\u0438\u043b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b OM.vbs \u0438 OMServerService.vbs \u0432 \u043f\u0430\u043f\u043a\u0443 \u0430\u0432\u0442\u043e\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 Output Messenger \u0438 \u0444\u0430\u0439\u043b OMServerService.exe \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 C:\\Users\\public\\videos \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\u0412\u043e-\u043f\u0435\u0440\u0432\u044b\u0445, \u043c\u043e\u0436\u043d\u043e \u043e\u0445\u043e\u0442\u0438\u0442\u044c\u0441\u044f \u0437\u0430 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 .vbs-\u0444\u0430\u0439\u043b\u0430\u043c\u0438, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u044b\u043c\u0438 \u0438\u0437 \u043f\u0430\u043f\u043a\u0438 \u0430\u0432\u0442\u043e\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438:\n\nevent_type: \"processcreatewin\"\n\nAND\n\ncmdline: (\"startup\" AND \"vbs\")\n\n\u0412\u043e-\u0432\u0442\u043e\u0440\u044b\u0445, \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043a\u0430\u0442\u044c \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u044b\u0435 \u0438\u0437 C:\\Users\\public\\videos:\n\nevent_type: \"processcreatewin\"\n\nAND\n\nproc_file_path: \"users\\\\public\\\\videos\"\n\n\u0423\u0432\u0438\u0434\u0438\u043c\u0441\u044f \u0437\u0430\u0432\u0442\u0440\u0430!\n\nEnglish version", "creation_timestamp": "2026-08-05T00:00:32.151831Z"}, {"uuid": "0512049e-7ef2-4e58-82be-87dcf285f8f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27740", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mmsfyror252f", "content": "CVE-2025-27740 - Critical auth bypass in Microsoft AD CS. Allows privilege escalation over network. CVSS 8.8. No patch yet. Mitigate immediately. #CVE #Microsoft #infosec\n\nhttps://www.valtersit.com/cve/CVE-2025-27740/", "creation_timestamp": "2026-05-27T02:01:33.510959Z"}, {"uuid": "d615853d-ded2-49b4-93d3-4042f1c21a08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-27794", "type": "published-proof-of-concept", "source": "https://github.com/flarum/framework/security/advisories/GHSA-hg9j-64wp-m9px", "content": "", "creation_timestamp": "2025-03-12T10:22:26.000000Z"}, {"uuid": "aa8002c0-6b55-474b-a0fd-b8f5aa0c0b1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-27093", "type": "published-proof-of-concept", "source": "https://github.com/BishopFox/sliver/security/advisories/GHSA-q8j9-34qf-7vq7", "content": "", "creation_timestamp": "2025-10-27T22:59:13.000000Z"}, {"uuid": "3c3c2acc-7333-471f-a8d7-6ecc932c5142", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-27506", "type": "published-proof-of-concept", "source": "https://github.com/nocodb/nocodb/security/advisories/GHSA-wf6c-hrhf-86cw", "content": "", "creation_timestamp": "2025-03-06T12:27:43.000000Z"}, {"uuid": "471f62c0-ae3c-49d2-8f7d-e5f456832214", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-27411", "type": "published-proof-of-concept", "source": "https://github.com/redaxo/core/security/advisories/GHSA-wppf-gqj5-fc4f", "content": "", "creation_timestamp": "2025-03-05T09:04:20.000000Z"}, {"uuid": "1486ec72-1d2c-4a93-bdb1-3fbdacecfc27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-27497", "type": "published-proof-of-concept", "source": "https://github.com/OpenIdentityPlatform/OpenDJ/security/advisories/GHSA-93qr-h8pr-4593", "content": "", "creation_timestamp": "2025-03-05T11:13:02.000000Z"}, {"uuid": "07331b9d-8a35-475d-92ff-35d8b9ddd18b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-27105", "type": "published-proof-of-concept", "source": "https://github.com/vyperlang/vyper/security/advisories/GHSA-4w26-8p97-f4jp", "content": "", "creation_timestamp": "2025-02-21T15:53:09.000000Z"}, {"uuid": "45ebdb5b-ea77-4f7e-b9bd-825e7d15721c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-27520", "type": "published-proof-of-concept", "source": "https://github.com/bentoml/BentoML/security/advisories/GHSA-33xw-247w-6hmc", "content": "", "creation_timestamp": "2025-04-04T00:59:47.000000Z"}, {"uuid": "0d7c07f1-de79-45af-9d4f-b692daecbc55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-27793", "type": "published-proof-of-concept", "source": "https://github.com/vega/vega/security/advisories/GHSA-963h-3v39-3pqf", "content": "", "creation_timestamp": "2025-03-27T02:45:19.000000Z"}, {"uuid": "9be4ac44-9581-45d5-afc2-f6d5656f538f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-27412", "type": "published-proof-of-concept", "source": "https://github.com/redaxo/core/security/advisories/GHSA-8366-xmgf-334f", "content": "", "creation_timestamp": "2025-03-05T09:03:49.000000Z"}, {"uuid": "d98227aa-fcac-43d4-b8cd-39df7a9ff1d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-27408", "type": "published-proof-of-concept", "source": "https://github.com/mnfst/manifest/security/advisories/GHSA-h8h6-7752-g28c", "content": "", "creation_timestamp": "2025-02-28T15:36:19.000000Z"}, {"uuid": "51b55ee7-6e30-4af3-8369-bfb2c3355efc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-27498", "type": "published-proof-of-concept", "source": "https://github.com/RustCrypto/AEADs/security/advisories/GHSA-r38m-44fw-h886", "content": "", "creation_timestamp": "2025-03-03T16:06:57.000000Z"}, {"uuid": "25efa23b-db81-4b88-9b54-7bd3e0f45f4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-27154", "type": "published-proof-of-concept", "source": "https://github.com/spotipy-dev/spotipy/security/advisories/GHSA-pwhh-q4h6-w599", "content": "", "creation_timestamp": "2025-02-27T07:24:18.000000Z"}, {"uuid": "67c2a833-1f72-4de1-80fc-ab0639c8a5f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-27145", "type": "published-proof-of-concept", "source": "https://github.com/9001/copyparty/security/advisories/GHSA-m2jw-cj8v-937r", "content": "", "creation_timestamp": "2025-02-25T01:31:40.000000Z"}, {"uuid": "ba9f80a7-1481-4b50-8816-0e4d24e9f750", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-27112", "type": "published-proof-of-concept", "source": "https://github.com/navidrome/navidrome/security/advisories/GHSA-c3p4-vm8f-386p", "content": "", "creation_timestamp": "2025-02-22T17:14:30.000000Z"}, {"uuid": "659faed7-8a9d-4cf9-9960-ca8e8fde8987", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-27088", "type": "published-proof-of-concept", "source": "https://github.com/oxyno-zeta/s3-proxy/security/advisories/GHSA-pp9m-qf39-hxjc", "content": "", "creation_timestamp": "2025-02-20T21:43:36.000000Z"}, {"uuid": "f7381675-3ae5-4b41-b1d6-61cb66a8ca6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-27090", "type": "published-proof-of-concept", "source": "https://github.com/BishopFox/sliver/security/advisories/GHSA-fh4v-v779-4g2w", "content": "", "creation_timestamp": "2025-02-19T20:35:01.000000Z"}, {"uuid": "f8e95409-4c7b-48d7-b420-4f338c0db2d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-28)", "content": "", "creation_timestamp": "2026-05-28T00:00:00.000000Z"}, {"uuid": "8512caf8-5edd-4ce5-8202-0aa70f2c5cef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-28)", "content": "", "creation_timestamp": "2026-05-28T00:00:00.000000Z"}, {"uuid": "4b7b0020-628a-4c02-bf50-2cba95e90d49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27505", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-31)", "content": "", "creation_timestamp": "2026-05-31T00:00:00.000000Z"}, {"uuid": "8ef834c9-3327-44fe-ac0b-3e25c15b09bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://t.me/zorglub57/74", "content": "CVE-2025-27636 - yourself \\n\\n5343480066325985\u00a0 05/26\u00a0 422\u00a0 \\nBarry Raymond\u00a0 \\n11001 key west Ave Porter \\nRanch Catamarca, 91326 \\nphone:1818741670\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \\nemail:raymond@outlook.com \\n395-92-6063\\n05/16/1984\\nJOIN FOR SAUCE TO ALL METHODS (CASHAPP >\u00a0 -\u00a0\u00a0 - https://check-host.net/check-report/23fe0d53k8ab", "creation_timestamp": "2026-08-18T19:00:03.735284Z"}, {"uuid": "28d64620-8841-42a9-83c3-a07b761142e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27915", "type": "seen", "source": "https://t.me/purp_sec/1184", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-61882 \u2014 \u0431\u0430\u0433 \u0432 Oracle E-Business Suite. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 servlet \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 XML, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442 \u0441\u0435\u0440\u0432\u0435\u0440 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c\u0441\u044f \u043f\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u043c\u0443 URL (SSRF). \u0417\u0430\u0442\u0435\u043c \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 return_url (CRLF-\u0432\u0441\u0442\u0430\u0432\u043a\u0430) \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u044c \u0432\u043d\u0435\u0448\u043d\u0438\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u0432 POST \u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0435 TCP-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435, \u0434\u043e\u0436\u0430\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0438\u0441\u0443 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442 \u043d\u0435\u0436\u0435\u043b\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438\u043b\u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0441\u0442 \u043f\u043e\u043b\u0435\u0437\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443.\n\n\ud83d\udd35 CVE-2025-20362 \u2014 \u043e\u0431\u0445\u043e\u0434 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 VPN \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Cisco Secure Firewall ASA/FTD. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 HTTP(S)-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a URL-\u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0430\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e\u043b\u0436\u043d\u044b \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u043e\u0431\u0445\u043e\u0434\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u0412 \u0441\u0432\u044f\u0437\u043a\u0435 \u0441 CVE-2025-20333 \u0438 CVE-2025-20363 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a RCE \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u0443\u0436\u0435 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u044b \u0441\u043b\u0443\u0447\u0430\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 in wild.\n\n\ud83d\udd35 CVE-2025-27915 \u2014 XSS-\u0431\u0430\u0433 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 iCalendar (.ICS, \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 Zimbra), \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 .ics-\u0432\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0441 \u043e\u0431\u0444\u0443\u0441\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c JavaScript-\u043a\u043e\u0434\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u043b\u0441\u044f \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0441\u0435\u0441\u0441\u0438\u0438 \u0436\u0435\u0440\u0442\u0432\u044b \u043f\u0440\u0438 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435 \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043a\u0430\u043b\u0435\u043d\u0434\u0430\u0440\u044f. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u043a\u0440\u0430\u0441\u0442\u044c \u0441\u0435\u0441\u0441\u0438\u043e\u043d\u043d\u044b\u0435 \u0442\u043e\u043a\u0435\u043d\u044b \u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043f\u0435\u0440\u0435\u0441\u044b\u043b\u043a\u0438 \u0432 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c \u044f\u0449\u0438\u043a\u0435 \u0438 \u043c\u0430\u0441\u0441\u043e\u0432\u043e \u043a\u0440\u0430\u0441\u0442\u044c \u043f\u0438\u0441\u044c\u043c\u0430 \u0431\u0435\u0437 \u043f\u0440\u044f\u043c\u043e\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430 \u043f\u0430\u0440\u043e\u043b\u044f.\n\n\ud83d\udd35 CISA \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u0441\u0435\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 in wild \u2014 CVE-2010-3765 (RCE, Mozilla), CVE-2010-3962 (\u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438, Internet Explorer), CVE-2011-3402 (RCE \u0432 Windows), CVE-2013-3918 (\u0432\u044b\u0445\u043e\u0434 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u043f\u0430\u043c\u044f\u0442\u0438, Windows), CVE-2021-22555 (\u0432\u044b\u0445\u043e\u0434 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u043a\u0443\u0447\u0438, Linux), CVE-2021-43226 (\u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, Windows), \u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0436\u0435 \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u0430\u044f \u0440\u0430\u043d\u0435\u0435 CVE-2025-61882.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:06.262686Z"}, {"uuid": "2371b62e-43dd-4ee0-91dd-e38260d0fafa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://t.me/purp_sec/1347", "content": "\u041a\u0441\u0442\u0430\u0442\u0438, \u0432 \u043f\u0440\u043e\u0448\u043b\u044b\u0439 \u0440\u0430\u0437 \u0440\u0435\u0431\u044f\u0442\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0437\u0435\u0440\u043e\u0434\u0435\u0439\u043a\u0443 CVE-2025-2783. \u0412 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0440\u0435\u0448\u0438\u043b\u0438 \u043d\u0435 \u0437\u0430\u043c\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u0441\u043e\u0432\u0441\u0435\u043c, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0435\u0441\u043b\u0438 \u043d\u0435 \u0441\u0447\u0438\u0442\u0430\u0442\u044c \u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u044b\u0445 \u0441\u0441\u044b\u043b\u043e\u043a \u043d\u0430 \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u043d\u0438\u0435 \u0430\u0440\u0445\u0438\u0432\u0430. \u0412 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u043e\u043c \u0432\u0441\u0435 \u0442\u043e \u0436\u0435 \u0441\u0430\u043c\u043e\u0435, \u0447\u0442\u043e \u0438 \u0432 \u043f\u0435\u0440\u0432\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438. \n\n#red_team", "creation_timestamp": "2026-08-14T16:00:04.662837Z"}, {"uuid": "6b202d65-a0cb-4a13-8dff-51930de8c588", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-01)", "content": "", "creation_timestamp": "2026-06-01T00:00:00.000000Z"}, {"uuid": "01b5a6c0-2fc6-4468-83e8-77093d8d1be5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://t.me/purp_sec/1236", "content": "\u26a0\ufe0f \u0425\u0430\u043a\u0435\u0440\u044b \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0438 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0435 \u041f\u041e Dante \u0447\u0435\u0440\u0435\u0437 \u0444\u0435\u0439\u043a\u043e\u0432\u044b\u0435 \u043f\u0440\u0438\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044f \u043d\u0430 \u043d\u0430\u0443\u0447\u043d\u043e-\u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043d\u044b\u0439 \u0444\u043e\u0440\u0443\u043c \u00ab\u041f\u0440\u0438\u043c\u0430\u043a\u043e\u0432\u0441\u043a\u0438\u0435 \u0447\u0442\u0435\u043d\u0438\u044f\u00bb\n\n\u00ab\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u044f \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e\u00bb \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0438 \u043e\u043f\u0438\u0441\u0430\u043b\u0430 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e \u00ab\u0424\u043e\u0440\u0443\u043c\u043d\u044b\u0439 \u0442\u0440\u043e\u043b\u043b\u044c\u00bb (APT ForumTroll), \u0446\u0435\u043b\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u0442\u0430\u043b\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 \u0421\u041c\u0418, \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432, \u043d\u0430\u0443\u0447\u043d\u043e-\u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0446\u0435\u043d\u0442\u0440\u043e\u0432, \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0438 \u043f\u0440\u043e\u0447\u0438\u0445 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439. \n\n\u041f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0436\u0435\u0440\u0442\u0432\u0430\u043c \u0440\u0430\u0441\u0441\u044b\u043b\u0430\u043b\u0438\u0441\u044c \u0433\u0440\u0430\u043c\u043e\u0442\u043d\u043e \u0438 \u0430\u043a\u043a\u0443\u0440\u0430\u0442\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044f \u043d\u0430 \u043d\u0430\u0443\u0447\u043d\u043e-\u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043d\u044b\u0439 \u0444\u043e\u0440\u0443\u043c \u00ab\u041f\u0440\u0438\u043c\u0430\u043a\u043e\u0432\u0441\u043a\u0438\u0435 \u0447\u0442\u0435\u043d\u0438\u044f\u00bb. \u041a\u0430\u0436\u0434\u043e\u0435 \u043f\u0438\u0441\u044c\u043c\u043e \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043a\u043e\u0440\u043e\u0442\u043a\u043e\u0436\u0438\u0432\u0443\u0449\u0435\u0439 \u0441\u0441\u044b\u043b\u043a\u043e\u0439 \u043d\u0430 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0439 \u0441\u0430\u0439\u0442. \u041f\u043e\u0441\u043b\u0435 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0430 \u043d\u0430 \u0441\u0430\u0439\u0442 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043b\u0441\u044f \u0441\u043b\u043e\u0436\u043d\u044b\u0439 0-day \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u043f\u043e\u043c\u043e\u0433\u0430\u0432\u0448\u0438\u0439 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0432\u044b\u0439\u0442\u0438 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b Chrome \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u043e\u0435 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0435 \u041f\u041e Dante. \n\n\u00ab\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u044f \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e\u00bb \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0432 Google. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0443, \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043a\u0430\u043a CVE-2025-2783. \u041e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u0430 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 \u043d\u0430 \u0431\u0430\u0437\u0435 Chromium.\n\n\u0421\u0430\u043c\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e Dante \u0431\u044b\u043b\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043e \u0438\u0442\u0430\u043b\u044c\u044f\u043d\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Memento Labs, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u043a\u0430\u043a Hacking Team. \u0421\u0442\u0438\u043b\u0435\u0440 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u043a \u043e\u0434\u043d\u043e\u043c\u0443 \u0438\u0437 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 C2, \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b HTTPs \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434. \u0422\u0430\u043a\u0436\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432 \u0444\u043e\u043d\u043e\u0432\u043e\u043c \u0440\u0435\u0436\u0438\u043c\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u0435 \u043d\u0430\u0436\u0430\u0442\u0438\u0439 \u043a\u043b\u0430\u0432\u0438\u0448 \u0438 \u043a\u0440\u0430\u0436\u0430 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0430\u0445: *.doc, *.xls, *.ppt, *.rtf, *.pdf, *.docx, *.xlsx, *.pptx.\n\n\ud83d\udd17 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u043e\u0442\u0447\u0435\u0442\u0435 \u00ab\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e\u00bb.\n\n#blue_team #Dante #CVE", "creation_timestamp": "2026-08-14T16:00:05.236653Z"}, {"uuid": "31b3e2d1-4549-4a1b-8c72-f77137b2b422", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://t.me/purp_sec/1070", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE\u20112025\u20115419 \u2014 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u0441 JavaScript PoC \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Chrome. \u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u0437\u0432\u0430\u0442\u044c heap corruption \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 HTML\u2011\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b, \u0447\u0442\u043e \u0432\u0435\u0434\u0435\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 renderer\u2011\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430.\n\n\ud83d\udd35 CVE-2025-27363 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Integer Overflow \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 FreeType (\u0432\u0435\u0440\u0441\u0438\u0438 \u2264\u202f2.13.0), \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f Chrome. \u041f\u0440\u0438 \u0440\u0430\u0437\u0431\u043e\u0440\u0435 \u0441\u043b\u043e\u0436\u043d\u044b\u0445 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u0448\u0440\u0438\u0444\u0442\u043e\u0432 TrueType GX \u0438 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0448\u0440\u0438\u0444\u0442\u043e\u0432 \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0437\u043d\u0438\u043a\u043d\u0443\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u0438\u044e \u0441\u043b\u0438\u0448\u043a\u043e\u043c \u043c\u0430\u043b\u0435\u043d\u044c\u043a\u043e\u0433\u043e \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432\u043d\u0435 \u0435\u0433\u043e \u0433\u0440\u0430\u043d\u0438\u0446. \u041a\u0430\u043a \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442 \u2014 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\ud83d\udd35 CVE\u20112025\u20116507 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u043c\u0430\u0448\u0438\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u0443\u0447\u0435\u043d\u0438\u044f H2O\u20113, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0434\u0430\u043d\u043d\u044b\u0445. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0444\u0438\u043b\u044c\u0442\u0440\u044b \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0439, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b JDBC\u2011\u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432, \u043f\u0440\u043e\u0441\u0442\u043e \u0432\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u043f\u0440\u043e\u0431\u0435\u043b\u044b \u043c\u0435\u0436\u0434\u0443 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u043c\u0438. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0447\u0438\u0442\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\ud83d\udd35 CVE-2025-54857 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0430 OS-\u043a\u043e\u043c\u0430\u043d\u0434\u043d\u0430\u044f \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f \u0432 \u0440\u043e\u0443\u0442\u0435\u0440\u0435 SkyBridge BASIC MB-A130. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 root-\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c. \u0412\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 ICS/OT, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443.\n\n\ud83d\udd35 CVE-2025-9791 \u2014 stack-based buffer overflow \u0432 \u0440\u043e\u0443\u0442\u0435\u0440\u0435 Tenda\u202fAC20, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 wanMTU \u0432 \u0440\u0435\u0441\u0443\u0440\u0441\u0435 /goform/fromAdvSetMacMtuWan. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\ud83d\udd35 CVE-2025-9812, CVE-2025-9813 \u2014 \u0435\u0449\u0435 \u0434\u0432\u0430 \u0431\u0430\u0433\u0430 \u0432 \u0440\u043e\u0443\u0442\u0435\u0440\u0430\u0445 Tenda. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0447\u0435\u0440\u0435\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 formSetSambaConf \u0438 formexeCommand. \u041a\u0430\u043a \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442 \u2014 \u043a\u0440\u0430\u0436\u0430 \u0434\u0430\u043d\u043d\u044b\u0445, RCE \u0438 DoS.\n\n#CVE_\u0434\u043d\u044f #blue_team", "creation_timestamp": "2026-08-14T16:00:07.076504Z"}, {"uuid": "4d025746-9c89-4eff-ad4a-32178942e3af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27388", "type": "seen", "source": "https://t.me/purp_sec/1034", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435\n\n\ud83d\udd35 CVE\u20112025\u201125256 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c OS Command Injection (CWE\u201178) \u0432 FortiSIEM. \u0423\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 CLI\u2011\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0411\u0430\u0433 \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f in-the-wild.\n\n\ud83d\udd35 CVE-2025-27388 \u2014 \u0431\u0430\u0433 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 OPPO Health. \u041f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 WebView \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u0443\u044e \u0432\u043d\u0435\u0448\u043d\u044e\u044e \u0441\u0441\u044b\u043b\u043a\u0443, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c JavaScript \u0438 \u043f\u043e\u0445\u0438\u0442\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0442\u043e\u043a\u0435\u043d\u044b. \u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\ud83d\udd35 CVE-2025-7734 \u2014 Stored XSS \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 blob viewer \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b GitLab CE/EE. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 \u0432 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0430\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b. \u041f\u043e\u0441\u043b\u0435 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430 \u0444\u0430\u0439\u043b\u0430 \u0434\u0440\u0443\u0433\u0438\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c, \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0441\u043a\u0440\u0438\u043f\u0442, \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0441\u0435\u0441\u0441\u0438\u0438 \u0438\u043b\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u043e\u0432\u0435\u0440\u0448\u0430\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0436\u0435\u0440\u0442\u0432\u044b.\n\n\ud83d\udd35 CVE-2025-6186 \u2014 \u0435\u0449\u0435 \u043e\u0434\u0438\u043d Stored XSS \u0431\u0430\u0433 \u0432 GitLab CE/EE, \u043d\u043e \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Work Item. \u0410\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043c\u043e\u0436\u0435\u0442 \u0432\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0432 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u0437\u0430\u0434\u0430\u0447\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 HTML/JavaScript, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u043d\u0438\u0442\u0441\u044f \u0443 \u043b\u044e\u0431\u043e\u0433\u043e, \u043a\u0442\u043e \u043e\u0442\u043a\u0440\u043e\u0435\u0442 \u044d\u0442\u0443 \u0437\u0430\u0434\u0430\u0447\u0443 \u2014 \u0432\u043f\u043b\u043e\u0442\u044c \u0434\u043e \u043a\u0440\u0430\u0436\u0438 \u0441\u0435\u0441\u0441\u0438\u0439 \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438.\n\n\ud83d\udd35 CVE-2025-8940 \u2014 buffer overflow (STACK-based) \u0432 \u0440\u043e\u0443\u0442\u0435\u0440\u0435 Tenda AC20. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 strcpy \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 time \u0432 \u043f\u0443\u0442\u0438 /goform/saveParentControlInfo. \u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441 time \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0431\u0443\u0444\u0435\u0440\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0446\u0435\u043b\u044f\u0445.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:07.366171Z"}, {"uuid": "7ddf3c68-a8c5-49e1-a3dd-66654515dec3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "seen", "source": "https://t.me/purp_sec/714", "content": "\u041f\u043e\u043c\u043d\u0438\u0442\u0435 \u043c\u0430\u0440\u0442\u043e\u0432\u0441\u043a\u0438\u0439 \u0445\u0430\u0439\u043f \u0432\u043e\u043a\u0440\u0443\u0433 \u043c\u0438\u043a\u0440\u043e\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 ESP32 \u043e\u0442 Espressif? \u0427\u0442\u043e \u0432 \u043d\u0435\u043c \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u043d\u0435\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b. \u0422\u0430\u043c \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u0430 \u043e\u0447\u0435\u043d\u044c \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u0430\u044f \u0438\u0441\u0442\u043e\u0440\u0438\u044f, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u043c\u0438 \u0444\u043e\u0440\u043c\u0443\u043b\u0438\u0440\u043e\u0432\u043a\u0430\u043c\u0438 \u0432 \u043f\u0440\u0435\u0441\u0441-\u0440\u0435\u043b\u0438\u0437\u0435. \u041f\u0430\u0440\u0443 \u043d\u0435\u0434\u0435\u043b\u044c \u043d\u0430\u0437\u0430\u0434 \u043a\u043e\u043b\u043b\u0435\u0433\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u044d\u0442\u043e\u0439 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0438 \u043d\u0430 \u0425\u0430\u0431\u0440\u0435. \u042f \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u043b \u0438 \u0432\u043e\u043e\u0431\u0449\u0435 \u043d\u0435 \u0443\u0434\u0438\u0432\u0438\u043b\u0441\u044f \u0442\u043e\u043c\u0443, \u0447\u0442\u043e \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0432\u044b\u044f\u0441\u043d\u0438\u0442\u044c.\n\n\u041a\u043e\u0433\u0434\u0430 @Lobrigate \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u043b \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u043e\u043d \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0444\u0440\u0430\u0437\u0443 \u00ab\u043d\u0435\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b\u00bb \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c. \u041e\u0434\u043d\u0430\u043a\u043e \u0432 \u043f\u0440\u0435\u0441\u0441-\u0440\u0435\u043b\u0438\u0437\u0435 \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Tarlogic, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u044d\u0442\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u044e\u0437\u0430\u043b\u0438 \u0442\u0435\u0440\u043c\u0438\u043d \u00ab\u0431\u044d\u043a\u0434\u043e\u0440\u00bb. \u0424\u043e\u0440\u043c\u0443\u043b\u0438\u0440\u043e\u0432\u043a\u0443 \u0432\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u043f\u0440\u0430\u0432\u0438\u043b\u0438, \u0437\u0430\u043c\u0435\u043d\u0438\u0432 \u00abbackdoor\u00bb \u043d\u0430 \u00abhidden feature\u00bb, \u043d\u043e \u0431\u044b\u043b\u043e \u0443\u0436\u0435 \u043f\u043e\u0437\u0434\u043d\u043e. \u041f\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0443 \u0431\u044b\u0441\u0442\u0440\u043e \u0440\u0430\u0437\u043d\u0435\u0441\u043b\u0438, \u0447\u0442\u043e ESP32 \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0441 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u043c. \u041f\u043e \u0444\u0430\u043a\u0442\u0443, \u043a\u043e\u043d\u0435\u0447\u043d\u043e \u0436\u0435, \u043d\u0438\u0447\u0435\u0433\u043e \u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0433\u043e \u0442\u0430\u043c \u043d\u0435 \u0431\u044b\u043b\u043e.\n\n\u041d\u0435\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 HCI-\u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 ESP32 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u044b CVE-2025-27840. \u041e\u043d\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u0443\u044e ESP32, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0443\u044e \u043a\u0430\u043a \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0445\u043e\u0441\u0442\u0430. \u0427\u0442\u043e\u0431\u044b \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u044d\u0442\u0438\u043c\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u0430\u043c\u0438, \u0432\u0430\u043c \u043d\u0430\u0434\u043e \u0438\u043c\u0435\u0442\u044c \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a UART/USB \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430\u043c \u043f\u043b\u0430\u0442\u044b \u0438\u043b\u0438 root-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0441\u0438. \n\n\u0413\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e \u0440\u0435\u0431\u044f\u0442\u0430 \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0447\u0435\u0433\u043e-\u0442\u043e \u0444\u0435\u043d\u043e\u043c\u0435\u043d\u0430\u043b\u044c\u043d\u043e \u043d\u043e\u0432\u043e\u0433\u043e \u0438\u043b\u0438 \u043e\u0441\u043e\u0431\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u0433\u043e. \u0414\u0430, \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u0430\u044f \u043d\u0430\u0445\u043e\u0434\u043a\u0430, \u043d\u043e \u044d\u0442\u043e \u043d\u0435 \u043f\u0440\u044f\u043c\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0438\u0437\u043a\u043e\u0443\u0440\u043e\u0432\u043d\u0435\u0432\u044b\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c \u0438 \u043d\u0435 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u0430\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0435\u0432 ESP32. \ud83d\ude02\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0432 \u043e\u0434\u043d\u043e\u043c \u0441\u043b\u043e\u0432\u0435 \u043f\u043e\u0434\u043d\u044f\u043b\u0430 \u043d\u0430 \u0443\u0448\u0438 \u0432\u0441\u0435\u0445, \u043a\u0442\u043e \u043d\u0435 \u0441\u0442\u0430\u043b \u0434\u043e\u043a\u0430\u043f\u044b\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u0435\u0440\u0432\u043e\u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430. \u0412\u043f\u0440\u043e\u0447\u0435\u043c, \u043a\u0430\u043a \u0438 \u0432\u0441\u0435\u0433\u0434\u0430. \u0414\u043e\u043a\u0430\u043f\u044b\u0432\u0430\u0439\u0442\u0435\u0441\u044c \u0434\u043e \u0441\u0443\u0442\u0438, \u043d\u0435 \u0432\u0435\u0434\u0438\u0442\u0435\u0441\u044c \u043d\u0430 \u043f\u0430\u043d\u0438\u043a\u0443 \u0438 \u0434\u0443\u043c\u0430\u0439\u0442\u0435 \u0441\u0432\u043e\u0435\u0439 \u0433\u043e\u043b\u043e\u0432\u043e\u0439.\n\n\ud83d\udd12 \u041a\u0430\u043a \u0437\u0430 \u043a\u043e\u0440\u043e\u0442\u043a\u0438\u0439 \u0441\u0440\u043e\u043a \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u0439\u0442\u0438 \u0438 \u043f\u043e\u0442\u0435\u0440\u044f\u0442\u044c \u0431\u044d\u043a\u0434\u043e\u0440 \u0432 ESP32, \u0447\u0438\u0442\u0430\u0439\u0442\u0435 \u0432 \u0441\u0442\u0430\u0442\u044c\u0435 \u043d\u0430 \u0425\u0430\u0431\u0440\u0435.\n\n#red_team #\u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0435", "creation_timestamp": "2026-08-14T16:00:12.536475Z"}, {"uuid": "4280c28f-281b-4395-ae48-c17097bebafd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27920", "type": "seen", "source": "https://t.me/purp_sec/623", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-27920 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439 \u0432 Output Messenger. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \"../\" \u0432 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438.\n\n\ud83d\udd35 CVE-2025-4647 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 Centreon. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438, \u043f\u043e\u0434\u043c\u0435\u043d\u044f\u044f \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0433\u043e SVG-\u0444\u0430\u0439\u043b\u0430, \u0430 \u043f\u043e\u0441\u043b\u0435 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u0441\u044f \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b.\n\n\ud83d\udd35 CVE-2025-42999 \u2014 \u0431\u0430\u0433 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Metadata Uploader \u0432 SAP NetWeaver Visual Composer. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043f\u043e\u043b\u0443\u0447\u0438\u0432 \u043d\u0443\u0436\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\ud83d\udd35 CVE-2025-4632 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Samsung MagicINFO 9, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435\u043c \u043f\u0443\u0442\u0438 \u043a \u0444\u0430\u0439\u043b\u0430\u043c. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\ud83d\udd35 CVE-2025-22249 \u2014 DOM-based XSS \u0432 VMware Aria Automation. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0445\u0438\u0442\u0438\u0442\u044c \u0442\u043e\u043a\u0435\u043d\u044b \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0443 \u0432\u043e\u0448\u0435\u0434\u0448\u0438\u0445 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u043e\u0431\u0443\u0434\u0438\u0432 \u0438\u0445 \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043f\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0435. \u041f\u043e\u0441\u043b\u0435 \u043a\u043b\u0438\u043a\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435, \u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0441\u0441\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:15.759208Z"}, {"uuid": "f495b5b7-be4f-45b4-b967-d47697a66fbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-27817", "type": "published-proof-of-concept", "source": "https://blog.securelayer7.net/cve-2025-27817-apache-kafka-connect-arbitrary-file-read", "content": "", "creation_timestamp": "2026-06-05T02:34:19.594000Z"}, {"uuid": "374d525c-7dad-45f0-a54e-8e76cd490349", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27520", "type": "seen", "source": "https://t.me/purp_sec/504", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-3439 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Everest Forms \u0434\u043b\u044f WordPress, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c PHP-\u043e\u0431\u044a\u0435\u043a\u0442\u044b. \u041c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE \u0438\u043b\u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u0430\u0442\u0430\u043a\u0430\u043c, \u0435\u0441\u043b\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 POP (Property-Oriented Programming).\n\n\ud83d\udd35 CVE-2025-27520 \u2014 \u0431\u0430\u0433 \u0432 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 BentoML, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 deserialize_value() \u0444\u0430\u0439\u043b\u0430 serde.py. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043d\u0430 \u043b\u044e\u0431\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 HTTP-\u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442 BentoML-\u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u0418\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u0434\u043e\u043b\u0436\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438, \u0434\u0430\u043d\u043d\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u044b, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35 CVE-2025-32896 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Apache SeaTunnel. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0447\u0438\u0442\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e Java-\u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432.\n\n\ud83d\udd35 CVE-2024-7971 \u2014 PoC \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u0434\u0432\u0438\u0436\u043a\u043e\u043c JavaScript V8 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Google Chrome. CVE \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b \u0442\u0438\u043f\u043e\u0432 (Type Confusion Vulnerability) \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0432\u0435\u0431-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:18.461202Z"}, {"uuid": "f0922e25-28ed-4835-800e-846a4a60054b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27590", "type": "seen", "source": "https://t.me/purp_sec/499", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-27590 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 Oxidized Web, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e Linux, \u043f\u043e\u0434 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-3114 \u0438 CVE-2025-3115 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0431\u0430\u0433\u0438 \u0432 Spotfire \u043e\u0442 Cloud Software Group. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0441 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c\u0441\u044f \u0431\u0435\u0437 \u0434\u043e\u043b\u0436\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0443\u044e \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u044e.\n\n\ud83d\udd35 CVE-2025-32754 \u0438 CVE-2025-32755 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Docker-\u043e\u0431\u0440\u0430\u0437\u0430\u0445 Jenkins, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0434\u043b\u044f SSH-\u0430\u0433\u0435\u043d\u0442\u043e\u0432. \u0421\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u044b\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c SSH-\u0445\u043e\u0441\u0442-\u043a\u043b\u044e\u0447\u0435\u0439, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a MITM-\u0430\u0442\u0430\u043a\u0430\u043c \u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432.\n\n\ud83d\udd35 CVE-2024-48887 \u2014 \u0441\u043d\u043e\u0432\u0430 \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0435\u043c\u0441\u044f \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Fortinet, \u0432 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 FortiSwitch. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0440\u0438 \u0441\u043c\u0435\u043d\u0435 \u043f\u0430\u0440\u043e\u043b\u044f \u0447\u0435\u0440\u0435\u0437 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 FortiSwitch. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 endpoint set_password \u0438 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0431\u0435\u0437 \u0432\u0445\u043e\u0434\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438 \u0431\u0435\u0437 \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u044e\u0437\u0435\u0440\u0430.\n\n\ud83d\udd35 CVE-2024-53197 \u0438 CVE-2024-53150 \u2014 \u0434\u0432\u0435 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 CISA. \u041e\u0431\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u044f\u0434\u0440\u043e\u043c Linux \u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:18.536378Z"}, {"uuid": "9ae502ae-8856-4055-ba4f-6224e4e390e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2748", "type": "seen", "source": "https://t.me/purp_sec/456", "content": "\u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-2748 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 CMS Kentico Xperience, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u044d\u0441\u043a\u0430\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c XSS-\u0430\u0442\u0430\u043a\u0443 \u0434\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 (RCE).\n\n\ud83d\udd35 CVE-2025-1449 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Verve Asset Manager. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0435 (shell) \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\ud83d\udd35 CVE-2025-22231 \u2014 \u0431\u0430\u0433 \u0432 VMware Aria Operations (\u0440\u0430\u043d\u0435\u0435 VMware vRealize Operations), \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\ud83d\udd35 CVE-2025-24085 \u2014 use after free (UAF) \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Apple, \u0432\u043a\u043b\u044e\u0447\u0430\u044f VisionOS, iOS, iPadOS, macOS, watchOS \u0438 tvOS. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u043a\u0440\u0430\u0436\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e.\n\n\ud83d\udd35 CVE-2025-30065 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 parquet-avro Apache Parquet, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043d\u0435\u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35 CVE-2024-13553 \u2014 \u0431\u0430\u0433 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 SMS Alert Order Notifications / WooCommerce \u0434\u043b\u044f WordPress. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0430\u043a\u043a\u0430\u0443\u043d\u0442, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 Host.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:20.367314Z"}, {"uuid": "5dd80183-d4f9-48a3-94ec-6c711c0e0d3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://t.me/purp_sec/432", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-2857 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0443 Mozilla \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Windows. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0434\u0435\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0440\u043e\u0432 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u0430\u043a \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435, \u0442\u0430\u043a \u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Firefox (ESR), \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439.\n\n\ud83d\udd35 CVE-2025-2783 \u2014 \u043e\u0447\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0439 \u0431\u0430\u0433, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0434\u0435\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0440\u043e\u0432 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Mojo \u043d\u0430 Windows. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0443 Chrome \u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e.\n\n\ud83d\udd35 CVE-2025-30091 \u2014 \u0431\u0430\u0433 \u0432 MoxieManager, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u0430\u043c\u0438 \u0438 \u043c\u0435\u0434\u0438\u0430, \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u0443\u0435\u043c\u043e\u043c \u0432 PHP \u0438 .NET-\u0441\u0440\u0435\u0434\u044b. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438.\n\n\ud83d\udd35 CVE-2025-26512 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 NetApp SnapCenter, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0430\u0432\u0430 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u0433\u0434\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0439 \u043f\u043b\u0430\u0433\u0438\u043d.\n\n\ud83d\udd35 \u041d\u0430\u0431\u043e\u0440 PoC \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c Ingress-NGINX \u0434\u043b\u044f Kubernetes, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u044f \u043f\u0438\u0441\u0430\u043b \u0440\u0430\u043d\u0435\u0435. \n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:20.742139Z"}, {"uuid": "27767391-8c67-4c2d-9c06-520c3b2638ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27594", "type": "seen", "source": "https://t.me/purp_sec/399", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435\n\n\ud83d\udd35 CVE-2024-11131 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 \u043a\u0430\u043c\u0435\u0440 Synology BC500, CC400W \u0438 TC500. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\ud83d\udd35 CVE-2025-2000 \u2014 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 Qiskit SDK, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u0434\u043b\u044f \u043a\u0432\u0430\u043d\u0442\u043e\u0432\u044b\u0445 \u0432\u044b\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u0439. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 QPY-\u0444\u0430\u0439\u043b\u043e\u0432 \u2014 \u043f\u0440\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0442\u0430\u043a\u0438\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u044e qiskit.qpy.load() \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\ud83d\udd35 CVE-2025-20014 \u0438 CVE-2025-20061 \u2014 \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 mySCADA myPRO. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u0435\u0442\u044f\u043c.\n\n\ud83d\udd35 CVE-2025-27593, CVE-2025-27594, CVE-2025-27595 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 SICK DL100, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0434\u0430\u0442\u0447\u0438\u043a\u0438 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043a\u0440\u0430\u0436\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439.\n\n\ud83d\udd35 CVE-2025-2263, CVE-2025-2264, CVE-2025-2284 \u2014 \u0431\u0430\u0433\u0438 \u0432 Sante PACS Server, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u043b\u0438 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\ud83d\udd35 CVE-2025-29774 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 xml-crypto, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 XML \u0447\u0435\u0440\u0435\u0437 \u0443\u0437\u043b\u044b SignedInfo. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0435 XML-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u0442\u0430\u043a, \u0447\u0442\u043e\u0431\u044b \u043e\u043d\u043e \u043f\u0440\u043e\u0445\u043e\u0434\u0438\u043b\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043f\u0438\u0441\u0438, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:21.434769Z"}, {"uuid": "b400afd2-25d8-4bfa-9574-2bf68845eb0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27888", "type": "seen", "source": "https://t.me/purp_sec/409", "content": "\u041f\u043e\u0434\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-27888 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Apache Druid. \u041e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0442\u0438\u043f\u0430 SSRF (Server-Side Request Forgery) \u0438 XSS (Cross-Site Scripting).\n\n\ud83d\udd35 CVE-2025-2538 \u2014 \u0431\u0430\u0433 \u0432 ArcGIS Enterprise, \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0432\u0435\u0434\u0443\u0449\u0438\u0445 \u0433\u0435\u043e\u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439. \u0421\u0432\u044f\u0437\u0430\u043d \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\ud83d\udd35 CVE-2025-1758 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Kemp LoadMaster (\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430). \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u0432\u044b\u0441\u0448\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\ud83d\udd35 CVE-2025-29783 \u2014 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 vLLM, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0435\u0435 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0435\u0439 \u0441 Mooncake. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u043e ZMQ/TCP.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:21.471542Z"}, {"uuid": "3ca570b9-5934-4b72-ab44-1339f34a63c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27505", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-16)", "content": "", "creation_timestamp": "2026-08-17T10:15:06.853202Z"}, {"uuid": "c157c805-f4ae-4b11-982a-68d7f0cf5477", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27595", "type": "seen", "source": "https://t.me/purp_sec/399", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435\n\n\ud83d\udd35 CVE-2024-11131 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 \u043a\u0430\u043c\u0435\u0440 Synology BC500, CC400W \u0438 TC500. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\ud83d\udd35 CVE-2025-2000 \u2014 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 Qiskit SDK, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u0434\u043b\u044f \u043a\u0432\u0430\u043d\u0442\u043e\u0432\u044b\u0445 \u0432\u044b\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u0439. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 QPY-\u0444\u0430\u0439\u043b\u043e\u0432 \u2014 \u043f\u0440\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0442\u0430\u043a\u0438\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u044e qiskit.qpy.load() \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\ud83d\udd35 CVE-2025-20014 \u0438 CVE-2025-20061 \u2014 \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 mySCADA myPRO. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u0435\u0442\u044f\u043c.\n\n\ud83d\udd35 CVE-2025-27593, CVE-2025-27594, CVE-2025-27595 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 SICK DL100, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0434\u0430\u0442\u0447\u0438\u043a\u0438 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043a\u0440\u0430\u0436\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439.\n\n\ud83d\udd35 CVE-2025-2263, CVE-2025-2264, CVE-2025-2284 \u2014 \u0431\u0430\u0433\u0438 \u0432 Sante PACS Server, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u043b\u0438 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\ud83d\udd35 CVE-2025-29774 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 xml-crypto, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 XML \u0447\u0435\u0440\u0435\u0437 \u0443\u0437\u043b\u044b SignedInfo. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0435 XML-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u0442\u0430\u043a, \u0447\u0442\u043e\u0431\u044b \u043e\u043d\u043e \u043f\u0440\u043e\u0445\u043e\u0434\u0438\u043b\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043f\u0438\u0441\u0438, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:21.549790Z"}, {"uuid": "6154048b-eeeb-4446-abd6-dc23457a8f60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27593", "type": "seen", "source": "https://t.me/purp_sec/399", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435\n\n\ud83d\udd35 CVE-2024-11131 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 \u043a\u0430\u043c\u0435\u0440 Synology BC500, CC400W \u0438 TC500. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\ud83d\udd35 CVE-2025-2000 \u2014 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 Qiskit SDK, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u0434\u043b\u044f \u043a\u0432\u0430\u043d\u0442\u043e\u0432\u044b\u0445 \u0432\u044b\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u0439. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 QPY-\u0444\u0430\u0439\u043b\u043e\u0432 \u2014 \u043f\u0440\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0442\u0430\u043a\u0438\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u044e qiskit.qpy.load() \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\ud83d\udd35 CVE-2025-20014 \u0438 CVE-2025-20061 \u2014 \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 mySCADA myPRO. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u0435\u0442\u044f\u043c.\n\n\ud83d\udd35 CVE-2025-27593, CVE-2025-27594, CVE-2025-27595 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 SICK DL100, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0434\u0430\u0442\u0447\u0438\u043a\u0438 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043a\u0440\u0430\u0436\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439.\n\n\ud83d\udd35 CVE-2025-2263, CVE-2025-2264, CVE-2025-2284 \u2014 \u0431\u0430\u0433\u0438 \u0432 Sante PACS Server, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u043b\u0438 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\ud83d\udd35 CVE-2025-29774 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 xml-crypto, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 XML \u0447\u0435\u0440\u0435\u0437 \u0443\u0437\u043b\u044b SignedInfo. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0435 XML-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u0442\u0430\u043a, \u0447\u0442\u043e\u0431\u044b \u043e\u043d\u043e \u043f\u0440\u043e\u0445\u043e\u0434\u0438\u043b\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043f\u0438\u0441\u0438, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:21.776735Z"}, {"uuid": "5a960955-7951-4c35-9810-ac1002ee9989", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "seen", "source": "https://t.me/purp_sec/395", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435\n\n\ud83d\udd35 CVE-2025-29891 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Apache Camel, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0438 \u043c\u0435\u043d\u044f\u0442\u044c \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Camel, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a camel-bean \u0438 camel-exec.\n\n\ud83d\udd35 CVE-2025-27591 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 openSUSE, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043b\u043e\u0433-\u0444\u0430\u0439\u043b\u0430\u043c\u0438, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u044f \u0443\u0433\u0440\u043e\u0437\u0443 \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u043f\u043e\u0434\u043c\u0435\u043d\u044b \u0434\u0430\u043d\u043d\u044b\u0445. \u041b\u043e\u0433-\u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u044f /var/log/below \u0438\u043c\u0435\u0435\u0442 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043c\u0435\u043d\u044f\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u043b\u043e\u0433\u043e\u0432 \u0438\u043b\u0438 \u0434\u0430\u0436\u0435 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0438\u043c\u043b\u0438\u043d\u043a\u0438, \u0432\u0435\u0434\u0443\u0449\u0438\u0435 \u043a \u0432\u0430\u0436\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c.\n\n\ud83d\udd35 CVE-2024-27564 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ChatGPT, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u0442\u0438\u043f\u0430 SSRF (Server-Side Request Forgery). \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 URL \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f. \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0431\u0430\u0433 \u0438\u0437\u0432\u0435\u0441\u0442\u0435\u043d \u0435\u0449\u0435 \u0441 2023 \u0433\u043e\u0434\u0430, \u043e\u043d \u0432\u0441\u0435 \u0435\u0449\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u0435\u043d. \u0422\u043e\u043b\u044c\u043a\u043e \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044e\u044e \u043d\u0435\u0434\u0435\u043b\u044e \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u0431\u043e\u043b\u0435\u0435 10 \u0442\u044b\u0441\u044f\u0447 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0430\u0442\u0430\u043a \u0441 \u043e\u0434\u043d\u043e\u0433\u043e IP-\u0430\u0434\u0440\u0435\u0441\u0430.\n\n\ud83d\udd35 CVE-2025-25599 \u2014 \u0431\u0430\u0433 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u043e\u043c Bolt CMS, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432. \u0417\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432, \u0438\u0437-\u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0447\u0435\u0440\u0435\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0430\u0432\u0430\u0442\u0430\u0440\u0430 \u0438\u0437 URL.\n\n\ud83d\udd35 CVE-2024-28000 \u2014 \u0430\u043d\u0430\u043b\u0438\u0437 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 LiteSpeed Cache. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u0430\u0439\u0442\u0430.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:21.912324Z"}, {"uuid": "e99f1433-bbac-4e92-915a-8197f6837100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2749", "type": "seen", "source": "https://t.me/VulnerabilityNews/42060", "content": "CISA Adds Eight Known Exploited Vulnerabilities to Catalog\n\nCISA has added eight new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\u00a0\nCVE-2023-27351 PaperCut NG/MF Improper Authentication Vulnerability\nCVE-2024-27199 JetBrains TeamCity Relative Path Traversal Vulnerability\nCVE-2025-2749 Kentico Xperience Path Traversal Vulnerability\nCVE-2025-32975 Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability\nCVE-2025-48700 Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability\nCVE-2026-20122 Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability\nCVE-2026-20128 Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability\nCVE-2026-20133 Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability\nThese types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.\u00a0\nBinding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.\u00a0\nAlthough BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of KEV Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nhttps://www.cisa.gov/news-events/alerts/2026/04/20/cisa-adds-eight-known-exploited-vulnerabilities-catalog", "creation_timestamp": "2026-08-18T19:00:04.479505Z"}, {"uuid": "25bd4edc-a2d0-4271-b46f-8af0a1c00622", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "seen", "source": "Telegram/sjJtFOPrNVJGH8Bcyfvt2TqqQ7q8xvrKLNMkHdu0Vl11BjU", "content": "", "creation_timestamp": "2026-08-05T21:00:04.040307Z"}, {"uuid": "de3876ed-644a-4468-8909-031eee3b78ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-08)", "content": "", "creation_timestamp": "2026-06-08T00:00:00.000000Z"}, {"uuid": "4224b16d-8d03-4f74-a355-238a6aee4bae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-08)", "content": "", "creation_timestamp": "2026-06-08T00:00:00.000000Z"}, {"uuid": "2c12daff-196e-41be-a148-dc4064e4e8ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-09)", "content": "", "creation_timestamp": "2026-06-09T00:00:00.000000Z"}, {"uuid": "59358ad4-f0fa-4bc3-8379-5a4c00852bb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "published-proof-of-concept", "source": "Telegram/sjJtFOPrNVJGH8Bcyfvt2TqqQ7q8xvrKLNMkHdu0Vl11BjU", "content": "", "creation_timestamp": "2026-08-06T00:00:08.910176Z"}, {"uuid": "9eee9845-8473-499c-8d37-a2e8dbcaac24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27505", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-09)", "content": "", "creation_timestamp": "2026-06-09T00:00:00.000000Z"}, {"uuid": "5ceac3b3-e85f-4dae-9e35-79cd7d9c8e16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-10)", "content": "", "creation_timestamp": "2026-06-10T00:00:00.000000Z"}, {"uuid": "674fdaf5-699f-4392-8c02-9416a08953fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27505", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-10)", "content": "", "creation_timestamp": "2026-06-10T00:00:00.000000Z"}, {"uuid": "a3b33051-6ce4-429f-9848-886add9d6226", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-12)", "content": "", "creation_timestamp": "2026-06-12T00:00:00.000000Z"}, {"uuid": "11e6d904-fcf9-433d-8908-6e9d46ecef1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-13)", "content": "", "creation_timestamp": "2026-06-13T00:00:00.000000Z"}, {"uuid": "3bb60a27-e91a-493c-bc5e-845eab2111c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-14)", "content": "", "creation_timestamp": "2026-06-14T00:00:00.000000Z"}, {"uuid": "8ab170d7-5497-4339-93f0-660a5c2795c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27472", "type": "seen", "source": "https://infosec.exchange/users/wdormann/statuses/116755475429413960", "content": "I just realized that I'm personally \"credited\" in April's Microsoft Patch Tuesday with a CVE-less \"Defense-in-depth\" update.\nThe vulnerability?CAB files downloaded from the internet do not write the MotW for files extracted from them.\nI reported this to MSRC, and after refusing to generate a screen recording of the exploit (I mean, really?!), they finally acknowledged the problem. However, they went radio silent after that.\nMark of the Web (MotW) evasions have gotten CVEs in the past. If we look in the last 2 years we have: CVE-2024-38213, CVE-2024-38217, CVE-2024-43487, CVE-2025-24061, CVE-2025-27472, CVE-2025-47160, CVE-2025-49740, CVE-2026-20824, CVE-2026-32225, CVE-2026-45595\nSo, why does \"Windows doesn't write MotW for extracted CAB file contents\" get a CVE?  Well, Microsoft is a CNA.  So for the most part they can invent any rules that they'd like to play by.  It could be as simple as \"We're not particularly fond of you\", and as a result, we have a vulnerability with no ID to track it.\nHere's a screen recording of a VM with March's Patch Tuesday level of updates.  When you extract a file from a CAB file, no MotW is written.  And as such, we get no protections that leverage the presence of MotW, such as SmartScreen, Smart Application Control, Office Protected View.  In this case, we have a .URL file in a CAB.  Double clicking on it results in a remote EXE running on your computer with no warning or other prompts.  But, I suppose we all know that URL files are evil and have them blocked.", "creation_timestamp": "2026-06-15T18:12:54.837984Z"}, {"uuid": "f1b4467f-cf72-4d14-bdb0-7216a7a7c748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-15)", "content": "", "creation_timestamp": "2026-06-15T00:00:00.000000Z"}, {"uuid": "172546a7-2b9a-4e27-a8fc-2a7b02555aa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27222", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-15)", "content": "", "creation_timestamp": "2026-06-15T00:00:00.000000Z"}, {"uuid": "264519a7-76ad-4501-a21f-355c1e6cb660", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-16)", "content": "", "creation_timestamp": "2026-06-16T00:00:00.000000Z"}, {"uuid": "46ee393a-43f2-44ec-9915-740aa9d72109", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27505", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-16)", "content": "", "creation_timestamp": "2026-06-16T00:00:00.000000Z"}, {"uuid": "0e67bde9-e5a6-437d-908e-2e30100b61c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-17)", "content": "", "creation_timestamp": "2026-06-17T00:00:00.000000Z"}, {"uuid": "8103d7b8-846c-469f-a61a-275d75334ad3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://t.me/purp_sec/1070", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE\u20112025\u20115419 \u2014 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u0441 JavaScript PoC \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Chrome. \u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u0437\u0432\u0430\u0442\u044c heap corruption \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 HTML\u2011\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b, \u0447\u0442\u043e \u0432\u0435\u0434\u0435\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 renderer\u2011\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430.\n\n\ud83d\udd35 CVE-2025-27363 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Integer Overflow \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 FreeType (\u0432\u0435\u0440\u0441\u0438\u0438 \u2264\u202f2.13.0), \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f Chrome. \u041f\u0440\u0438 \u0440\u0430\u0437\u0431\u043e\u0440\u0435 \u0441\u043b\u043e\u0436\u043d\u044b\u0445 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u0448\u0440\u0438\u0444\u0442\u043e\u0432 TrueType GX \u0438 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0448\u0440\u0438\u0444\u0442\u043e\u0432 \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0437\u043d\u0438\u043a\u043d\u0443\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u0438\u044e \u0441\u043b\u0438\u0448\u043a\u043e\u043c \u043c\u0430\u043b\u0435\u043d\u044c\u043a\u043e\u0433\u043e \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432\u043d\u0435 \u0435\u0433\u043e \u0433\u0440\u0430\u043d\u0438\u0446. \u041a\u0430\u043a \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442 \u2014 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\ud83d\udd35 CVE\u20112025\u20116507 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u043c\u0430\u0448\u0438\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u0443\u0447\u0435\u043d\u0438\u044f H2O\u20113, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0434\u0430\u043d\u043d\u044b\u0445. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0444\u0438\u043b\u044c\u0442\u0440\u044b \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0439, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b JDBC\u2011\u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432, \u043f\u0440\u043e\u0441\u0442\u043e \u0432\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u043f\u0440\u043e\u0431\u0435\u043b\u044b \u043c\u0435\u0436\u0434\u0443 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u043c\u0438. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0447\u0438\u0442\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\ud83d\udd35 CVE-2025-54857 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0430 OS-\u043a\u043e\u043c\u0430\u043d\u0434\u043d\u0430\u044f \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f \u0432 \u0440\u043e\u0443\u0442\u0435\u0440\u0435 SkyBridge BASIC MB-A130. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 root-\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c. \u0412\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 ICS/OT, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443.\n\n\ud83d\udd35 CVE-2025-9791 \u2014 stack-based buffer overflow \u0432 \u0440\u043e\u0443\u0442\u0435\u0440\u0435 Tenda\u202fAC20, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 wanMTU \u0432 \u0440\u0435\u0441\u0443\u0440\u0441\u0435 /goform/fromAdvSetMacMtuWan. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\ud83d\udd35 CVE-2025-9812, CVE-2025-9813 \u2014 \u0435\u0449\u0435 \u0434\u0432\u0430 \u0431\u0430\u0433\u0430 \u0432 \u0440\u043e\u0443\u0442\u0435\u0440\u0430\u0445 Tenda. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0447\u0435\u0440\u0435\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 formSetSambaConf \u0438 formexeCommand. \u041a\u0430\u043a \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442 \u2014 \u043a\u0440\u0430\u0436\u0430 \u0434\u0430\u043d\u043d\u044b\u0445, RCE \u0438 DoS.\n\n#CVE_\u0434\u043d\u044f #blue_team", "creation_timestamp": "2026-08-15T00:00:14.724973Z"}, {"uuid": "16577e48-4642-419b-a57e-be561af14656", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-18)", "content": "", "creation_timestamp": "2026-06-18T00:00:00.000000Z"}, {"uuid": "99a6b8cf-8a1d-45a6-942c-4593d874ba57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27920", "type": "seen", "source": "https://t.me/purp_sec/623", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-27920 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439 \u0432 Output Messenger. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \"../\" \u0432 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438.\n\n\ud83d\udd35 CVE-2025-4647 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 Centreon. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438, \u043f\u043e\u0434\u043c\u0435\u043d\u044f\u044f \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0433\u043e SVG-\u0444\u0430\u0439\u043b\u0430, \u0430 \u043f\u043e\u0441\u043b\u0435 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u0441\u044f \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b.\n\n\ud83d\udd35 CVE-2025-42999 \u2014 \u0431\u0430\u0433 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Metadata Uploader \u0432 SAP NetWeaver Visual Composer. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043f\u043e\u043b\u0443\u0447\u0438\u0432 \u043d\u0443\u0436\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\ud83d\udd35 CVE-2025-4632 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Samsung MagicINFO 9, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435\u043c \u043f\u0443\u0442\u0438 \u043a \u0444\u0430\u0439\u043b\u0430\u043c. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\ud83d\udd35 CVE-2025-22249 \u2014 DOM-based XSS \u0432 VMware Aria Automation. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0445\u0438\u0442\u0438\u0442\u044c \u0442\u043e\u043a\u0435\u043d\u044b \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0443 \u0432\u043e\u0448\u0435\u0434\u0448\u0438\u0445 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u043e\u0431\u0443\u0434\u0438\u0432 \u0438\u0445 \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043f\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0435. \u041f\u043e\u0441\u043b\u0435 \u043a\u043b\u0438\u043a\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435, \u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0441\u0441\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:07.363740Z"}, {"uuid": "ccf6e68b-4928-428d-8081-b1427bcea655", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "published-proof-of-concept", "source": "https://t.me/purp_sec/714", "content": "\u041f\u043e\u043c\u043d\u0438\u0442\u0435 \u043c\u0430\u0440\u0442\u043e\u0432\u0441\u043a\u0438\u0439 \u0445\u0430\u0439\u043f \u0432\u043e\u043a\u0440\u0443\u0433 \u043c\u0438\u043a\u0440\u043e\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 ESP32 \u043e\u0442 Espressif? \u0427\u0442\u043e \u0432 \u043d\u0435\u043c \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u043d\u0435\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b. \u0422\u0430\u043c \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u0430 \u043e\u0447\u0435\u043d\u044c \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u0430\u044f \u0438\u0441\u0442\u043e\u0440\u0438\u044f, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u043c\u0438 \u0444\u043e\u0440\u043c\u0443\u043b\u0438\u0440\u043e\u0432\u043a\u0430\u043c\u0438 \u0432 \u043f\u0440\u0435\u0441\u0441-\u0440\u0435\u043b\u0438\u0437\u0435. \u041f\u0430\u0440\u0443 \u043d\u0435\u0434\u0435\u043b\u044c \u043d\u0430\u0437\u0430\u0434 \u043a\u043e\u043b\u043b\u0435\u0433\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u044d\u0442\u043e\u0439 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0438 \u043d\u0430 \u0425\u0430\u0431\u0440\u0435. \u042f \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u043b \u0438 \u0432\u043e\u043e\u0431\u0449\u0435 \u043d\u0435 \u0443\u0434\u0438\u0432\u0438\u043b\u0441\u044f \u0442\u043e\u043c\u0443, \u0447\u0442\u043e \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0432\u044b\u044f\u0441\u043d\u0438\u0442\u044c.\n\n\u041a\u043e\u0433\u0434\u0430 @Lobrigate \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u043b \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u043e\u043d \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0444\u0440\u0430\u0437\u0443 \u00ab\u043d\u0435\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b\u00bb \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c. \u041e\u0434\u043d\u0430\u043a\u043e \u0432 \u043f\u0440\u0435\u0441\u0441-\u0440\u0435\u043b\u0438\u0437\u0435 \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Tarlogic, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u044d\u0442\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u044e\u0437\u0430\u043b\u0438 \u0442\u0435\u0440\u043c\u0438\u043d \u00ab\u0431\u044d\u043a\u0434\u043e\u0440\u00bb. \u0424\u043e\u0440\u043c\u0443\u043b\u0438\u0440\u043e\u0432\u043a\u0443 \u0432\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u043f\u0440\u0430\u0432\u0438\u043b\u0438, \u0437\u0430\u043c\u0435\u043d\u0438\u0432 \u00abbackdoor\u00bb \u043d\u0430 \u00abhidden feature\u00bb, \u043d\u043e \u0431\u044b\u043b\u043e \u0443\u0436\u0435 \u043f\u043e\u0437\u0434\u043d\u043e. \u041f\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0443 \u0431\u044b\u0441\u0442\u0440\u043e \u0440\u0430\u0437\u043d\u0435\u0441\u043b\u0438, \u0447\u0442\u043e ESP32 \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0441 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u043c. \u041f\u043e \u0444\u0430\u043a\u0442\u0443, \u043a\u043e\u043d\u0435\u0447\u043d\u043e \u0436\u0435, \u043d\u0438\u0447\u0435\u0433\u043e \u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0433\u043e \u0442\u0430\u043c \u043d\u0435 \u0431\u044b\u043b\u043e.\n\n\u041d\u0435\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 HCI-\u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 ESP32 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u044b CVE-2025-27840. \u041e\u043d\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u0443\u044e ESP32, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0443\u044e \u043a\u0430\u043a \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0445\u043e\u0441\u0442\u0430. \u0427\u0442\u043e\u0431\u044b \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u044d\u0442\u0438\u043c\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u0430\u043c\u0438, \u0432\u0430\u043c \u043d\u0430\u0434\u043e \u0438\u043c\u0435\u0442\u044c \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a UART/USB \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430\u043c \u043f\u043b\u0430\u0442\u044b \u0438\u043b\u0438 root-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0441\u0438. \n\n\u0413\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e \u0440\u0435\u0431\u044f\u0442\u0430 \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0447\u0435\u0433\u043e-\u0442\u043e \u0444\u0435\u043d\u043e\u043c\u0435\u043d\u0430\u043b\u044c\u043d\u043e \u043d\u043e\u0432\u043e\u0433\u043e \u0438\u043b\u0438 \u043e\u0441\u043e\u0431\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u0433\u043e. \u0414\u0430, \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u0430\u044f \u043d\u0430\u0445\u043e\u0434\u043a\u0430, \u043d\u043e \u044d\u0442\u043e \u043d\u0435 \u043f\u0440\u044f\u043c\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0438\u0437\u043a\u043e\u0443\u0440\u043e\u0432\u043d\u0435\u0432\u044b\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c \u0438 \u043d\u0435 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u0430\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0435\u0432 ESP32. \ud83d\ude02\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0432 \u043e\u0434\u043d\u043e\u043c \u0441\u043b\u043e\u0432\u0435 \u043f\u043e\u0434\u043d\u044f\u043b\u0430 \u043d\u0430 \u0443\u0448\u0438 \u0432\u0441\u0435\u0445, \u043a\u0442\u043e \u043d\u0435 \u0441\u0442\u0430\u043b \u0434\u043e\u043a\u0430\u043f\u044b\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u0435\u0440\u0432\u043e\u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430. \u0412\u043f\u0440\u043e\u0447\u0435\u043c, \u043a\u0430\u043a \u0438 \u0432\u0441\u0435\u0433\u0434\u0430. \u0414\u043e\u043a\u0430\u043f\u044b\u0432\u0430\u0439\u0442\u0435\u0441\u044c \u0434\u043e \u0441\u0443\u0442\u0438, \u043d\u0435 \u0432\u0435\u0434\u0438\u0442\u0435\u0441\u044c \u043d\u0430 \u043f\u0430\u043d\u0438\u043a\u0443 \u0438 \u0434\u0443\u043c\u0430\u0439\u0442\u0435 \u0441\u0432\u043e\u0435\u0439 \u0433\u043e\u043b\u043e\u0432\u043e\u0439.\n\n\ud83d\udd12 \u041a\u0430\u043a \u0437\u0430 \u043a\u043e\u0440\u043e\u0442\u043a\u0438\u0439 \u0441\u0440\u043e\u043a \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u0439\u0442\u0438 \u0438 \u043f\u043e\u0442\u0435\u0440\u044f\u0442\u044c \u0431\u044d\u043a\u0434\u043e\u0440 \u0432 ESP32, \u0447\u0438\u0442\u0430\u0439\u0442\u0435 \u0432 \u0441\u0442\u0430\u0442\u044c\u0435 \u043d\u0430 \u0425\u0430\u0431\u0440\u0435.\n\n#red_team #\u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0435", "creation_timestamp": "2026-08-15T00:00:07.982011Z"}, {"uuid": "aadcd726-a43b-4b40-8c75-60e9c474d778", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-20)", "content": "", "creation_timestamp": "2026-06-20T00:00:00.000000Z"}, {"uuid": "1cf43788-0595-4f6a-91e4-991797cd7b72", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27222", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8408bfe7-f730-4ef5-8a73-407bafd43a8c", "content": "", "creation_timestamp": "2026-06-19T12:45:06.140771Z"}, {"uuid": "a0c50be3-f146-4e80-8c73-47e1c6f3db1e", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27915", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/dbc122bb-7725-43ec-a15f-7a840fe43a02", "content": "", "creation_timestamp": "2026-06-19T12:45:24.578141Z"}, {"uuid": "be5877f3-64cd-4e1c-9d82-342418831fb0", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2749", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/05f8d02e-3bc7-47db-8afd-fd0f119b866d", "content": "", "creation_timestamp": "2026-06-19T12:45:13.379569Z"}, {"uuid": "6886cd9f-eafa-48e1-a9cc-38c590fa2611", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2746", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8b395fcb-8213-462b-9e51-d69d364d2329", "content": "", "creation_timestamp": "2026-06-19T12:45:23.621721Z"}, {"uuid": "e466e33e-a63f-4eb2-bbbd-29042830a8ae", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2747", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0692d1da-f584-47d0-a25b-17f110f730b2", "content": "", "creation_timestamp": "2026-06-19T12:45:23.556604Z"}, {"uuid": "48747b91-b946-4cee-9d2f-b846601d548c", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ce85893c-b472-4657-b378-ff2b147f64fa", "content": "", "creation_timestamp": "2026-06-19T12:45:28.714963Z"}, {"uuid": "5575c030-a1e4-435b-bb78-96124ee781a9", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27112", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ddc49464-45c7-404f-a13e-cdb57c9ec28b", "content": "", "creation_timestamp": "2026-06-19T12:46:07.969817Z"}, {"uuid": "36704fe4-e4a2-4903-9b67-31465cbed772", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4a72afed-9641-443e-b90d-f4f041e5487a", "content": "", "creation_timestamp": "2026-06-19T12:45:28.633582Z"}, {"uuid": "61254144-1c42-4aca-86cd-da736c5fadc0", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27920", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7508497d-ee1a-46e9-ba23-cfadbe9be8da", "content": "", "creation_timestamp": "2026-06-19T12:46:15.598109Z"}, {"uuid": "8693cb8f-7f64-488e-80cb-7b2b13419ba5", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27038", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/24ae7a1d-2d40-4ae8-afdc-f0bb044b7049", "content": "", "creation_timestamp": "2026-06-19T12:45:30.936292Z"}, {"uuid": "77f00924-4445-4a00-af0f-7a00aec8a4ee", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27505", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/86176cf8-6d03-4728-af81-dae5d6f18c04", "content": "", "creation_timestamp": "2026-06-19T12:45:46.062352Z"}, {"uuid": "1b7caf96-ae6f-4563-ab93-18c78e2ee93b", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ed997a2c-7d6e-4774-bcd6-1142033bd659", "content": "", "creation_timestamp": "2026-06-19T12:46:16.276429Z"}, {"uuid": "a0166026-b4ef-4317-a90e-e2f9550da7d6", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2777", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/164e199f-51c2-4892-a5a9-20532dbc00e0", "content": "", "creation_timestamp": "2026-06-19T12:46:08.105600Z"}, {"uuid": "36ace02e-02c5-4560-a96f-549cb7f2f86c", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d397b9b0-dfbd-4ae4-a07b-7efaf97edac7", "content": "", "creation_timestamp": "2026-06-19T12:46:23.571721Z"}, {"uuid": "9d3a686d-e4f7-4540-b561-773c75d62fd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27388", "type": "seen", "source": "https://t.me/purp_sec/1034", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435\n\n\ud83d\udd35 CVE\u20112025\u201125256 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c OS Command Injection (CWE\u201178) \u0432 FortiSIEM. \u0423\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 CLI\u2011\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0411\u0430\u0433 \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f in-the-wild.\n\n\ud83d\udd35 CVE-2025-27388 \u2014 \u0431\u0430\u0433 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 OPPO Health. \u041f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 WebView \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u0443\u044e \u0432\u043d\u0435\u0448\u043d\u044e\u044e \u0441\u0441\u044b\u043b\u043a\u0443, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c JavaScript \u0438 \u043f\u043e\u0445\u0438\u0442\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0442\u043e\u043a\u0435\u043d\u044b. \u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\ud83d\udd35 CVE-2025-7734 \u2014 Stored XSS \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 blob viewer \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b GitLab CE/EE. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 \u0432 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0430\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b. \u041f\u043e\u0441\u043b\u0435 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430 \u0444\u0430\u0439\u043b\u0430 \u0434\u0440\u0443\u0433\u0438\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c, \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0441\u043a\u0440\u0438\u043f\u0442, \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0441\u0435\u0441\u0441\u0438\u0438 \u0438\u043b\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u043e\u0432\u0435\u0440\u0448\u0430\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0436\u0435\u0440\u0442\u0432\u044b.\n\n\ud83d\udd35 CVE-2025-6186 \u2014 \u0435\u0449\u0435 \u043e\u0434\u0438\u043d Stored XSS \u0431\u0430\u0433 \u0432 GitLab CE/EE, \u043d\u043e \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Work Item. \u0410\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043c\u043e\u0436\u0435\u0442 \u0432\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0432 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u0437\u0430\u0434\u0430\u0447\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 HTML/JavaScript, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u043d\u0438\u0442\u0441\u044f \u0443 \u043b\u044e\u0431\u043e\u0433\u043e, \u043a\u0442\u043e \u043e\u0442\u043a\u0440\u043e\u0435\u0442 \u044d\u0442\u0443 \u0437\u0430\u0434\u0430\u0447\u0443 \u2014 \u0432\u043f\u043b\u043e\u0442\u044c \u0434\u043e \u043a\u0440\u0430\u0436\u0438 \u0441\u0435\u0441\u0441\u0438\u0439 \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438.\n\n\ud83d\udd35 CVE-2025-8940 \u2014 buffer overflow (STACK-based) \u0432 \u0440\u043e\u0443\u0442\u0435\u0440\u0435 Tenda AC20. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 strcpy \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 time \u0432 \u043f\u0443\u0442\u0438 /goform/saveParentControlInfo. \u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441 time \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0431\u0443\u0444\u0435\u0440\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0446\u0435\u043b\u044f\u0445.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:14.369116Z"}, {"uuid": "6c86f217-a629-4731-a255-4e4c16b7b445", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-21)", "content": "", "creation_timestamp": "2026-06-21T00:00:00.000000Z"}, {"uuid": "b3285cd0-01fc-4d4a-9aae-1599b9957945", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27915", "type": "seen", "source": "https://t.me/purp_sec/1184", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-61882 \u2014 \u0431\u0430\u0433 \u0432 Oracle E-Business Suite. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 servlet \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 XML, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442 \u0441\u0435\u0440\u0432\u0435\u0440 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c\u0441\u044f \u043f\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u043c\u0443 URL (SSRF). \u0417\u0430\u0442\u0435\u043c \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 return_url (CRLF-\u0432\u0441\u0442\u0430\u0432\u043a\u0430) \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u044c \u0432\u043d\u0435\u0448\u043d\u0438\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u0432 POST \u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0435 TCP-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435, \u0434\u043e\u0436\u0430\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0438\u0441\u0443 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442 \u043d\u0435\u0436\u0435\u043b\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438\u043b\u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0441\u0442 \u043f\u043e\u043b\u0435\u0437\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443.\n\n\ud83d\udd35 CVE-2025-20362 \u2014 \u043e\u0431\u0445\u043e\u0434 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 VPN \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Cisco Secure Firewall ASA/FTD. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 HTTP(S)-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a URL-\u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0430\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e\u043b\u0436\u043d\u044b \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u043e\u0431\u0445\u043e\u0434\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u0412 \u0441\u0432\u044f\u0437\u043a\u0435 \u0441 CVE-2025-20333 \u0438 CVE-2025-20363 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a RCE \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u0443\u0436\u0435 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u044b \u0441\u043b\u0443\u0447\u0430\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 in wild.\n\n\ud83d\udd35 CVE-2025-27915 \u2014 XSS-\u0431\u0430\u0433 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 iCalendar (.ICS, \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 Zimbra), \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 .ics-\u0432\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0441 \u043e\u0431\u0444\u0443\u0441\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c JavaScript-\u043a\u043e\u0434\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u043b\u0441\u044f \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0441\u0435\u0441\u0441\u0438\u0438 \u0436\u0435\u0440\u0442\u0432\u044b \u043f\u0440\u0438 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435 \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043a\u0430\u043b\u0435\u043d\u0434\u0430\u0440\u044f. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u043a\u0440\u0430\u0441\u0442\u044c \u0441\u0435\u0441\u0441\u0438\u043e\u043d\u043d\u044b\u0435 \u0442\u043e\u043a\u0435\u043d\u044b \u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043f\u0435\u0440\u0435\u0441\u044b\u043b\u043a\u0438 \u0432 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c \u044f\u0449\u0438\u043a\u0435 \u0438 \u043c\u0430\u0441\u0441\u043e\u0432\u043e \u043a\u0440\u0430\u0441\u0442\u044c \u043f\u0438\u0441\u044c\u043c\u0430 \u0431\u0435\u0437 \u043f\u0440\u044f\u043c\u043e\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430 \u043f\u0430\u0440\u043e\u043b\u044f.\n\n\ud83d\udd35 CISA \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u0441\u0435\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 in wild \u2014 CVE-2010-3765 (RCE, Mozilla), CVE-2010-3962 (\u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438, Internet Explorer), CVE-2011-3402 (RCE \u0432 Windows), CVE-2013-3918 (\u0432\u044b\u0445\u043e\u0434 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u043f\u0430\u043c\u044f\u0442\u0438, Windows), CVE-2021-22555 (\u0432\u044b\u0445\u043e\u0434 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u043a\u0443\u0447\u0438, Linux), CVE-2021-43226 (\u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, Windows), \u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0436\u0435 \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u0430\u044f \u0440\u0430\u043d\u0435\u0435 CVE-2025-61882.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:15.807785Z"}, {"uuid": "c9fbcbaa-2d08-4d58-ac71-bdcb67c07be7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://t.me/purp_sec/1347", "content": "\u041a\u0441\u0442\u0430\u0442\u0438, \u0432 \u043f\u0440\u043e\u0448\u043b\u044b\u0439 \u0440\u0430\u0437 \u0440\u0435\u0431\u044f\u0442\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0437\u0435\u0440\u043e\u0434\u0435\u0439\u043a\u0443 CVE-2025-2783. \u0412 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0440\u0435\u0448\u0438\u043b\u0438 \u043d\u0435 \u0437\u0430\u043c\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u0441\u043e\u0432\u0441\u0435\u043c, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0435\u0441\u043b\u0438 \u043d\u0435 \u0441\u0447\u0438\u0442\u0430\u0442\u044c \u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u044b\u0445 \u0441\u0441\u044b\u043b\u043e\u043a \u043d\u0430 \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u043d\u0438\u0435 \u0430\u0440\u0445\u0438\u0432\u0430. \u0412 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u043e\u043c \u0432\u0441\u0435 \u0442\u043e \u0436\u0435 \u0441\u0430\u043c\u043e\u0435, \u0447\u0442\u043e \u0438 \u0432 \u043f\u0435\u0440\u0432\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438. \n\n#red_team", "creation_timestamp": "2026-08-15T00:00:35.904463Z"}, {"uuid": "876642c6-c115-4ffb-be42-ec25f19be11e", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27222", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3b3f3882-95aa-4a93-addf-ba63755a1cb1", "content": "", "creation_timestamp": "2026-06-23T14:02:56.195427Z"}, {"uuid": "146a99a1-e977-4102-832e-87a18421e63f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://t.me/purp_sec/1236", "content": "\u26a0\ufe0f \u0425\u0430\u043a\u0435\u0440\u044b \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0438 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0435 \u041f\u041e Dante \u0447\u0435\u0440\u0435\u0437 \u0444\u0435\u0439\u043a\u043e\u0432\u044b\u0435 \u043f\u0440\u0438\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044f \u043d\u0430 \u043d\u0430\u0443\u0447\u043d\u043e-\u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043d\u044b\u0439 \u0444\u043e\u0440\u0443\u043c \u00ab\u041f\u0440\u0438\u043c\u0430\u043a\u043e\u0432\u0441\u043a\u0438\u0435 \u0447\u0442\u0435\u043d\u0438\u044f\u00bb\n\n\u00ab\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u044f \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e\u00bb \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0438 \u043e\u043f\u0438\u0441\u0430\u043b\u0430 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e \u00ab\u0424\u043e\u0440\u0443\u043c\u043d\u044b\u0439 \u0442\u0440\u043e\u043b\u043b\u044c\u00bb (APT ForumTroll), \u0446\u0435\u043b\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u0442\u0430\u043b\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 \u0421\u041c\u0418, \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432, \u043d\u0430\u0443\u0447\u043d\u043e-\u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0446\u0435\u043d\u0442\u0440\u043e\u0432, \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0438 \u043f\u0440\u043e\u0447\u0438\u0445 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439. \n\n\u041f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0436\u0435\u0440\u0442\u0432\u0430\u043c \u0440\u0430\u0441\u0441\u044b\u043b\u0430\u043b\u0438\u0441\u044c \u0433\u0440\u0430\u043c\u043e\u0442\u043d\u043e \u0438 \u0430\u043a\u043a\u0443\u0440\u0430\u0442\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044f \u043d\u0430 \u043d\u0430\u0443\u0447\u043d\u043e-\u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043d\u044b\u0439 \u0444\u043e\u0440\u0443\u043c \u00ab\u041f\u0440\u0438\u043c\u0430\u043a\u043e\u0432\u0441\u043a\u0438\u0435 \u0447\u0442\u0435\u043d\u0438\u044f\u00bb. \u041a\u0430\u0436\u0434\u043e\u0435 \u043f\u0438\u0441\u044c\u043c\u043e \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043a\u043e\u0440\u043e\u0442\u043a\u043e\u0436\u0438\u0432\u0443\u0449\u0435\u0439 \u0441\u0441\u044b\u043b\u043a\u043e\u0439 \u043d\u0430 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0439 \u0441\u0430\u0439\u0442. \u041f\u043e\u0441\u043b\u0435 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0430 \u043d\u0430 \u0441\u0430\u0439\u0442 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043b\u0441\u044f \u0441\u043b\u043e\u0436\u043d\u044b\u0439 0-day \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u043f\u043e\u043c\u043e\u0433\u0430\u0432\u0448\u0438\u0439 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0432\u044b\u0439\u0442\u0438 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b Chrome \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u043e\u0435 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0435 \u041f\u041e Dante. \n\n\u00ab\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u044f \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e\u00bb \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0432 Google. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0443, \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043a\u0430\u043a CVE-2025-2783. \u041e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u0430 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 \u043d\u0430 \u0431\u0430\u0437\u0435 Chromium.\n\n\u0421\u0430\u043c\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e Dante \u0431\u044b\u043b\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043e \u0438\u0442\u0430\u043b\u044c\u044f\u043d\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Memento Labs, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u043a\u0430\u043a Hacking Team. \u0421\u0442\u0438\u043b\u0435\u0440 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u043a \u043e\u0434\u043d\u043e\u043c\u0443 \u0438\u0437 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 C2, \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b HTTPs \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434. \u0422\u0430\u043a\u0436\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432 \u0444\u043e\u043d\u043e\u0432\u043e\u043c \u0440\u0435\u0436\u0438\u043c\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u0435 \u043d\u0430\u0436\u0430\u0442\u0438\u0439 \u043a\u043b\u0430\u0432\u0438\u0448 \u0438 \u043a\u0440\u0430\u0436\u0430 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0430\u0445: *.doc, *.xls, *.ppt, *.rtf, *.pdf, *.docx, *.xlsx, *.pptx.\n\n\ud83d\udd17 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u043e\u0442\u0447\u0435\u0442\u0435 \u00ab\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e\u00bb.\n\n#blue_team #Dante #CVE", "creation_timestamp": "2026-08-15T00:00:33.083464Z"}, {"uuid": "9495ab57-186e-4fff-9dd6-5e1a2170a154", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7c8b3945-f6e4-471b-927b-d5d69045d4ef", "content": "", "creation_timestamp": "2026-06-23T14:03:53.825327Z"}, {"uuid": "7db20436-ab54-4b72-86d3-b19d7633ec42", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27505", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/99bdc2a0-45f8-4276-8082-caf16a40ae3c", "content": "", "creation_timestamp": "2026-06-23T14:03:14.068523Z"}, {"uuid": "6a6e3b84-e474-422a-b0c9-cd09da42129f", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e8e18064-e74e-4fe4-a809-230bde2be9dd", "content": "", "creation_timestamp": "2026-06-23T14:03:53.891361Z"}, {"uuid": "2b048ff8-c855-41c0-8921-8db813a32f59", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2777", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ed15f212-67a8-440f-b85f-2e2844c859cb", "content": "", "creation_timestamp": "2026-06-23T14:03:28.554758Z"}, {"uuid": "1e6b1e79-87ab-432d-8bd8-398f6edc56bb", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27112", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/adafe8e5-0bb9-47d3-9f8f-391bb62b0f43", "content": "", "creation_timestamp": "2026-06-23T14:03:28.631990Z"}, {"uuid": "8eee2e3b-bfea-4fb4-b21a-89f729536da3", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27915", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d209a4c0-7eda-46f2-88d7-d862703864f2", "content": "", "creation_timestamp": "2026-06-23T14:03:49.752051Z"}, {"uuid": "86105b8f-3b35-4743-9968-616d0e5b8c36", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2746", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e44015da-8f57-4c15-aedb-9068bdfe376a", "content": "", "creation_timestamp": "2026-06-23T14:03:49.053499Z"}, {"uuid": "fb549801-9ee1-4ee6-9c6a-63707e3fc4e3", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2749", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/654d9760-bd9a-434b-afab-166d93ff3a75", "content": "", "creation_timestamp": "2026-06-23T14:03:39.729385Z"}, {"uuid": "37bb0c8e-c5a4-41be-bd04-cbb0e3458431", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27038", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/61ee81c1-60be-4d33-8e09-8faf78f88ad9", "content": "", "creation_timestamp": "2026-06-23T14:03:55.694524Z"}, {"uuid": "513a4468-7e6f-4b24-8808-ffc6abe996de", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2747", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/08733224-0dd4-40dd-9393-8e6340b3b250", "content": "", "creation_timestamp": "2026-06-23T14:03:48.989773Z"}, {"uuid": "bfcf3e59-8e9e-496b-b722-2b1d90da21a0", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27920", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1ac4416f-48ad-49bb-a116-109d48bc98f4", "content": "", "creation_timestamp": "2026-06-23T14:04:01.172324Z"}, {"uuid": "412c8555-694b-443c-b830-cf95ca73c6ec", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f0d0b184-3bc7-4e76-aa7a-35a1f2f3368f", "content": "", "creation_timestamp": "2026-06-23T14:04:18.426419Z"}, {"uuid": "3e8ab62e-c0e3-4a34-9a14-d62989774794", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0b83a6f3-1776-4cc7-b44d-41933515ff74", "content": "", "creation_timestamp": "2026-06-23T14:06:07.819113Z"}, {"uuid": "9ba8cddc-9b6f-4923-9159-46938235591f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-23)", "content": "", "creation_timestamp": "2026-06-23T00:00:00.000000Z"}, {"uuid": "c755aa05-43f9-4b8c-8db6-1d8d38e0f250", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27590", "type": "seen", "source": "https://t.me/purp_sec/499", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-27590 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 Oxidized Web, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e Linux, \u043f\u043e\u0434 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-3114 \u0438 CVE-2025-3115 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0431\u0430\u0433\u0438 \u0432 Spotfire \u043e\u0442 Cloud Software Group. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0441 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c\u0441\u044f \u0431\u0435\u0437 \u0434\u043e\u043b\u0436\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0443\u044e \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u044e.\n\n\ud83d\udd35 CVE-2025-32754 \u0438 CVE-2025-32755 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Docker-\u043e\u0431\u0440\u0430\u0437\u0430\u0445 Jenkins, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0434\u043b\u044f SSH-\u0430\u0433\u0435\u043d\u0442\u043e\u0432. \u0421\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u044b\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c SSH-\u0445\u043e\u0441\u0442-\u043a\u043b\u044e\u0447\u0435\u0439, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a MITM-\u0430\u0442\u0430\u043a\u0430\u043c \u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432.\n\n\ud83d\udd35 CVE-2024-48887 \u2014 \u0441\u043d\u043e\u0432\u0430 \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0435\u043c\u0441\u044f \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Fortinet, \u0432 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 FortiSwitch. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0440\u0438 \u0441\u043c\u0435\u043d\u0435 \u043f\u0430\u0440\u043e\u043b\u044f \u0447\u0435\u0440\u0435\u0437 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 FortiSwitch. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 endpoint set_password \u0438 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0431\u0435\u0437 \u0432\u0445\u043e\u0434\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438 \u0431\u0435\u0437 \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u044e\u0437\u0435\u0440\u0430.\n\n\ud83d\udd35 CVE-2024-53197 \u0438 CVE-2024-53150 \u2014 \u0434\u0432\u0435 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 CISA. \u041e\u0431\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u044f\u0434\u0440\u043e\u043c Linux \u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:39.651187Z"}, {"uuid": "38086909-5f72-4b73-a8b7-82bc3726ce56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-24)", "content": "", "creation_timestamp": "2026-06-25T10:00:05.113386Z"}, {"uuid": "7835549b-915a-45fb-9c1e-7330017d0897", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27520", "type": "seen", "source": "https://t.me/purp_sec/504", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-3439 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Everest Forms \u0434\u043b\u044f WordPress, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c PHP-\u043e\u0431\u044a\u0435\u043a\u0442\u044b. \u041c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE \u0438\u043b\u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u0430\u0442\u0430\u043a\u0430\u043c, \u0435\u0441\u043b\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 POP (Property-Oriented Programming).\n\n\ud83d\udd35 CVE-2025-27520 \u2014 \u0431\u0430\u0433 \u0432 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 BentoML, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 deserialize_value() \u0444\u0430\u0439\u043b\u0430 serde.py. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043d\u0430 \u043b\u044e\u0431\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 HTTP-\u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442 BentoML-\u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u0418\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u0434\u043e\u043b\u0436\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438, \u0434\u0430\u043d\u043d\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u044b, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35 CVE-2025-32896 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Apache SeaTunnel. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0447\u0438\u0442\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e Java-\u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432.\n\n\ud83d\udd35 CVE-2024-7971 \u2014 PoC \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u0434\u0432\u0438\u0436\u043a\u043e\u043c JavaScript V8 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Google Chrome. CVE \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b \u0442\u0438\u043f\u043e\u0432 (Type Confusion Vulnerability) \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0432\u0435\u0431-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:37.848237Z"}, {"uuid": "4b2a5c6f-e747-42bb-be0d-ccca4120fd94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2748", "type": "seen", "source": "https://t.me/purp_sec/456", "content": "\u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-2748 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 CMS Kentico Xperience, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u044d\u0441\u043a\u0430\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c XSS-\u0430\u0442\u0430\u043a\u0443 \u0434\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 (RCE).\n\n\ud83d\udd35 CVE-2025-1449 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Verve Asset Manager. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0435 (shell) \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\ud83d\udd35 CVE-2025-22231 \u2014 \u0431\u0430\u0433 \u0432 VMware Aria Operations (\u0440\u0430\u043d\u0435\u0435 VMware vRealize Operations), \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\ud83d\udd35 CVE-2025-24085 \u2014 use after free (UAF) \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Apple, \u0432\u043a\u043b\u044e\u0447\u0430\u044f VisionOS, iOS, iPadOS, macOS, watchOS \u0438 tvOS. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u043a\u0440\u0430\u0436\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e.\n\n\ud83d\udd35 CVE-2025-30065 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 parquet-avro Apache Parquet, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043d\u0435\u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35 CVE-2024-13553 \u2014 \u0431\u0430\u0433 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 SMS Alert Order Notifications / WooCommerce \u0434\u043b\u044f WordPress. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0430\u043a\u043a\u0430\u0443\u043d\u0442, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 Host.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:41.947439Z"}, {"uuid": "83ceb80d-19c1-42a4-8cfc-aeccaafddce2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://t.me/purp_sec/432", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-2857 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0443 Mozilla \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Windows. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0434\u0435\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0440\u043e\u0432 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u0430\u043a \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435, \u0442\u0430\u043a \u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Firefox (ESR), \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439.\n\n\ud83d\udd35 CVE-2025-2783 \u2014 \u043e\u0447\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0439 \u0431\u0430\u0433, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0434\u0435\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0440\u043e\u0432 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Mojo \u043d\u0430 Windows. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0443 Chrome \u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e.\n\n\ud83d\udd35 CVE-2025-30091 \u2014 \u0431\u0430\u0433 \u0432 MoxieManager, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u0430\u043c\u0438 \u0438 \u043c\u0435\u0434\u0438\u0430, \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u0443\u0435\u043c\u043e\u043c \u0432 PHP \u0438 .NET-\u0441\u0440\u0435\u0434\u044b. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438.\n\n\ud83d\udd35 CVE-2025-26512 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 NetApp SnapCenter, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0430\u0432\u0430 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u0433\u0434\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0439 \u043f\u043b\u0430\u0433\u0438\u043d.\n\n\ud83d\udd35 \u041d\u0430\u0431\u043e\u0440 PoC \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c Ingress-NGINX \u0434\u043b\u044f Kubernetes, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u044f \u043f\u0438\u0441\u0430\u043b \u0440\u0430\u043d\u0435\u0435. \n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:42.324045Z"}, {"uuid": "51ab1478-5b51-4b67-adfd-98d7c4cf6ff7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-26)", "content": "", "creation_timestamp": "2026-06-27T10:00:04.058724Z"}, {"uuid": "f4c49f54-7d73-47a0-9cc0-97d32adf60b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27594", "type": "seen", "source": "https://t.me/purp_sec/399", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435\n\n\ud83d\udd35 CVE-2024-11131 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 \u043a\u0430\u043c\u0435\u0440 Synology BC500, CC400W \u0438 TC500. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\ud83d\udd35 CVE-2025-2000 \u2014 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 Qiskit SDK, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u0434\u043b\u044f \u043a\u0432\u0430\u043d\u0442\u043e\u0432\u044b\u0445 \u0432\u044b\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u0439. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 QPY-\u0444\u0430\u0439\u043b\u043e\u0432 \u2014 \u043f\u0440\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0442\u0430\u043a\u0438\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u044e qiskit.qpy.load() \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\ud83d\udd35 CVE-2025-20014 \u0438 CVE-2025-20061 \u2014 \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 mySCADA myPRO. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u0435\u0442\u044f\u043c.\n\n\ud83d\udd35 CVE-2025-27593, CVE-2025-27594, CVE-2025-27595 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 SICK DL100, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0434\u0430\u0442\u0447\u0438\u043a\u0438 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043a\u0440\u0430\u0436\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439.\n\n\ud83d\udd35 CVE-2025-2263, CVE-2025-2264, CVE-2025-2284 \u2014 \u0431\u0430\u0433\u0438 \u0432 Sante PACS Server, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u043b\u0438 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\ud83d\udd35 CVE-2025-29774 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 xml-crypto, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 XML \u0447\u0435\u0440\u0435\u0437 \u0443\u0437\u043b\u044b SignedInfo. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0435 XML-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u0442\u0430\u043a, \u0447\u0442\u043e\u0431\u044b \u043e\u043d\u043e \u043f\u0440\u043e\u0445\u043e\u0434\u0438\u043b\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043f\u0438\u0441\u0438, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:43.688658Z"}, {"uuid": "45ac111e-6bd7-4f28-8021-64ceb8880445", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27888", "type": "seen", "source": "https://t.me/purp_sec/409", "content": "\u041f\u043e\u0434\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-27888 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Apache Druid. \u041e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0442\u0438\u043f\u0430 SSRF (Server-Side Request Forgery) \u0438 XSS (Cross-Site Scripting).\n\n\ud83d\udd35 CVE-2025-2538 \u2014 \u0431\u0430\u0433 \u0432 ArcGIS Enterprise, \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0432\u0435\u0434\u0443\u0449\u0438\u0445 \u0433\u0435\u043e\u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439. \u0421\u0432\u044f\u0437\u0430\u043d \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\ud83d\udd35 CVE-2025-1758 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Kemp LoadMaster (\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430). \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u0432\u044b\u0441\u0448\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\ud83d\udd35 CVE-2025-29783 \u2014 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 vLLM, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0435\u0435 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0435\u0439 \u0441 Mooncake. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u043e ZMQ/TCP.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:43.733740Z"}, {"uuid": "047b3449-74b8-4228-82d7-7ff85e9c5fe0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27595", "type": "seen", "source": "https://t.me/purp_sec/399", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435\n\n\ud83d\udd35 CVE-2024-11131 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 \u043a\u0430\u043c\u0435\u0440 Synology BC500, CC400W \u0438 TC500. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\ud83d\udd35 CVE-2025-2000 \u2014 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 Qiskit SDK, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u0434\u043b\u044f \u043a\u0432\u0430\u043d\u0442\u043e\u0432\u044b\u0445 \u0432\u044b\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u0439. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 QPY-\u0444\u0430\u0439\u043b\u043e\u0432 \u2014 \u043f\u0440\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0442\u0430\u043a\u0438\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u044e qiskit.qpy.load() \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\ud83d\udd35 CVE-2025-20014 \u0438 CVE-2025-20061 \u2014 \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 mySCADA myPRO. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u0435\u0442\u044f\u043c.\n\n\ud83d\udd35 CVE-2025-27593, CVE-2025-27594, CVE-2025-27595 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 SICK DL100, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0434\u0430\u0442\u0447\u0438\u043a\u0438 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043a\u0440\u0430\u0436\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439.\n\n\ud83d\udd35 CVE-2025-2263, CVE-2025-2264, CVE-2025-2284 \u2014 \u0431\u0430\u0433\u0438 \u0432 Sante PACS Server, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u043b\u0438 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\ud83d\udd35 CVE-2025-29774 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 xml-crypto, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 XML \u0447\u0435\u0440\u0435\u0437 \u0443\u0437\u043b\u044b SignedInfo. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0435 XML-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u0442\u0430\u043a, \u0447\u0442\u043e\u0431\u044b \u043e\u043d\u043e \u043f\u0440\u043e\u0445\u043e\u0434\u0438\u043b\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043f\u0438\u0441\u0438, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:43.798733Z"}, {"uuid": "da6095ed-cee6-4cb2-a020-54f249d354ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27593", "type": "seen", "source": "https://t.me/purp_sec/399", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435\n\n\ud83d\udd35 CVE-2024-11131 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 \u043a\u0430\u043c\u0435\u0440 Synology BC500, CC400W \u0438 TC500. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\ud83d\udd35 CVE-2025-2000 \u2014 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 Qiskit SDK, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u0434\u043b\u044f \u043a\u0432\u0430\u043d\u0442\u043e\u0432\u044b\u0445 \u0432\u044b\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u0439. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 QPY-\u0444\u0430\u0439\u043b\u043e\u0432 \u2014 \u043f\u0440\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0442\u0430\u043a\u0438\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u044e qiskit.qpy.load() \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\ud83d\udd35 CVE-2025-20014 \u0438 CVE-2025-20061 \u2014 \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 mySCADA myPRO. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u0435\u0442\u044f\u043c.\n\n\ud83d\udd35 CVE-2025-27593, CVE-2025-27594, CVE-2025-27595 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 SICK DL100, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0434\u0430\u0442\u0447\u0438\u043a\u0438 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043a\u0440\u0430\u0436\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439.\n\n\ud83d\udd35 CVE-2025-2263, CVE-2025-2264, CVE-2025-2284 \u2014 \u0431\u0430\u0433\u0438 \u0432 Sante PACS Server, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u043b\u0438 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\ud83d\udd35 CVE-2025-29774 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 xml-crypto, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 XML \u0447\u0435\u0440\u0435\u0437 \u0443\u0437\u043b\u044b SignedInfo. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0435 XML-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u0442\u0430\u043a, \u0447\u0442\u043e\u0431\u044b \u043e\u043d\u043e \u043f\u0440\u043e\u0445\u043e\u0434\u0438\u043b\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043f\u0438\u0441\u0438, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:45.029450Z"}, {"uuid": "9d87ed0c-d1b6-4384-9fcf-1a87ba3a1542", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "seen", "source": "https://t.me/purp_sec/395", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435\n\n\ud83d\udd35 CVE-2025-29891 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Apache Camel, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0438 \u043c\u0435\u043d\u044f\u0442\u044c \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Camel, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a camel-bean \u0438 camel-exec.\n\n\ud83d\udd35 CVE-2025-27591 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 openSUSE, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043b\u043e\u0433-\u0444\u0430\u0439\u043b\u0430\u043c\u0438, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u044f \u0443\u0433\u0440\u043e\u0437\u0443 \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u043f\u043e\u0434\u043c\u0435\u043d\u044b \u0434\u0430\u043d\u043d\u044b\u0445. \u041b\u043e\u0433-\u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u044f /var/log/below \u0438\u043c\u0435\u0435\u0442 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043c\u0435\u043d\u044f\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u043b\u043e\u0433\u043e\u0432 \u0438\u043b\u0438 \u0434\u0430\u0436\u0435 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0438\u043c\u043b\u0438\u043d\u043a\u0438, \u0432\u0435\u0434\u0443\u0449\u0438\u0435 \u043a \u0432\u0430\u0436\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c.\n\n\ud83d\udd35 CVE-2024-27564 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ChatGPT, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u0442\u0438\u043f\u0430 SSRF (Server-Side Request Forgery). \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 URL \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f. \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0431\u0430\u0433 \u0438\u0437\u0432\u0435\u0441\u0442\u0435\u043d \u0435\u0449\u0435 \u0441 2023 \u0433\u043e\u0434\u0430, \u043e\u043d \u0432\u0441\u0435 \u0435\u0449\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u0435\u043d. \u0422\u043e\u043b\u044c\u043a\u043e \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044e\u044e \u043d\u0435\u0434\u0435\u043b\u044e \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u0431\u043e\u043b\u0435\u0435 10 \u0442\u044b\u0441\u044f\u0447 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0430\u0442\u0430\u043a \u0441 \u043e\u0434\u043d\u043e\u0433\u043e IP-\u0430\u0434\u0440\u0435\u0441\u0430.\n\n\ud83d\udd35 CVE-2025-25599 \u2014 \u0431\u0430\u0433 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u043e\u043c Bolt CMS, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432. \u0417\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432, \u0438\u0437-\u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0447\u0435\u0440\u0435\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0430\u0432\u0430\u0442\u0430\u0440\u0430 \u0438\u0437 URL.\n\n\ud83d\udd35 CVE-2024-28000 \u2014 \u0430\u043d\u0430\u043b\u0438\u0437 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 LiteSpeed Cache. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u0430\u0439\u0442\u0430.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:45.495052Z"}, {"uuid": "71f15fb8-f6c9-4127-a40f-4957a5075880", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2784", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mphullv57n2k", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-2784 \u0432 libsoup: \u0443\u0433\u0440\u043e\u0437\u0430 heap buffer over-read \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/8181CC7F-2CBB-423A-BD2D-45D3EF5C0C4D", "creation_timestamp": "2026-06-30T01:38:52.208796Z"}, {"uuid": "577830ae-3993-4772-9e3b-60d0e822bc04", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-27505", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ff879a36-922e-4b29-86c3-0ee559c45c54", "content": "", "creation_timestamp": "2026-06-30T09:22:53.823068Z"}, {"uuid": "d51086b0-c0f0-4022-9515-2b49b4ece1bd", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-2777", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a670988d-9a6b-440f-a985-598498923f6f", "content": "", "creation_timestamp": "2026-06-30T09:23:53.074180Z"}, {"uuid": "32838aea-7add-47c6-9c6f-34cdf5a84f08", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-27222", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/301fcbef-def5-4a1a-a2fd-6cdb5c14d934", "content": "", "creation_timestamp": "2026-06-30T09:23:58.195636Z"}, {"uuid": "54ade5a7-4459-4827-b578-85a4eddc732a", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-2776", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/424c9732-539a-4cc5-98e5-19d219034d63", "content": "", "creation_timestamp": "2026-06-30T09:23:49.789764Z"}, {"uuid": "b3f07e56-2cbe-4b2c-a0f2-51edfcd47b84", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-2775", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2e908d84-1758-4d7e-8733-a4d3ac8c6d55", "content": "", "creation_timestamp": "2026-06-30T09:23:48.169785Z"}, {"uuid": "3d273cab-a154-4333-bb64-10fd7b13cfd2", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-27112", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/96ba7fbb-3b03-4ab1-8d14-f0a4c1aef8ee", "content": "", "creation_timestamp": "2026-06-30T09:23:56.295858Z"}, {"uuid": "4c921636-8e30-426a-a459-dac53e00cec6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2749", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42060", "content": "CISA Adds Eight Known Exploited Vulnerabilities to Catalog\n\nCISA has added eight new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\u00a0\nCVE-2023-27351 PaperCut NG/MF Improper Authentication Vulnerability\nCVE-2024-27199 JetBrains TeamCity Relative Path Traversal Vulnerability\nCVE-2025-2749 Kentico Xperience Path Traversal Vulnerability\nCVE-2025-32975 Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability\nCVE-2025-48700 Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability\nCVE-2026-20122 Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability\nCVE-2026-20128 Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability\nCVE-2026-20133 Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability\nThese types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.\u00a0\nBinding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.\u00a0\nAlthough BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of KEV Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nhttps://www.cisa.gov/news-events/alerts/2026/04/20/cisa-adds-eight-known-exploited-vulnerabilities-catalog", "creation_timestamp": "2026-08-19T00:00:09.429515Z"}, {"uuid": "e5ae090b-08f0-4fe2-91ab-4c1c9c22793a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://t.me/zorglub57/74", "content": "CVE-2025-27636 - yourself \\n\\n5343480066325985\u00a0 05/26\u00a0 422\u00a0 \\nBarry Raymond\u00a0 \\n11001 key west Ave Porter \\nRanch Catamarca, 91326 \\nphone:1818741670\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \\nemail:raymond@outlook.com \\n395-92-6063\\n05/16/1984\\nJOIN FOR SAUCE TO ALL METHODS (CASHAPP >\u00a0 -\u00a0\u00a0 - https://check-host.net/check-report/23fe0d53k8ab", "creation_timestamp": "2026-08-19T00:00:10.227502Z"}, {"uuid": "02ebabb6-4277-4c3e-94e2-d12867f4fd0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-10)", "content": "", "creation_timestamp": "2026-08-11T10:00:04.915418Z"}, {"uuid": "41c234e5-9ffb-4b35-b15c-c140243117f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://t.me/iiLinux/1964", "content": "Exploit Alert!\n\nCVE-2025-2783 - If you are using a chromium based browser on windows, update! Make sure you are on version 134.0.6998.178 or higher.", "creation_timestamp": "2026-07-09T03:00:04.449107Z"}, {"uuid": "caa7bd83-f986-4000-8006-57cbed7702f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "seen", "source": "https://t.me/brutsecurity/1869", "content": "CVE-2025-27007: Privilege Escalation in OttoKit WordPress Plugin, 9.8 rating \ud83d\udd25\n\nErrors in the logic of the plugin's API could potentially lead to an attacker gaining access to the administrator account. According to Patchstack, exploitation of the vulnerability began just an hour after public disclosure!\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/y4FXX\n\ud83d\udc49 Dork: http.body:\"plugins/suretriggers\"\n\nRead more: https://patchstack.com/database/wordpress/plugin/suretriggers/vulnerability/wordpress-suretriggers-1-0-82-privilege-escalation-vulnerability?_s_id=cve", "creation_timestamp": "2026-07-09T03:00:08.368241Z"}, {"uuid": "5a70d60e-597c-4f61-8c73-6a0c3e28f7ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27507", "type": "seen", "source": "https://t.me/brutsecurity/1611", "content": "\ud83d\udee1CVE-2025-27507(CVSS 9.0): Zitadel Insecure Direct Object Reference (IDOR) Vulnerability\n\n\ud83d\udc7bDork:\nHUNTER : http://product.name=\"Zitadel\"\n\n\u26a0\ufe0fRefer:https://securityonline.info/cve-2025-27507-cvss-9-0-zitadel-users-at-risk-of-account-takeover/\n\n\ud83d\udda5https://github.com/zitadel/zitadel/security/advisories/GHSA-f3gh-529w-v32x\n\n#hunterhow #infosec #infosecurity #OSINT #Vulnerability", "creation_timestamp": "2026-07-09T03:00:09.112909Z"}, {"uuid": "a3456223-707f-4571-a175-b246d86dee23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27622", "type": "seen", "source": "https://t.me/brutsecurity/1622", "content": "CVE-2025-27622, -27623, -27624, -27625: Multiple vulnerabilitites in Jenkins, medium rating\u2757\ufe0f\n\nThe vulnerabilities allow attackers to view encrypted secret values \u200b\u200band potentially store attacker-controlled content in other users' profiles.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/SyXh2\n\ud83d\udc49 Dork: http.headers.x_jenkins:*\n\nVendor's advisory: https://www.jenkins.io/security/advisory/2025-03-05/", "creation_timestamp": "2026-07-09T03:00:09.159588Z"}, {"uuid": "9d802ea5-8339-4328-b9f2-fb61f06199ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27090", "type": "seen", "source": "https://t.me/brutsecurity/1548", "content": "\ud83d\udc7b\ud83d\udc7b\ud83d\udc7bSSRF in Sliver C2 (CVE-2025-27090), allowing an attacker to read and write TCP traffic through affected teamservers. \n\n\ud83d\udd25\ud83d\udd25\ud83d\udd25Demo shows leaking the IP of a Sliver teamserver hidden behind redirectors.\n\nWriteup- https://blog.chebuya.com/posts/server-side-request-forgery-on-sliver-c2/\n\nPOC- https://github.com/chebuya/exploits/tree/main/CVE-2025-27090%3A%20Sliver%20C2%20SSRF", "creation_timestamp": "2026-07-09T03:00:09.554328Z"}, {"uuid": "2fe50813-368f-4526-851f-6a1022cd6017", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27462", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqa5t7g5bs2r", "content": "CVE-2025-27462 - windows pv drivers\nWindows PV drivers give unprivileged users too much access to certain features, potentially allowing them to make unauthorized changes. This could lead to system instability or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#xen #CVE #infosec", "creation_timestamp": "2026-07-09T17:28:04.989865Z"}, {"uuid": "df4d9625-e832-409d-a65c-e05b798c2843", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27464", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqa5taukuy2q", "content": "CVE-2025-27464 - windows pv drivers\nWindows PV drivers have features that are not properly locked down, allowing unauthorized users to access them. This could potentially allow an attacker to take control of or disrupt\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#xen #CVE #infosec", "creation_timestamp": "2026-07-09T17:28:06.559411Z"}, {"uuid": "0620fc66-2582-4e0f-aa82-f60f17297517", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27463", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqa6bj3bmh2f", "content": "CVE-2025-27463\nThe Windows drivers for a virtual machine environment expose some of their functions to the user's computer, without proper security controls. This allows anyone with access to the computer to view or modify\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-09T17:36:05.567606Z"}, {"uuid": "f41da61d-b2aa-40b1-ab8d-2ed9e335b54e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27464", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqabxewb3q25", "content": "CVE-2025-27464 - WinPVDrivers: Excessive permissions on user-exposed devices\nCVE ID : CVE-2025-27464\n \n Published : July 9, 2026, 4:16 p.m. | 2\u00a0hours, 16\u00a0minutes ago\n \n Description : [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnera...", "creation_timestamp": "2026-07-09T18:42:00.122412Z"}, {"uuid": "280ae32f-ca83-4c74-a1ca-f8facb2862c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27463", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqaen72ke42w", "content": "CVE-2025-27463 - WinPVDrivers: Excessive permissions on user-exposed devices\nCVE ID : CVE-2025-27463\n \n Published : July 9, 2026, 4:16 p.m. | 2\u00a0hours, 16\u00a0minutes ago\n \n Description : [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnera...", "creation_timestamp": "2026-07-09T19:29:59.771559Z"}, {"uuid": "3bf47947-0960-4a49-9496-4e3865738280", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://t.me/iiLinux/1964", "content": "Exploit Alert!\n\nCVE-2025-2783 - If you are using a chromium based browser on windows, update! Make sure you are on version 134.0.6998.178 or higher.", "creation_timestamp": "2026-07-10T00:00:11.520310Z"}, {"uuid": "3cbd9a47-c61c-4b21-8ecb-8f9e86ff8292", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27622", "type": "seen", "source": "https://t.me/brutsecurity/1622", "content": "CVE-2025-27622, -27623, -27624, -27625: Multiple vulnerabilitites in Jenkins, medium rating\u2757\ufe0f\n\nThe vulnerabilities allow attackers to view encrypted secret values \u200b\u200band potentially store attacker-controlled content in other users' profiles.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/SyXh2\n\ud83d\udc49 Dork: http.headers.x_jenkins:*\n\nVendor's advisory: https://www.jenkins.io/security/advisory/2025-03-05/", "creation_timestamp": "2026-07-10T00:00:32.738135Z"}, {"uuid": "48922175-2f34-4e52-8d7d-17cb694e5072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "seen", "source": "https://t.me/brutsecurity/1869", "content": "CVE-2025-27007: Privilege Escalation in OttoKit WordPress Plugin, 9.8 rating \ud83d\udd25\n\nErrors in the logic of the plugin's API could potentially lead to an attacker gaining access to the administrator account. According to Patchstack, exploitation of the vulnerability began just an hour after public disclosure!\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/y4FXX\n\ud83d\udc49 Dork: http.body:\"plugins/suretriggers\"\n\nRead more: https://patchstack.com/database/wordpress/plugin/suretriggers/vulnerability/wordpress-suretriggers-1-0-82-privilege-escalation-vulnerability?_s_id=cve", "creation_timestamp": "2026-07-10T00:00:31.883461Z"}, {"uuid": "1e09d8ce-4b69-483a-9967-9360a2f88d58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27507", "type": "seen", "source": "https://t.me/brutsecurity/1611", "content": "\ud83d\udee1CVE-2025-27507(CVSS 9.0): Zitadel Insecure Direct Object Reference (IDOR) Vulnerability\n\n\ud83d\udc7bDork:\nHUNTER : http://product.name=\"Zitadel\"\n\n\u26a0\ufe0fRefer:https://securityonline.info/cve-2025-27507-cvss-9-0-zitadel-users-at-risk-of-account-takeover/\n\n\ud83d\udda5https://github.com/zitadel/zitadel/security/advisories/GHSA-f3gh-529w-v32x\n\n#hunterhow #infosec #infosecurity #OSINT #Vulnerability", "creation_timestamp": "2026-07-10T00:00:32.681365Z"}, {"uuid": "f9c16d0a-ee9e-4f8c-8f1b-6ae77c57066b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27090", "type": "seen", "source": "https://t.me/brutsecurity/1548", "content": "\ud83d\udc7b\ud83d\udc7b\ud83d\udc7bSSRF in Sliver C2 (CVE-2025-27090), allowing an attacker to read and write TCP traffic through affected teamservers. \n\n\ud83d\udd25\ud83d\udd25\ud83d\udd25Demo shows leaking the IP of a Sliver teamserver hidden behind redirectors.\n\nWriteup- https://blog.chebuya.com/posts/server-side-request-forgery-on-sliver-c2/\n\nPOC- https://github.com/chebuya/exploits/tree/main/CVE-2025-27090%3A%20Sliver%20C2%20SSRF", "creation_timestamp": "2026-07-10T00:00:33.205159Z"}, {"uuid": "0fd9f7e7-eea0-4b7b-addd-bac092f0ea3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://t.me/iiLinux/1964", "content": "Exploit Alert!\n\nCVE-2025-2783 - If you are using a chromium based browser on windows, update! Make sure you are on version 134.0.6998.178 or higher.", "creation_timestamp": "2026-07-11T09:00:04.783325Z"}, {"uuid": "43a745fc-1799-4efd-9c20-7b9dbb9a1a45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-17)", "content": "", "creation_timestamp": "2026-08-18T10:00:03.796039Z"}, {"uuid": "6aa3273a-5948-49b0-833f-aef5c5f6b00b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "exploited", "source": "https://t.me/brutsecurity/1869", "content": "CVE-2025-27007: Privilege Escalation in OttoKit WordPress Plugin, 9.8 rating \ud83d\udd25\n\nErrors in the logic of the plugin's API could potentially lead to an attacker gaining access to the administrator account. According to Patchstack, exploitation of the vulnerability began just an hour after public disclosure!\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/y4FXX\n\ud83d\udc49 Dork: http.body:\"plugins/suretriggers\"\n\nRead more: https://patchstack.com/database/wordpress/plugin/suretriggers/vulnerability/wordpress-suretriggers-1-0-82-privilege-escalation-vulnerability?_s_id=cve", "creation_timestamp": "2026-07-11T13:00:05.479442Z"}, {"uuid": "02e089f1-3f5d-4526-a80c-60846e0e3b28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27090", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1548", "content": "\ud83d\udc7b\ud83d\udc7b\ud83d\udc7bSSRF in Sliver C2 (CVE-2025-27090), allowing an attacker to read and write TCP traffic through affected teamservers. \n\n\ud83d\udd25\ud83d\udd25\ud83d\udd25Demo shows leaking the IP of a Sliver teamserver hidden behind redirectors.\n\nWriteup- https://blog.chebuya.com/posts/server-side-request-forgery-on-sliver-c2/\n\nPOC- https://github.com/chebuya/exploits/tree/main/CVE-2025-27090%3A%20Sliver%20C2%20SSRF", "creation_timestamp": "2026-07-11T14:00:03.854689Z"}, {"uuid": "f94784f4-94f4-4208-8f3f-11bbe942cdbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27622", "type": "seen", "source": "https://t.me/brutsecurity/1622", "content": "CVE-2025-27622, -27623, -27624, -27625: Multiple vulnerabilitites in Jenkins, medium rating\u2757\ufe0f\n\nThe vulnerabilities allow attackers to view encrypted secret values \u200b\u200band potentially store attacker-controlled content in other users' profiles.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/SyXh2\n\ud83d\udc49 Dork: http.headers.x_jenkins:*\n\nVendor's advisory: https://www.jenkins.io/security/advisory/2025-03-05/", "creation_timestamp": "2026-07-11T14:00:04.369824Z"}, {"uuid": "8a11ae13-54ff-48af-95aa-95c03053b50c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27507", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1611", "content": "\ud83d\udee1CVE-2025-27507(CVSS 9.0): Zitadel Insecure Direct Object Reference (IDOR) Vulnerability\n\n\ud83d\udc7bDork:\nHUNTER : http://product.name=\"Zitadel\"\n\n\u26a0\ufe0fRefer:https://securityonline.info/cve-2025-27507-cvss-9-0-zitadel-users-at-risk-of-account-takeover/\n\n\ud83d\udda5https://github.com/zitadel/zitadel/security/advisories/GHSA-f3gh-529w-v32x\n\n#hunterhow #infosec #infosecurity #OSINT #Vulnerability", "creation_timestamp": "2026-07-11T14:00:04.409128Z"}, {"uuid": "6c9d4c3b-9520-4f44-8121-7f569d072545", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "exploited", "source": "https://t.me/brutsecurity/1869", "content": "CVE-2025-27007: Privilege Escalation in OttoKit WordPress Plugin, 9.8 rating \ud83d\udd25\n\nErrors in the logic of the plugin's API could potentially lead to an attacker gaining access to the administrator account. According to Patchstack, exploitation of the vulnerability began just an hour after public disclosure!\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/y4FXX\n\ud83d\udc49 Dork: http.body:\"plugins/suretriggers\"\n\nRead more: https://patchstack.com/database/wordpress/plugin/suretriggers/vulnerability/wordpress-suretriggers-1-0-82-privilege-escalation-vulnerability?_s_id=cve", "creation_timestamp": "2026-07-12T00:00:49.534644Z"}, {"uuid": "9de698f1-6463-4d1f-ab61-9393ea7a59f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27090", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1548", "content": "\ud83d\udc7b\ud83d\udc7b\ud83d\udc7bSSRF in Sliver C2 (CVE-2025-27090), allowing an attacker to read and write TCP traffic through affected teamservers. \n\n\ud83d\udd25\ud83d\udd25\ud83d\udd25Demo shows leaking the IP of a Sliver teamserver hidden behind redirectors.\n\nWriteup- https://blog.chebuya.com/posts/server-side-request-forgery-on-sliver-c2/\n\nPOC- https://github.com/chebuya/exploits/tree/main/CVE-2025-27090%3A%20Sliver%20C2%20SSRF", "creation_timestamp": "2026-07-12T00:00:47.647487Z"}, {"uuid": "dd5c9f93-bf68-444e-b05c-1c14dfc6810e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27622", "type": "seen", "source": "https://t.me/brutsecurity/1622", "content": "CVE-2025-27622, -27623, -27624, -27625: Multiple vulnerabilitites in Jenkins, medium rating\u2757\ufe0f\n\nThe vulnerabilities allow attackers to view encrypted secret values \u200b\u200band potentially store attacker-controlled content in other users' profiles.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/SyXh2\n\ud83d\udc49 Dork: http.headers.x_jenkins:*\n\nVendor's advisory: https://www.jenkins.io/security/advisory/2025-03-05/", "creation_timestamp": "2026-07-12T00:00:48.115532Z"}, {"uuid": "a9bac576-06f4-46c5-908e-496dbc166882", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27507", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1611", "content": "\ud83d\udee1CVE-2025-27507(CVSS 9.0): Zitadel Insecure Direct Object Reference (IDOR) Vulnerability\n\n\ud83d\udc7bDork:\nHUNTER : http://product.name=\"Zitadel\"\n\n\u26a0\ufe0fRefer:https://securityonline.info/cve-2025-27507-cvss-9-0-zitadel-users-at-risk-of-account-takeover/\n\n\ud83d\udda5https://github.com/zitadel/zitadel/security/advisories/GHSA-f3gh-529w-v32x\n\n#hunterhow #infosec #infosecurity #OSINT #Vulnerability", "creation_timestamp": "2026-07-12T00:00:48.151149Z"}, {"uuid": "7921bdb8-bf5a-4757-af17-51d9d5a8fff4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://t.me/iiLinux/1964", "content": "Exploit Alert!\n\nCVE-2025-2783 - If you are using a chromium based browser on windows, update! Make sure you are on version 134.0.6998.178 or higher.", "creation_timestamp": "2026-07-12T00:00:54.933526Z"}, {"uuid": "c6babcb9-839b-4d6f-bd6f-93aa822bd16a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-06)", "content": "", "creation_timestamp": "2026-08-07T10:08:14.332265Z"}, {"uuid": "e73fbf17-93c5-4b0b-b472-4132f6361dec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "seen", "source": "https://t.me/purp_sec/395", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435\n\n\ud83d\udd35 CVE-2025-29891 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Apache Camel, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0438 \u043c\u0435\u043d\u044f\u0442\u044c \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Camel, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a camel-bean \u0438 camel-exec.\n\n\ud83d\udd35 CVE-2025-27591 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 openSUSE, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043b\u043e\u0433-\u0444\u0430\u0439\u043b\u0430\u043c\u0438, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u044f \u0443\u0433\u0440\u043e\u0437\u0443 \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u043f\u043e\u0434\u043c\u0435\u043d\u044b \u0434\u0430\u043d\u043d\u044b\u0445. \u041b\u043e\u0433-\u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u044f /var/log/below \u0438\u043c\u0435\u0435\u0442 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043c\u0435\u043d\u044f\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u043b\u043e\u0433\u043e\u0432 \u0438\u043b\u0438 \u0434\u0430\u0436\u0435 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0438\u043c\u043b\u0438\u043d\u043a\u0438, \u0432\u0435\u0434\u0443\u0449\u0438\u0435 \u043a \u0432\u0430\u0436\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c.\n\n\ud83d\udd35 CVE-2024-27564 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ChatGPT, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u0442\u0438\u043f\u0430 SSRF (Server-Side Request Forgery). \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 URL \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f. \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0431\u0430\u0433 \u0438\u0437\u0432\u0435\u0441\u0442\u0435\u043d \u0435\u0449\u0435 \u0441 2023 \u0433\u043e\u0434\u0430, \u043e\u043d \u0432\u0441\u0435 \u0435\u0449\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u0435\u043d. \u0422\u043e\u043b\u044c\u043a\u043e \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044e\u044e \u043d\u0435\u0434\u0435\u043b\u044e \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u0431\u043e\u043b\u0435\u0435 10 \u0442\u044b\u0441\u044f\u0447 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0430\u0442\u0430\u043a \u0441 \u043e\u0434\u043d\u043e\u0433\u043e IP-\u0430\u0434\u0440\u0435\u0441\u0430.\n\n\ud83d\udd35 CVE-2025-25599 \u2014 \u0431\u0430\u0433 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u043e\u043c Bolt CMS, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432. \u0417\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432, \u0438\u0437-\u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0447\u0435\u0440\u0435\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0430\u0432\u0430\u0442\u0430\u0440\u0430 \u0438\u0437 URL.\n\n\ud83d\udd35 CVE-2024-28000 \u2014 \u0430\u043d\u0430\u043b\u0438\u0437 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 LiteSpeed Cache. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u0430\u0439\u0442\u0430.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-16T00:00:51.385247Z"}, {"uuid": "b1354405-bed3-4a23-bef0-aac81285827d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27593", "type": "seen", "source": "https://t.me/purp_sec/399", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435\n\n\ud83d\udd35 CVE-2024-11131 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 \u043a\u0430\u043c\u0435\u0440 Synology BC500, CC400W \u0438 TC500. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\ud83d\udd35 CVE-2025-2000 \u2014 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 Qiskit SDK, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u0434\u043b\u044f \u043a\u0432\u0430\u043d\u0442\u043e\u0432\u044b\u0445 \u0432\u044b\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u0439. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 QPY-\u0444\u0430\u0439\u043b\u043e\u0432 \u2014 \u043f\u0440\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0442\u0430\u043a\u0438\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u044e qiskit.qpy.load() \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\ud83d\udd35 CVE-2025-20014 \u0438 CVE-2025-20061 \u2014 \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 mySCADA myPRO. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u0435\u0442\u044f\u043c.\n\n\ud83d\udd35 CVE-2025-27593, CVE-2025-27594, CVE-2025-27595 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 SICK DL100, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0434\u0430\u0442\u0447\u0438\u043a\u0438 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043a\u0440\u0430\u0436\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439.\n\n\ud83d\udd35 CVE-2025-2263, CVE-2025-2264, CVE-2025-2284 \u2014 \u0431\u0430\u0433\u0438 \u0432 Sante PACS Server, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u043b\u0438 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\ud83d\udd35 CVE-2025-29774 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 xml-crypto, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 XML \u0447\u0435\u0440\u0435\u0437 \u0443\u0437\u043b\u044b SignedInfo. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0435 XML-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u0442\u0430\u043a, \u0447\u0442\u043e\u0431\u044b \u043e\u043d\u043e \u043f\u0440\u043e\u0445\u043e\u0434\u0438\u043b\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043f\u0438\u0441\u0438, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-16T00:00:51.537241Z"}, {"uuid": "f068896d-533f-4bb4-80bb-b857a0029b6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27595", "type": "seen", "source": "https://t.me/purp_sec/399", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435\n\n\ud83d\udd35 CVE-2024-11131 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 \u043a\u0430\u043c\u0435\u0440 Synology BC500, CC400W \u0438 TC500. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\ud83d\udd35 CVE-2025-2000 \u2014 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 Qiskit SDK, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u0434\u043b\u044f \u043a\u0432\u0430\u043d\u0442\u043e\u0432\u044b\u0445 \u0432\u044b\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u0439. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 QPY-\u0444\u0430\u0439\u043b\u043e\u0432 \u2014 \u043f\u0440\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0442\u0430\u043a\u0438\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u044e qiskit.qpy.load() \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\ud83d\udd35 CVE-2025-20014 \u0438 CVE-2025-20061 \u2014 \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 mySCADA myPRO. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u0435\u0442\u044f\u043c.\n\n\ud83d\udd35 CVE-2025-27593, CVE-2025-27594, CVE-2025-27595 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 SICK DL100, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0434\u0430\u0442\u0447\u0438\u043a\u0438 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043a\u0440\u0430\u0436\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439.\n\n\ud83d\udd35 CVE-2025-2263, CVE-2025-2264, CVE-2025-2284 \u2014 \u0431\u0430\u0433\u0438 \u0432 Sante PACS Server, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u043b\u0438 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\ud83d\udd35 CVE-2025-29774 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 xml-crypto, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 XML \u0447\u0435\u0440\u0435\u0437 \u0443\u0437\u043b\u044b SignedInfo. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0435 XML-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u0442\u0430\u043a, \u0447\u0442\u043e\u0431\u044b \u043e\u043d\u043e \u043f\u0440\u043e\u0445\u043e\u0434\u0438\u043b\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043f\u0438\u0441\u0438, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-16T00:00:51.620365Z"}, {"uuid": "18b9c33b-4dfd-4616-8291-60f570ddb20f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27594", "type": "seen", "source": "https://t.me/purp_sec/399", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435\n\n\ud83d\udd35 CVE-2024-11131 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 \u043a\u0430\u043c\u0435\u0440 Synology BC500, CC400W \u0438 TC500. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\ud83d\udd35 CVE-2025-2000 \u2014 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 Qiskit SDK, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u0434\u043b\u044f \u043a\u0432\u0430\u043d\u0442\u043e\u0432\u044b\u0445 \u0432\u044b\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u0439. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 QPY-\u0444\u0430\u0439\u043b\u043e\u0432 \u2014 \u043f\u0440\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0442\u0430\u043a\u0438\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u044e qiskit.qpy.load() \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\ud83d\udd35 CVE-2025-20014 \u0438 CVE-2025-20061 \u2014 \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 mySCADA myPRO. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u0435\u0442\u044f\u043c.\n\n\ud83d\udd35 CVE-2025-27593, CVE-2025-27594, CVE-2025-27595 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 SICK DL100, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0434\u0430\u0442\u0447\u0438\u043a\u0438 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043a\u0440\u0430\u0436\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439.\n\n\ud83d\udd35 CVE-2025-2263, CVE-2025-2264, CVE-2025-2284 \u2014 \u0431\u0430\u0433\u0438 \u0432 Sante PACS Server, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u043b\u0438 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\ud83d\udd35 CVE-2025-29774 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 xml-crypto, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 XML \u0447\u0435\u0440\u0435\u0437 \u0443\u0437\u043b\u044b SignedInfo. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0435 XML-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u0442\u0430\u043a, \u0447\u0442\u043e\u0431\u044b \u043e\u043d\u043e \u043f\u0440\u043e\u0445\u043e\u0434\u0438\u043b\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043f\u0438\u0441\u0438, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-16T00:00:51.741819Z"}, {"uuid": "19771e99-3c4d-4e38-be51-7112d41670fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27888", "type": "seen", "source": "https://t.me/purp_sec/409", "content": "\u041f\u043e\u0434\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-27888 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Apache Druid. \u041e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0442\u0438\u043f\u0430 SSRF (Server-Side Request Forgery) \u0438 XSS (Cross-Site Scripting).\n\n\ud83d\udd35 CVE-2025-2538 \u2014 \u0431\u0430\u0433 \u0432 ArcGIS Enterprise, \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0432\u0435\u0434\u0443\u0449\u0438\u0445 \u0433\u0435\u043e\u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439. \u0421\u0432\u044f\u0437\u0430\u043d \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\ud83d\udd35 CVE-2025-1758 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Kemp LoadMaster (\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430). \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u0432\u044b\u0441\u0448\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\ud83d\udd35 CVE-2025-29783 \u2014 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 vLLM, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0435\u0435 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0435\u0439 \u0441 Mooncake. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u043e ZMQ/TCP.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-16T00:00:51.775370Z"}, {"uuid": "cd2ba8bb-3e80-4ee1-a1ff-4a966e30fb92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://t.me/purp_sec/432", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-2857 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0443 Mozilla \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Windows. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0434\u0435\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0440\u043e\u0432 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u0430\u043a \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435, \u0442\u0430\u043a \u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Firefox (ESR), \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439.\n\n\ud83d\udd35 CVE-2025-2783 \u2014 \u043e\u0447\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0439 \u0431\u0430\u0433, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0434\u0435\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0440\u043e\u0432 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Mojo \u043d\u0430 Windows. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0443 Chrome \u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e.\n\n\ud83d\udd35 CVE-2025-30091 \u2014 \u0431\u0430\u0433 \u0432 MoxieManager, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u0430\u043c\u0438 \u0438 \u043c\u0435\u0434\u0438\u0430, \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u0443\u0435\u043c\u043e\u043c \u0432 PHP \u0438 .NET-\u0441\u0440\u0435\u0434\u044b. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438.\n\n\ud83d\udd35 CVE-2025-26512 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 NetApp SnapCenter, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0430\u0432\u0430 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u0433\u0434\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0439 \u043f\u043b\u0430\u0433\u0438\u043d.\n\n\ud83d\udd35 \u041d\u0430\u0431\u043e\u0440 PoC \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c Ingress-NGINX \u0434\u043b\u044f Kubernetes, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u044f \u043f\u0438\u0441\u0430\u043b \u0440\u0430\u043d\u0435\u0435. \n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-16T00:00:53.138874Z"}, {"uuid": "5e6a86b8-87cd-4ff6-b22a-eee1a884f0f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2704", "type": "seen", "source": "https://t.me/securixy_kz/1134", "content": "#\ufe0f\u20e3 \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 OpenVPN (TLS-crypt-v2) CVE-2025-2704 \n\n\ud83e\udde8 \u0423\u0434\u0430\u043b\u0451\u043d\u043d\u0430\u044f DoS-\u0430\u0442\u0430\u043a\u0430 \u043d\u0430 OpenVPN-\u0441\u0435\u0440\u0432\u0435\u0440 \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0451\u043d\u043d\u044b\u0435 \u0438 \u043f\u0435\u0440\u0435\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0432 \u0440\u0430\u043d\u043d\u0435\u0439 \u0444\u0430\u0437\u0435 TLS-\u0440\u0443\u043a\u043e\u043f\u043e\u0436\u0430\u0442\u0438\u044f.\n\n\ud83d\udccc \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0435\u0440\u0441\u0438\u0438:\n2.6.1 - 2.6.13 (\u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0441 \u0432\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u043c `--tls-crypt-v2`)\n\n\u26a0\ufe0f \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441 \u0432\u0430\u043b\u0438\u0434\u043d\u044b\u043c TLS-\u043a\u043b\u044e\u0447\u043e\u043c \u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0442\u0440\u0430\u0444\u0438\u043a\u0443, \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043a\u0440\u0430\u0448 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0441 ASSERT()-\u043e\u0448\u0438\u0431\u043a\u043e\u0439. \n\n\ud83d\udd27 \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438:\n\u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435\u0441\u044c \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438\n\u0412\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u0435 --tls-crypt-v2, \u0435\u0441\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \n\n\ud83d\udcac \ud83d\udc49 https://securityonline.info/cve-2025-2704-critical-bug-in-openvpn-can-trigger-server-crashes/", "creation_timestamp": "2026-07-12T22:00:07.569981Z"}, {"uuid": "f514341d-bec1-41cf-859e-9470ac1c7471", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27090", "type": "seen", "source": "https://t.me/securixy_kz/1104", "content": "SSRF \u0432 C2 Sliver Teamserver CVE-2025-27090\n\nAffected versions: >= 1.5.26, <= 1.5.42\nPatched versions: 1.5.43\n\nInfo: https://github.com/advisories/GHSA-fh4v-v779-4g2w\n\nPoC: [https://github.com/chebuya/exploits/tree/main/CVE-2025-27090%3A%20Sliver%20C2%20SSRF]", "creation_timestamp": "2026-07-12T22:00:09.314274Z"}, {"uuid": "620d06c0-d34d-4f84-a938-0ac322537696", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://t.me/pleyades_it/11569", "content": "\u26a0\ufe0f Actualiza ya Google Chrome para corregir la #vulnerabilidad #zeroday CVE-2025-2783\nhttps://acortar.link/8DJjhE", "creation_timestamp": "2026-07-12T22:00:14.830333Z"}, {"uuid": "7709684f-ab80-4980-8579-39c850e23631", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2748", "type": "seen", "source": "https://t.me/purp_sec/456", "content": "\u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-2748 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 CMS Kentico Xperience, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u044d\u0441\u043a\u0430\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c XSS-\u0430\u0442\u0430\u043a\u0443 \u0434\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 (RCE).\n\n\ud83d\udd35 CVE-2025-1449 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Verve Asset Manager. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0435 (shell) \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\ud83d\udd35 CVE-2025-22231 \u2014 \u0431\u0430\u0433 \u0432 VMware Aria Operations (\u0440\u0430\u043d\u0435\u0435 VMware vRealize Operations), \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\ud83d\udd35 CVE-2025-24085 \u2014 use after free (UAF) \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Apple, \u0432\u043a\u043b\u044e\u0447\u0430\u044f VisionOS, iOS, iPadOS, macOS, watchOS \u0438 tvOS. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u043a\u0440\u0430\u0436\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e.\n\n\ud83d\udd35 CVE-2025-30065 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 parquet-avro Apache Parquet, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043d\u0435\u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35 CVE-2024-13553 \u2014 \u0431\u0430\u0433 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 SMS Alert Order Notifications / WooCommerce \u0434\u043b\u044f WordPress. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0430\u043a\u043a\u0430\u0443\u043d\u0442, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 Host.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-16T00:00:53.606038Z"}, {"uuid": "f741f5de-f85d-45c6-a87a-1cbb1f765ee7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27090", "type": "seen", "source": "https://t.me/securixy_kz/1104", "content": "SSRF \u0432 C2 Sliver Teamserver CVE-2025-27090\n\nAffected versions: >= 1.5.26, <= 1.5.42\nPatched versions: 1.5.43\n\nInfo: https://github.com/advisories/GHSA-fh4v-v779-4g2w\n\nPoC: [https://github.com/chebuya/exploits/tree/main/CVE-2025-27090%3A%20Sliver%20C2%20SSRF]", "creation_timestamp": "2026-07-13T00:00:33.809941Z"}, {"uuid": "e4fcd603-3676-4197-a566-4427ddb6a71f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2704", "type": "seen", "source": "https://t.me/securixy_kz/1134", "content": "#\ufe0f\u20e3 \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 OpenVPN (TLS-crypt-v2) CVE-2025-2704 \n\n\ud83e\udde8 \u0423\u0434\u0430\u043b\u0451\u043d\u043d\u0430\u044f DoS-\u0430\u0442\u0430\u043a\u0430 \u043d\u0430 OpenVPN-\u0441\u0435\u0440\u0432\u0435\u0440 \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0451\u043d\u043d\u044b\u0435 \u0438 \u043f\u0435\u0440\u0435\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0432 \u0440\u0430\u043d\u043d\u0435\u0439 \u0444\u0430\u0437\u0435 TLS-\u0440\u0443\u043a\u043e\u043f\u043e\u0436\u0430\u0442\u0438\u044f.\n\n\ud83d\udccc \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0435\u0440\u0441\u0438\u0438:\n2.6.1 - 2.6.13 (\u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0441 \u0432\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u043c `--tls-crypt-v2`)\n\n\u26a0\ufe0f \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441 \u0432\u0430\u043b\u0438\u0434\u043d\u044b\u043c TLS-\u043a\u043b\u044e\u0447\u043e\u043c \u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0442\u0440\u0430\u0444\u0438\u043a\u0443, \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043a\u0440\u0430\u0448 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0441 ASSERT()-\u043e\u0448\u0438\u0431\u043a\u043e\u0439. \n\n\ud83d\udd27 \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438:\n\u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435\u0441\u044c \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438\n\u0412\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u0435 --tls-crypt-v2, \u0435\u0441\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \n\n\ud83d\udcac \ud83d\udc49 https://securityonline.info/cve-2025-2704-critical-bug-in-openvpn-can-trigger-server-crashes/", "creation_timestamp": "2026-07-13T00:00:18.513725Z"}, {"uuid": "83eba556-eb0d-48ff-b3ec-135257ababc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://t.me/pleyades_it/11569", "content": "\u26a0\ufe0f Actualiza ya Google Chrome para corregir la #vulnerabilidad #zeroday CVE-2025-2783\nhttps://acortar.link/8DJjhE", "creation_timestamp": "2026-07-13T00:00:38.700368Z"}, {"uuid": "e706c627-fd89-4a6c-9866-0e1b463df35d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27590", "type": "seen", "source": "https://t.me/purp_sec/499", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-27590 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 Oxidized Web, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e Linux, \u043f\u043e\u0434 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-3114 \u0438 CVE-2025-3115 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0431\u0430\u0433\u0438 \u0432 Spotfire \u043e\u0442 Cloud Software Group. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0441 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c\u0441\u044f \u0431\u0435\u0437 \u0434\u043e\u043b\u0436\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0443\u044e \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u044e.\n\n\ud83d\udd35 CVE-2025-32754 \u0438 CVE-2025-32755 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Docker-\u043e\u0431\u0440\u0430\u0437\u0430\u0445 Jenkins, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0434\u043b\u044f SSH-\u0430\u0433\u0435\u043d\u0442\u043e\u0432. \u0421\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u044b\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c SSH-\u0445\u043e\u0441\u0442-\u043a\u043b\u044e\u0447\u0435\u0439, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a MITM-\u0430\u0442\u0430\u043a\u0430\u043c \u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432.\n\n\ud83d\udd35 CVE-2024-48887 \u2014 \u0441\u043d\u043e\u0432\u0430 \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0435\u043c\u0441\u044f \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Fortinet, \u0432 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 FortiSwitch. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0440\u0438 \u0441\u043c\u0435\u043d\u0435 \u043f\u0430\u0440\u043e\u043b\u044f \u0447\u0435\u0440\u0435\u0437 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 FortiSwitch. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 endpoint set_password \u0438 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0431\u0435\u0437 \u0432\u0445\u043e\u0434\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438 \u0431\u0435\u0437 \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u044e\u0437\u0435\u0440\u0430.\n\n\ud83d\udd35 CVE-2024-53197 \u0438 CVE-2024-53150 \u2014 \u0434\u0432\u0435 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 CISA. \u041e\u0431\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u044f\u0434\u0440\u043e\u043c Linux \u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-16T00:00:54.829006Z"}, {"uuid": "0e3231d6-d29d-45ba-8e99-32e82688145d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27520", "type": "seen", "source": "https://t.me/purp_sec/504", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-3439 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Everest Forms \u0434\u043b\u044f WordPress, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c PHP-\u043e\u0431\u044a\u0435\u043a\u0442\u044b. \u041c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE \u0438\u043b\u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u0430\u0442\u0430\u043a\u0430\u043c, \u0435\u0441\u043b\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 POP (Property-Oriented Programming).\n\n\ud83d\udd35 CVE-2025-27520 \u2014 \u0431\u0430\u0433 \u0432 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 BentoML, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 deserialize_value() \u0444\u0430\u0439\u043b\u0430 serde.py. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043d\u0430 \u043b\u044e\u0431\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 HTTP-\u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442 BentoML-\u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u0418\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u0434\u043e\u043b\u0436\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438, \u0434\u0430\u043d\u043d\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u044b, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35 CVE-2025-32896 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Apache SeaTunnel. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0447\u0438\u0442\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e Java-\u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432.\n\n\ud83d\udd35 CVE-2024-7971 \u2014 PoC \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u0434\u0432\u0438\u0436\u043a\u043e\u043c JavaScript V8 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Google Chrome. CVE \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b \u0442\u0438\u043f\u043e\u0432 (Type Confusion Vulnerability) \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0432\u0435\u0431-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-16T00:00:55.055075Z"}, {"uuid": "99cba486-89f4-4850-9dce-656e9136da2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://t.me/GithubRedTeam/92559", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-40453\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oscerd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-08 18:11:13\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nReproducer for CVE-2026-40453: Apache Camel case-variant Camel header injection (incomplete fix of CVE-2025-27636)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:07.323859Z"}, {"uuid": "7c81d142-0e7d-4055-9b45-61bfce0065b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://t.me/GithubRedTeam/92559", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-40453\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oscerd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-08 18:11:13\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nReproducer for CVE-2026-40453: Apache Camel case-variant Camel header injection (incomplete fix of CVE-2025-27636)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:10.618818Z"}, {"uuid": "c4176b14-ee38-4493-8904-807c99afd4c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://t.me/pleyades_it/11569", "content": "\u26a0\ufe0f Actualiza ya Google Chrome para corregir la #vulnerabilidad #zeroday CVE-2025-2783\nhttps://acortar.link/8DJjhE", "creation_timestamp": "2026-07-14T00:00:53.467507Z"}, {"uuid": "d91917e3-cd41-4f40-b224-afd9c21d6b31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27090", "type": "published-proof-of-concept", "source": "https://t.me/securixy_kz/1104", "content": "SSRF \u0432 C2 Sliver Teamserver CVE-2025-27090\n\nAffected versions: >= 1.5.26, <= 1.5.42\nPatched versions: 1.5.43\n\nInfo: https://github.com/advisories/GHSA-fh4v-v779-4g2w\n\nPoC: [https://github.com/chebuya/exploits/tree/main/CVE-2025-27090%3A%20Sliver%20C2%20SSRF]", "creation_timestamp": "2026-07-14T00:01:01.597457Z"}, {"uuid": "b9be7f66-e0b3-4c7e-8c25-1674695e38ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2704", "type": "published-proof-of-concept", "source": "https://t.me/securixy_kz/1134", "content": "#\ufe0f\u20e3 \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 OpenVPN (TLS-crypt-v2) CVE-2025-2704 \n\n\ud83e\udde8 \u0423\u0434\u0430\u043b\u0451\u043d\u043d\u0430\u044f DoS-\u0430\u0442\u0430\u043a\u0430 \u043d\u0430 OpenVPN-\u0441\u0435\u0440\u0432\u0435\u0440 \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0451\u043d\u043d\u044b\u0435 \u0438 \u043f\u0435\u0440\u0435\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0432 \u0440\u0430\u043d\u043d\u0435\u0439 \u0444\u0430\u0437\u0435 TLS-\u0440\u0443\u043a\u043e\u043f\u043e\u0436\u0430\u0442\u0438\u044f.\n\n\ud83d\udccc \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0435\u0440\u0441\u0438\u0438:\n2.6.1 - 2.6.13 (\u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0441 \u0432\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u043c `--tls-crypt-v2`)\n\n\u26a0\ufe0f \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441 \u0432\u0430\u043b\u0438\u0434\u043d\u044b\u043c TLS-\u043a\u043b\u044e\u0447\u043e\u043c \u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0442\u0440\u0430\u0444\u0438\u043a\u0443, \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043a\u0440\u0430\u0448 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0441 ASSERT()-\u043e\u0448\u0438\u0431\u043a\u043e\u0439. \n\n\ud83d\udd27 \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438:\n\u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435\u0441\u044c \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438\n\u0412\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u0435 --tls-crypt-v2, \u0435\u0441\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \n\n\ud83d\udcac \ud83d\udc49 https://securityonline.info/cve-2025-2704-critical-bug-in-openvpn-can-trigger-server-crashes/", "creation_timestamp": "2026-07-14T00:01:01.886197Z"}, {"uuid": "332901dd-b6c7-42aa-b939-b0a837e0b2dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27505", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-18)", "content": "", "creation_timestamp": "2026-08-19T10:15:18.752175Z"}, {"uuid": "a9f934d9-601d-4668-ae6f-2ca20a9bbb6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92559", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-40453\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oscerd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-08 18:11:13\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nReproducer for CVE-2026-40453: Apache Camel case-variant Camel header injection (incomplete fix of CVE-2025-27636)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:33.057112Z"}, {"uuid": "7c99d3cc-f465-43fb-aecd-9d7e6d3cb656", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-14)", "content": "", "creation_timestamp": "2026-07-15T10:00:03.228618Z"}, {"uuid": "ac6cc9a5-f228-4ed8-8c3d-be0a0fbdfce0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "seen", "source": "Telegram/FMxKlI5Q8oe-wqfdJhLf519zmPU2wTxgtOLa-sFM77th6qo", "content": "", "creation_timestamp": "2026-08-27T12:00:09.209637Z"}, {"uuid": "cd78afea-0b23-4ef2-95db-b5d21955c043", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "seen", "source": "Telegram/gEg0EOaWFFZnEfHhBHmpZpiTrHvldsjFXSF402VZoO1TzNg", "content": "", "creation_timestamp": "2026-07-16T19:00:06.903642Z"}, {"uuid": "3f9c9c71-9001-4ed7-bd0a-859f0fba11a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "Telegram/WJgDEVvvwZT8TXY2pma_02HCN-ESFf4o1lNskkGLthlTjbc", "content": "", "creation_timestamp": "2026-07-16T19:00:16.658030Z"}, {"uuid": "17bd31a1-a68e-4cab-804c-8b7e742f0c47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "Telegram/FdcDblJgpr4Bk1hzBo52CEMZWjwW5t7MZ6W5ZLgqcoUP2nQ", "content": "", "creation_timestamp": "2026-07-16T19:00:31.910028Z"}, {"uuid": "6b244e7a-c001-4349-8181-784515821723", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "published-proof-of-concept", "source": "Telegram/gEg0EOaWFFZnEfHhBHmpZpiTrHvldsjFXSF402VZoO1TzNg", "content": "", "creation_timestamp": "2026-07-17T00:00:11.301282Z"}, {"uuid": "407068cd-0f17-4996-9c12-e9b80e06dd1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "Telegram/WJgDEVvvwZT8TXY2pma_02HCN-ESFf4o1lNskkGLthlTjbc", "content": "", "creation_timestamp": "2026-07-17T00:00:32.094372Z"}, {"uuid": "9a8656c3-5e00-4ac7-9288-dfda61fe4fda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "Telegram/FdcDblJgpr4Bk1hzBo52CEMZWjwW5t7MZ6W5ZLgqcoUP2nQ", "content": "", "creation_timestamp": "2026-07-17T00:00:48.831762Z"}, {"uuid": "2cfee81e-5bef-4910-a747-abd7b8e7b2b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "seen", "source": "https://t.me/rtinfobez/251", "content": "\u041a\u0438\u0431\u0435\u0440\u0443\u0433\u0440\u043e\u0437\u0430 \u0438\u043b\u0438 \u0444\u0430\u043d\u0442\u0430\u0437\u0438\u044f?\n\n\u041d\u0438\u0436\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u0434\u0432\u0430 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a. \u041e\u0434\u0438\u043d \u0438\u0437 \u043d\u0438\u0445 \u0443\u0436\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u0430\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0430 \u0432\u0442\u043e\u0440\u043e\u0439 \u2014 \u043f\u043e\u043a\u0430 \u043b\u0438\u0448\u044c \u043f\u043b\u043e\u0434 \u0432\u043e\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f. \u0421\u043c\u043e\u0436\u0435\u0442\u0435 \u0443\u0433\u0430\u0434\u0430\u0442\u044c, \u043a\u0430\u043a\u043e\u0439 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0439 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0438\u0439?\n\n\u0421\u0446\u0435\u043d\u0430\u0440\u0438\u0439 1: \u041c\u0438\u043b\u043b\u0438\u0430\u0440\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439 \u2013 \u0431\u044d\u043a\u0434\u043e\u0440 \u0432 Bluetooth-\u0447\u0438\u043f\u0435\n1\ufe0f\u20e3 \u0426\u0435\u043b\u044c \u0430\u0442\u0430\u043a\u0438: \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0433\u0430\u0434\u0436\u0435\u0442\u0430\u043c\u0438 \u0447\u0435\u0440\u0435\u0437 \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n2\ufe0f\u20e3 \u041c\u0435\u0442\u043e\u0434: \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u043c\u0438\u043a\u0440\u043e\u0447\u0438\u043f\u0435 ESP32 \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Espressif \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u0441\u043a\u0440\u044b\u0442\u044b\u0439 \u043d\u0430\u0431\u043e\u0440 \u0438\u0437 29 \u043a\u043e\u043c\u0430\u043d\u0434, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c Bluetooth-\u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n3\ufe0f\u20e3 \u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f: \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u043b\u043a\u0438 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043a\u0440\u0430\u0436\u0430 \u0434\u0430\u043d\u043d\u044b\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0447\u0438\u043f\u0430 \u043a\u0430\u043a \u0442\u043e\u0447\u043a\u0438 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0432 \u0441\u0435\u0442\u0438, \u0437\u0430\u043a\u043b\u0430\u0434\u043a\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0414\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0434\u0435\u0442\u0430\u043b\u0438:\n\ud83d\udcce\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043b\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Tarlogic Security, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0432 \u0435\u0433\u043e \u043d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 RootedCON \u0432 \u041c\u0430\u0434\u0440\u0438\u0434\u0435.\n\ud83d\udcce\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c MAC-\u0430\u0434\u0440\u0435\u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u043f\u0430\u043c\u044f\u0442\u044c, \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f.\n\ud83d\udcce\u0423\u0433\u0440\u043e\u0437\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u2013 \u043e\u0442 \u0443\u043c\u043d\u044b\u0445 \u0437\u0430\u043c\u043a\u043e\u0432 \u0434\u043e \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u043e\u0433\u043e \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f.\n\ud83d\udcce\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2025-27840, \u043d\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u043f\u043e\u043a\u0430 \u043d\u0435 \u0434\u0430\u043b \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0435\u0432.\n\n\n\u0421\u0446\u0435\u043d\u0430\u0440\u0438\u0439 2: \u00ab\u0418\u0441\u043a\u0443\u0441\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u043e\u0431\u0440\u0430\u0437\u00bb \u2014 \u0430\u0442\u0430\u043a\u0430 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0440\u0430\u0441\u043f\u043e\u0437\u043d\u0430\u0432\u0430\u043d\u0438\u044f \u043b\u0438\u0446 \u0447\u0435\u0440\u0435\u0437 \u0441\u0438\u043d\u0442\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0444\u043e\u0442\u043e\n1\ufe0f\u20e3 \u0426\u0435\u043b\u044c \u0430\u0442\u0430\u043a\u0438: \u043e\u0431\u043c\u0430\u043d \u0441\u0438\u0441\u0442\u0435\u043c \u0440\u0430\u0441\u043f\u043e\u0437\u043d\u0430\u0432\u0430\u043d\u0438\u044f \u043b\u0438\u0446 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0438\u0441\u043a\u0443\u0441\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0439.\n2\ufe0f\u20e3 \u041c\u0435\u0442\u043e\u0434: \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043d\u0435\u0439\u0440\u043e\u0441\u0435\u0442\u0438 \u0434\u043b\u044f \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u0441\u0438\u043d\u0442\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0439 \u043b\u0438\u0446, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u044b\u0433\u043b\u044f\u0434\u044f\u0442 \u0438\u0434\u0435\u043d\u0442\u0438\u0447\u043d\u043e \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u043c \u043b\u044e\u0434\u044f\u043c. \u042d\u0442\u0438 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0437\u0430\u0442\u0435\u043c \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442\u0441\u044f \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0441\u0438\u0441\u0442\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0440\u0430\u0441\u043f\u043e\u0437\u043d\u0430\u0432\u0430\u043d\u0438\u0435 \u043b\u0438\u0446, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0432 \u0430\u044d\u0440\u043e\u043f\u043e\u0440\u0442\u0430\u0445 \u0438\u043b\u0438 \u043d\u0430 \u043f\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u043d\u044b\u0445 \u043f\u043e\u0441\u0442\u0430\u0445.\n3\ufe0f\u20e3 \u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f: \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u043c \u0437\u043e\u043d\u0430\u043c, \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u043b\u0438\u0447\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0434\u043b\u044f \u0444\u0438\u0448\u0438\u043d\u0433\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0444\u043e\u0440\u043c \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u0442\u0432\u0430.\n\n\u0414\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0434\u0435\u0442\u0430\u043b\u0438:\n\ud83d\udcce\u0413\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u044f \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0439 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0433\u043b\u0443\u0431\u043e\u043a\u0438\u0445 \u043d\u0435\u0439\u0440\u043e\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0444\u043e\u0442\u043e \u043f\u043e\u0447\u0442\u0438 \u043d\u0435\u043e\u0442\u043b\u0438\u0447\u0438\u043c\u044b\u043c\u0438 \u043e\u0442 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445.\n\ud83d\udcce\u042d\u0442\u0430 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0441\u0438\u0441\u0442\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u043e \u0438 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0444\u0430\u043b\u044c\u0448\u0438\u0432\u044b\u0445 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439, \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u0441 \u043f\u043e\u0434\u043c\u0435\u043d\u043e\u0439 \u043b\u0438\u0447\u043d\u043e\u0441\u0442\u0438.\n\n\n\u041a\u0430\u043a \u0434\u0443\u043c\u0430\u0435\u0442\u0435, \u043a\u0430\u043a\u043e\u0439 \u0438\u0437 \u044d\u0442\u0438\u0445 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 \u0443\u0436\u0435 \u0441\u0442\u0430\u043b \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e?\n\n\ud83d\udc9b \u2014 \u041f\u0435\u0440\u0432\u044b\u0439 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0439\n\ud83d\udd25 \u2014 \u0412\u0442\u043e\u0440\u043e\u0439 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0439\n\ud83c\udf89 \u2014 \u041e\u0431\u0430 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f\n\n\n#\u0421\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435_\u0432\u0435\u043b\u0438", "creation_timestamp": "2026-07-17T11:00:04.446153Z"}, {"uuid": "62fb46f7-3718-4323-befc-014f2045e6de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "exploited", "source": "https://t.me/revs1de_channel/103", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Android \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u2014 CVE-2025-27363\n\n\u0412 \u043c\u0430\u0439\u0441\u043a\u043e\u043c \u043f\u0430\u0442\u0447\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Google \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 57 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043d\u043e \u043e\u0434\u043d\u0430 \u0438\u0437 \u043d\u0438\u0445 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u0430 \u2014 CVE-2025-27363.\n\u042d\u0442\u043e RCE (\u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430) \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 FreeType, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 Android-\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0434\u043b\u044f \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433\u0430 \u0448\u0440\u0438\u0444\u0442\u043e\u0432.\n\n\u0427\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442:\n\u2014 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0431\u0435\u0437 \u043f\u0440\u0430\u0432 root \u0438 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\u2014 \u0414\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0438\u043b\u0438 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u043b\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0448\u0440\u0438\u0444\u0442 (TrueType GX / variable font).\n\u2014 \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u2014 \u043e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u043f\u0430\u043c\u044f\u0442\u0438 (heap out-of-bounds write).\n\u2014 \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0443\u0436\u0435 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435 (\u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Google).\n\n\u041a\u0442\u043e \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439:\n\u2014 \u0412\u0441\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043d\u0430 Android 13 \u0438 14 \u0441 \u043f\u0430\u0442\u0447\u0435\u043c \u0434\u043e 2025-05-05.\n\u2014 \u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0442\u0435, \u0433\u0434\u0435 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Google Play System.\n\u2014 \u0410\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e \u0434\u043b\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442 OTA-\u043f\u0430\u0442\u0447\u0438.\n\n\u0427\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a:\n\u2014 \u041f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u043c \u0432 Android (\u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c).\n\u2014 \u0417\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0430\u0442\u0430\u043a \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\u2014 \u0418\u0437\u0432\u043b\u0435\u0447\u044c \u0434\u0430\u043d\u043d\u044b\u0435, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0431\u0435\u043a\u0434\u043e\u0440, \u0438\u043b\u0438 \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u0443 SELinux.\n\n\u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c:\n\u2014 \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043c\u0430\u0439\u0441\u043a\u0438\u0439 \u043f\u0430\u0442\u0447 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (05.05.2025 \u0438\u043b\u0438 \u043d\u043e\u0432\u0435\u0435).\n\u2014 \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0432\u043a\u043b\u044e\u0447\u0451\u043d \u043b\u0438 Google Play Protect.\n\u2014 \u041d\u0435 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b.\n\u2014 \u0417\u0430\u043f\u0440\u0435\u0442\u0438\u0442\u044c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 APK \u0438\u0437 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432.\n\n\u0422\u0430\u043a \u0447\u0442\u043e, \u0435\u0441\u043b\u0438 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u043b\u0438 \u0441\u0432\u043e\u0438 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u044b \u043d\u0430 Android \u2014 \u0441\u0430\u043c\u043e\u0435 \u0432\u0440\u0435\u043c\u044f. \u0410 \u0435\u0449\u0451 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u0442\u0435 \u0437\u043d\u0430\u043a\u043e\u043c\u044b\u0445.\n\n\ud83d\udcce \u0411\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\ud83d\udcce \u0410\u043d\u0430\u043b\u0438\u0437 \u0430\u0442\u0430\u043a\u0438: GBHackers", "creation_timestamp": "2026-07-17T11:00:05.959746Z"}, {"uuid": "87f1c62e-d292-47e9-aabc-e5436226f576", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "seen", "source": "https://t.me/rtinfobez/251", "content": "\u041a\u0438\u0431\u0435\u0440\u0443\u0433\u0440\u043e\u0437\u0430 \u0438\u043b\u0438 \u0444\u0430\u043d\u0442\u0430\u0437\u0438\u044f?\n\n\u041d\u0438\u0436\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u0434\u0432\u0430 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a. \u041e\u0434\u0438\u043d \u0438\u0437 \u043d\u0438\u0445 \u0443\u0436\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u0430\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0430 \u0432\u0442\u043e\u0440\u043e\u0439 \u2014 \u043f\u043e\u043a\u0430 \u043b\u0438\u0448\u044c \u043f\u043b\u043e\u0434 \u0432\u043e\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f. \u0421\u043c\u043e\u0436\u0435\u0442\u0435 \u0443\u0433\u0430\u0434\u0430\u0442\u044c, \u043a\u0430\u043a\u043e\u0439 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0439 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0438\u0439?\n\n\u0421\u0446\u0435\u043d\u0430\u0440\u0438\u0439 1: \u041c\u0438\u043b\u043b\u0438\u0430\u0440\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439 \u2013 \u0431\u044d\u043a\u0434\u043e\u0440 \u0432 Bluetooth-\u0447\u0438\u043f\u0435\n1\ufe0f\u20e3 \u0426\u0435\u043b\u044c \u0430\u0442\u0430\u043a\u0438: \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0433\u0430\u0434\u0436\u0435\u0442\u0430\u043c\u0438 \u0447\u0435\u0440\u0435\u0437 \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n2\ufe0f\u20e3 \u041c\u0435\u0442\u043e\u0434: \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u043c\u0438\u043a\u0440\u043e\u0447\u0438\u043f\u0435 ESP32 \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Espressif \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u0441\u043a\u0440\u044b\u0442\u044b\u0439 \u043d\u0430\u0431\u043e\u0440 \u0438\u0437 29 \u043a\u043e\u043c\u0430\u043d\u0434, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c Bluetooth-\u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n3\ufe0f\u20e3 \u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f: \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u043b\u043a\u0438 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043a\u0440\u0430\u0436\u0430 \u0434\u0430\u043d\u043d\u044b\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0447\u0438\u043f\u0430 \u043a\u0430\u043a \u0442\u043e\u0447\u043a\u0438 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0432 \u0441\u0435\u0442\u0438, \u0437\u0430\u043a\u043b\u0430\u0434\u043a\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0414\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0434\u0435\u0442\u0430\u043b\u0438:\n\ud83d\udcce\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043b\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Tarlogic Security, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0432 \u0435\u0433\u043e \u043d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 RootedCON \u0432 \u041c\u0430\u0434\u0440\u0438\u0434\u0435.\n\ud83d\udcce\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c MAC-\u0430\u0434\u0440\u0435\u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u043f\u0430\u043c\u044f\u0442\u044c, \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f.\n\ud83d\udcce\u0423\u0433\u0440\u043e\u0437\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u2013 \u043e\u0442 \u0443\u043c\u043d\u044b\u0445 \u0437\u0430\u043c\u043a\u043e\u0432 \u0434\u043e \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u043e\u0433\u043e \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f.\n\ud83d\udcce\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2025-27840, \u043d\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u043f\u043e\u043a\u0430 \u043d\u0435 \u0434\u0430\u043b \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0435\u0432.\n\n\n\u0421\u0446\u0435\u043d\u0430\u0440\u0438\u0439 2: \u00ab\u0418\u0441\u043a\u0443\u0441\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u043e\u0431\u0440\u0430\u0437\u00bb \u2014 \u0430\u0442\u0430\u043a\u0430 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0440\u0430\u0441\u043f\u043e\u0437\u043d\u0430\u0432\u0430\u043d\u0438\u044f \u043b\u0438\u0446 \u0447\u0435\u0440\u0435\u0437 \u0441\u0438\u043d\u0442\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0444\u043e\u0442\u043e\n1\ufe0f\u20e3 \u0426\u0435\u043b\u044c \u0430\u0442\u0430\u043a\u0438: \u043e\u0431\u043c\u0430\u043d \u0441\u0438\u0441\u0442\u0435\u043c \u0440\u0430\u0441\u043f\u043e\u0437\u043d\u0430\u0432\u0430\u043d\u0438\u044f \u043b\u0438\u0446 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0438\u0441\u043a\u0443\u0441\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0439.\n2\ufe0f\u20e3 \u041c\u0435\u0442\u043e\u0434: \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043d\u0435\u0439\u0440\u043e\u0441\u0435\u0442\u0438 \u0434\u043b\u044f \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u0441\u0438\u043d\u0442\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0439 \u043b\u0438\u0446, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u044b\u0433\u043b\u044f\u0434\u044f\u0442 \u0438\u0434\u0435\u043d\u0442\u0438\u0447\u043d\u043e \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u043c \u043b\u044e\u0434\u044f\u043c. \u042d\u0442\u0438 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0437\u0430\u0442\u0435\u043c \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442\u0441\u044f \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0441\u0438\u0441\u0442\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0440\u0430\u0441\u043f\u043e\u0437\u043d\u0430\u0432\u0430\u043d\u0438\u0435 \u043b\u0438\u0446, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0432 \u0430\u044d\u0440\u043e\u043f\u043e\u0440\u0442\u0430\u0445 \u0438\u043b\u0438 \u043d\u0430 \u043f\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u043d\u044b\u0445 \u043f\u043e\u0441\u0442\u0430\u0445.\n3\ufe0f\u20e3 \u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f: \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u043c \u0437\u043e\u043d\u0430\u043c, \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u043b\u0438\u0447\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0434\u043b\u044f \u0444\u0438\u0448\u0438\u043d\u0433\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0444\u043e\u0440\u043c \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u0442\u0432\u0430.\n\n\u0414\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0434\u0435\u0442\u0430\u043b\u0438:\n\ud83d\udcce\u0413\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u044f \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0439 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0433\u043b\u0443\u0431\u043e\u043a\u0438\u0445 \u043d\u0435\u0439\u0440\u043e\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0444\u043e\u0442\u043e \u043f\u043e\u0447\u0442\u0438 \u043d\u0435\u043e\u0442\u043b\u0438\u0447\u0438\u043c\u044b\u043c\u0438 \u043e\u0442 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445.\n\ud83d\udcce\u042d\u0442\u0430 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0441\u0438\u0441\u0442\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u043e \u0438 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0444\u0430\u043b\u044c\u0448\u0438\u0432\u044b\u0445 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439, \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u0441 \u043f\u043e\u0434\u043c\u0435\u043d\u043e\u0439 \u043b\u0438\u0447\u043d\u043e\u0441\u0442\u0438.\n\n\n\u041a\u0430\u043a \u0434\u0443\u043c\u0430\u0435\u0442\u0435, \u043a\u0430\u043a\u043e\u0439 \u0438\u0437 \u044d\u0442\u0438\u0445 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 \u0443\u0436\u0435 \u0441\u0442\u0430\u043b \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e?\n\n\ud83d\udc9b \u2014 \u041f\u0435\u0440\u0432\u044b\u0439 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0439\n\ud83d\udd25 \u2014 \u0412\u0442\u043e\u0440\u043e\u0439 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0439\n\ud83c\udf89 \u2014 \u041e\u0431\u0430 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f\n\n\n#\u0421\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435_\u0432\u0435\u043b\u0438", "creation_timestamp": "2026-07-18T00:00:31.126453Z"}, {"uuid": "55b32f67-3b03-49d3-8f7d-b1302debab73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "exploited", "source": "https://t.me/revs1de_channel/103", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Android \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u2014 CVE-2025-27363\n\n\u0412 \u043c\u0430\u0439\u0441\u043a\u043e\u043c \u043f\u0430\u0442\u0447\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Google \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 57 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043d\u043e \u043e\u0434\u043d\u0430 \u0438\u0437 \u043d\u0438\u0445 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u0430 \u2014 CVE-2025-27363.\n\u042d\u0442\u043e RCE (\u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430) \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 FreeType, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 Android-\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0434\u043b\u044f \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433\u0430 \u0448\u0440\u0438\u0444\u0442\u043e\u0432.\n\n\u0427\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442:\n\u2014 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0431\u0435\u0437 \u043f\u0440\u0430\u0432 root \u0438 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\u2014 \u0414\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0438\u043b\u0438 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u043b\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0448\u0440\u0438\u0444\u0442 (TrueType GX / variable font).\n\u2014 \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u2014 \u043e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u043f\u0430\u043c\u044f\u0442\u0438 (heap out-of-bounds write).\n\u2014 \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0443\u0436\u0435 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435 (\u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Google).\n\n\u041a\u0442\u043e \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439:\n\u2014 \u0412\u0441\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043d\u0430 Android 13 \u0438 14 \u0441 \u043f\u0430\u0442\u0447\u0435\u043c \u0434\u043e 2025-05-05.\n\u2014 \u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0442\u0435, \u0433\u0434\u0435 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Google Play System.\n\u2014 \u0410\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e \u0434\u043b\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442 OTA-\u043f\u0430\u0442\u0447\u0438.\n\n\u0427\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a:\n\u2014 \u041f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u043c \u0432 Android (\u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c).\n\u2014 \u0417\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0430\u0442\u0430\u043a \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\u2014 \u0418\u0437\u0432\u043b\u0435\u0447\u044c \u0434\u0430\u043d\u043d\u044b\u0435, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0431\u0435\u043a\u0434\u043e\u0440, \u0438\u043b\u0438 \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u0443 SELinux.\n\n\u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c:\n\u2014 \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043c\u0430\u0439\u0441\u043a\u0438\u0439 \u043f\u0430\u0442\u0447 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (05.05.2025 \u0438\u043b\u0438 \u043d\u043e\u0432\u0435\u0435).\n\u2014 \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0432\u043a\u043b\u044e\u0447\u0451\u043d \u043b\u0438 Google Play Protect.\n\u2014 \u041d\u0435 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b.\n\u2014 \u0417\u0430\u043f\u0440\u0435\u0442\u0438\u0442\u044c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 APK \u0438\u0437 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432.\n\n\u0422\u0430\u043a \u0447\u0442\u043e, \u0435\u0441\u043b\u0438 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u043b\u0438 \u0441\u0432\u043e\u0438 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u044b \u043d\u0430 Android \u2014 \u0441\u0430\u043c\u043e\u0435 \u0432\u0440\u0435\u043c\u044f. \u0410 \u0435\u0449\u0451 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u0442\u0435 \u0437\u043d\u0430\u043a\u043e\u043c\u044b\u0445.\n\n\ud83d\udcce \u0411\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\ud83d\udcce \u0410\u043d\u0430\u043b\u0438\u0437 \u0430\u0442\u0430\u043a\u0438: GBHackers", "creation_timestamp": "2026-07-18T00:00:33.147676Z"}, {"uuid": "2a708e00-aee5-4397-8580-ea3d9905fe48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "published-proof-of-concept", "source": "Telegram/WJgDEVvvwZT8TXY2pma_02HCN-ESFf4o1lNskkGLthlTjbc", "content": "", "creation_timestamp": "2026-07-18T00:00:40.734545Z"}, {"uuid": "4b6d1e11-1c7e-4b3e-9633-816e278f8e50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "published-proof-of-concept", "source": "Telegram/FdcDblJgpr4Bk1hzBo52CEMZWjwW5t7MZ6W5ZLgqcoUP2nQ", "content": "", "creation_timestamp": "2026-07-18T05:00:04.073036Z"}, {"uuid": "a99e4822-029b-4bde-b303-61fb1b399ab5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "published-proof-of-concept", "source": "Telegram/FdcDblJgpr4Bk1hzBo52CEMZWjwW5t7MZ6W5ZLgqcoUP2nQ", "content": "", "creation_timestamp": "2026-07-19T00:00:29.023112Z"}, {"uuid": "449b895b-db0a-4328-8468-16145012d3f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27237", "type": "seen", "source": "https://t.me/proxy_bar/3100", "content": "CVE-2025-27237 \n*\nZabbix LPE PoC", "creation_timestamp": "2026-07-20T19:00:08.084012Z"}, {"uuid": "39249e44-b42e-40dc-8e83-ebb1219f4a5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27890", "type": "seen", "source": "Telegram/0Lzh2WjQOWsuTydOW_ekHZzZKDiwWQ3j_cpMbWJHlr9U_UA", "content": "", "creation_timestamp": "2026-08-24T21:00:04.967255Z"}, {"uuid": "b439f7af-ad08-44d0-84b7-ef3d367e143e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27415", "type": "seen", "source": "https://t.me/pphm_HackerNews/227", "content": "JavaScript Framework Under Scrutiny: Researchers Reveal Malicious Caching Exploit\n\nA recently disclosed security flaw, identified as CVE-2025-27415, is sparking concern among Nuxt users. The vulnerability can open the door for cache poisoning attacks, allowing adversaries to inject malicious content or alter legitimate data. Given Nuxt\u2019s popularity in building modern web interfaces, developers and organizations are urged to investigate their configurations and implement necessary fixes.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-20T22:00:03.103004Z"}, {"uuid": "95aad124-2a8b-467c-863e-2e07f0e503ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27888", "type": "seen", "source": "https://t.me/pphm_HackerNews/224", "content": "Real-Time Analytics Under Fire: SSRF and XSS Flaw Threatens Data Security\n\nApache Druid, a widely used real-time analytics platform, has been found to contain a significant security flaw\u2014tracked as CVE-2025-27888\u2014that permits attackers to execute Server-Side Request Forgery (SSRF) and Cross-Site Scripting (XSS) attacks. The issue, if left unpatched, could lead to unauthorized network access, data exfiltration, or further compromise of connected systems.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-20T22:00:03.596806Z"}, {"uuid": "af205925-cab6-48d5-9c6d-6f1cb690255c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2774", "type": "seen", "source": "https://t.me/pphm_HackerNews/402", "content": "Remote Exploit Puts Server Control at Serious Risk\n\nA critical security flaw, identified as CVE-2025-2774, has been discovered in Webmin, a widely-used web-based system administration tool. This vulnerability permits remote attackers to escalate privileges and execute code with root-level access. The issue arises from a CRLF (Carriage Return Line Feed) injection vulnerability in Webmin\u2019s handling of CGI requests. Attackers can exploit improper neutralization of CRLF sequences to manipulate server responses, bypass security controls, and execute arbitrary commands with root privileges. The vulnerability carries a CVSS score of 8.8 (High severity), reflecting its potential for widespread damage.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-20T22:00:04.351426Z"}, {"uuid": "8b2de5c4-16ae-4950-82b9-b20f5f983833", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27607", "type": "seen", "source": "https://t.me/pphm_HackerNews/172", "content": "CVE-2025-27607: Critical Flaw in Python Logging Library Enables Remote Code Execution\n\nSecurity researchers have identified a serious vulnerability, designated as CVE-2025-27607, within a widely used Python logging library. This flaw allows an attacker to execute arbitrary code remotely, posing a significant threat to applications that rely on the library for logging activities. If exploited, the vulnerability can grant malicious actors full control over targeted systems, potentially compromising sensitive data and disrupting critical services.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-20T22:00:04.534884Z"}, {"uuid": "268ee127-9452-40cb-b3df-1d8e60087638", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://t.me/claytechsolution/218", "content": "The Hacker News\nMeta Warns of FreeType Vulnerability (CVE-2025-27363) With Active Exploitation Risk\n\nMeta has warned that a security vulnerability impacting the FreeType open-source font rendering library may have been exploited in the wild.\nThe vulnerability has been assigned the CVE identifier CVE-2025-27363, and carries a CVSS score of 8.1, indicating high severity. Described as an out-of-bounds write flaw, it could be exploited to achieve remote code execution when parsing certain font", "creation_timestamp": "2026-07-20T22:00:05.781195Z"}, {"uuid": "d81b856f-8b22-484a-b53c-219a852009e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "exploited", "source": "https://t.me/claytechsolution/218", "content": "The Hacker News\nMeta Warns of FreeType Vulnerability (CVE-2025-27363) With Active Exploitation Risk\n\nMeta has warned that a security vulnerability impacting the FreeType open-source font rendering library may have been exploited in the wild.\nThe vulnerability has been assigned the CVE identifier CVE-2025-27363, and carries a CVSS score of 8.1, indicating high severity. Described as an out-of-bounds write flaw, it could be exploited to achieve remote code execution when parsing certain font", "creation_timestamp": "2026-07-21T00:00:08.645799Z"}, {"uuid": "0bdb842d-dd07-472f-883a-0c2d19c5da73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27607", "type": "seen", "source": "https://t.me/pphm_HackerNews/172", "content": "CVE-2025-27607: Critical Flaw in Python Logging Library Enables Remote Code Execution\n\nSecurity researchers have identified a serious vulnerability, designated as CVE-2025-27607, within a widely used Python logging library. This flaw allows an attacker to execute arbitrary code remotely, posing a significant threat to applications that rely on the library for logging activities. If exploited, the vulnerability can grant malicious actors full control over targeted systems, potentially compromising sensitive data and disrupting critical services.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-21T00:00:09.794951Z"}, {"uuid": "e0de39b7-3773-4057-bb9f-cdef0e1d5026", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27415", "type": "seen", "source": "https://t.me/pphm_HackerNews/227", "content": "JavaScript Framework Under Scrutiny: Researchers Reveal Malicious Caching Exploit\n\nA recently disclosed security flaw, identified as CVE-2025-27415, is sparking concern among Nuxt users. The vulnerability can open the door for cache poisoning attacks, allowing adversaries to inject malicious content or alter legitimate data. Given Nuxt\u2019s popularity in building modern web interfaces, developers and organizations are urged to investigate their configurations and implement necessary fixes.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-21T00:00:09.917455Z"}, {"uuid": "591c8ccf-3479-4470-b6a1-1ee409d80d5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27888", "type": "seen", "source": "https://t.me/pphm_HackerNews/224", "content": "Real-Time Analytics Under Fire: SSRF and XSS Flaw Threatens Data Security\n\nApache Druid, a widely used real-time analytics platform, has been found to contain a significant security flaw\u2014tracked as CVE-2025-27888\u2014that permits attackers to execute Server-Side Request Forgery (SSRF) and Cross-Site Scripting (XSS) attacks. The issue, if left unpatched, could lead to unauthorized network access, data exfiltration, or further compromise of connected systems.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-21T00:00:09.952291Z"}, {"uuid": "065cc0e2-2566-4ae4-94bb-33fd3d865e4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2774", "type": "seen", "source": "https://t.me/pphm_HackerNews/402", "content": "Remote Exploit Puts Server Control at Serious Risk\n\nA critical security flaw, identified as CVE-2025-2774, has been discovered in Webmin, a widely-used web-based system administration tool. This vulnerability permits remote attackers to escalate privileges and execute code with root-level access. The issue arises from a CRLF (Carriage Return Line Feed) injection vulnerability in Webmin\u2019s handling of CGI requests. Attackers can exploit improper neutralization of CRLF sequences to manipulate server responses, bypass security controls, and execute arbitrary commands with root privileges. The vulnerability carries a CVSS score of 8.8 (High severity), reflecting its potential for widespread damage.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-21T00:00:10.565496Z"}, {"uuid": "e94c92b8-ccf8-4ed7-bbfc-0a58a4243579", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27237", "type": "seen", "source": "https://t.me/proxy_bar/3100", "content": "CVE-2025-27237 \n*\nZabbix LPE PoC", "creation_timestamp": "2026-07-21T00:00:25.137289Z"}, {"uuid": "d7a812ed-7681-4007-831f-e5990f762f19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://t.me/Yemen_Cyber_Security/6", "content": "\u00a0Google Chrome :\n\n\u0628\u0627\u0639\u062a\u0628\u0627\u0631\u0647\u0627 \u062b\u063a\u0631\u0629 \u064a\u0648\u0645 \u0627\u0644\u0635\u0641\u0631 \u0628\u0648\u0627\u0633\u0637\u0629 \u062c\u0647\u0629 \u062a\u0647\u062f\u064a\u062f \u0645\u0639\u0631\u0648\u0641\u0629 \u0628\u0627\u0633\u0645 TaxOff \u0644\u0646\u0634\u0631 \u0628\u0627\u0628 \u062e\u0644\u0641\u064a \u064a\u062d\u0645\u0644 \u0627\u0644\u0627\u0633\u0645 \u0627\u0644\u0631\u0645\u0632\u064a\u00a0Trinper\u00a0.\n\u062a\u0645 \u0631\u0635\u062f \u0627\u0644\u0647\u062c\u0648\u0645 \u0641\u064a \u0645\u0646\u062a\u0635\u0641 \u0645\u0627\u0631\u0633 2025 \u0628\u0648\u0627\u0633\u0637\u0629 \u0634\u0631\u0643\u0629 Positive Technologies\u060c \u0648\u0627\u0644\u0630\u064a \u062a\u0636\u0645\u0646 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u062b\u063a\u0631\u0629 \u0647\u0631\u0648\u0628 \u0645\u0646 \u0627\u0644\u062d\u0645\u0627\u064a\u0629 \u062a\u0645 \u062a\u0639\u0642\u0628\u0647\u0627 \u0628\u0627\u0633\u0645 CVE-2025-2783 (\u062f\u0631\u062c\u0629 CVSS: 8.3).\n\u0639\u0627\u0644\u062c\u062a\u00a0\u0634\u0631\u0643\u0629 \u062c\u0648\u062c\u0644\u00a0\u0627\u0644\u062e\u0644\u0644 \u0641\u064a \u0648\u0642\u062a \u0644\u0627\u062d\u0642 \u0645\u0646 \u0630\u0644\u0643 \u0627\u0644\u0634\u0647\u0631 \u0628\u0639\u062f \u0623\u0646 \u0623\u0628\u0644\u063a\u062a \u0634\u0631\u0643\u0629 \u0643\u0627\u0633\u0628\u064a\u0631\u0633\u0643\u064a \u0639\u0646 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u063a\u064a\u0631 \u0642\u0627\u0646\u0648\u0646\u064a \u0641\u064a \u062d\u0645\u0644\u0629 \u0623\u0637\u0644\u0642 \u0639\u0644\u064a\u0647\u0627 \u0627\u0633\u0645 Operation ForumTroll \u062a\u0633\u062a\u0647\u062f\u0641 \u0627\u0644\u0639\u062f\u064a\u062f \u0645\u0646 \u0627\u0644\u0645\u0646\u0638\u0645\u0627\u062a \u0627\u0644\u0631\u0648\u0633\u064a\u0629.\n\n\u0642\u0627\u0644\u00a0\u0627\u0644\u0628\u0627\u062d\u062b\u0627\u0646 \u0627\u0644\u0623\u0645\u0646\u064a\u0627\u0646 \u0633\u062a\u0627\u0646\u064a\u0633\u0644\u0627\u0641 \u0628\u064a\u062c\u0648\u0641 \u0648\u0641\u0644\u0627\u062f\u064a\u0633\u0644\u0627\u0641 \u0644\u0648\u0646\u064a\u0646\u00a0: \"\u0643\u0627\u0646 \u0646\u0627\u0642\u0644 \u0627\u0644\u0647\u062c\u0648\u0645 \u0627\u0644\u0623\u0648\u0644\u064a \u0639\u0628\u0627\u0631\u0629 \u0639\u0646 \u0631\u0633\u0627\u0644\u0629 \u0628\u0631\u064a\u062f \u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a \u062a\u0635\u064a\u062f\u064a\u0629 \u062a\u062d\u062a\u0648\u064a \u0639\u0644\u0649 \u0631\u0627\u0628\u0637 \u062e\u0628\u064a\u062b\". \u0648\u0623\u0636\u0627\u0641\u0627: \"\u0639\u0646\u062f\u0645\u0627 \u0646\u0642\u0631 \u0627\u0644\u0636\u062d\u064a\u0629 \u0639\u0644\u0649 \u0627\u0644\u0631\u0627\u0628\u0637\u060c \u0623\u062f\u0649 \u0630\u0644\u0643 \u0625\u0644\u0649 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0628\u0646\u0642\u0631\u0629 \u0648\u0627\u062d\u062f\u0629 (CVE-2025-2783)\u060c \u0645\u0645\u0627 \u0623\u062f\u0649 \u0625\u0644\u0649 \u062a\u062b\u0628\u064a\u062a \u0627\u0644\u0628\u0627\u0628 \u0627\u0644\u062e\u0644\u0641\u064a Trinper \u0627\u0644\u0630\u064a \u062a\u0633\u062a\u062e\u062f\u0645\u0647 TaxOff\".\n\n#\u0627\u0644\u0627\u0645\u0646_\u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a_\u0627\u0644\u064a\u0645\u0646\u064a\n____\n\u0639\u064a\u0646 \u0639\u0644\u0649 \u0627\u0644\u0634\u0627\u0634\u0629\u060c \u0648\u064a\u062f \u0639\u0644\u0649 \u0627\u0644\u0632\u0646\u0627\u062f \u0627\u0644\u0631\u0642\u0645\u064a\n____", "creation_timestamp": "2026-07-21T13:00:07.770825Z"}, {"uuid": "eca9a55d-f90b-4e01-becf-991dc388a384", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "seen", "source": "Telegram/FMxKlI5Q8oe-wqfdJhLf519zmPU2wTxgtOLa-sFM77th6qo", "content": "", "creation_timestamp": "2026-08-28T00:00:51.893856Z"}, {"uuid": "6df01280-21b2-46e1-afa8-bb33919135fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27237", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/3100", "content": "CVE-2025-27237 \n*\nZabbix LPE PoC", "creation_timestamp": "2026-07-22T00:00:27.530610Z"}, {"uuid": "3a3c2640-8863-4147-bedf-72b5ea24c03a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "exploited", "source": "https://t.me/Yemen_Cyber_Security/6", "content": "\u00a0Google Chrome :\n\n\u0628\u0627\u0639\u062a\u0628\u0627\u0631\u0647\u0627 \u062b\u063a\u0631\u0629 \u064a\u0648\u0645 \u0627\u0644\u0635\u0641\u0631 \u0628\u0648\u0627\u0633\u0637\u0629 \u062c\u0647\u0629 \u062a\u0647\u062f\u064a\u062f \u0645\u0639\u0631\u0648\u0641\u0629 \u0628\u0627\u0633\u0645 TaxOff \u0644\u0646\u0634\u0631 \u0628\u0627\u0628 \u062e\u0644\u0641\u064a \u064a\u062d\u0645\u0644 \u0627\u0644\u0627\u0633\u0645 \u0627\u0644\u0631\u0645\u0632\u064a\u00a0Trinper\u00a0.\n\u062a\u0645 \u0631\u0635\u062f \u0627\u0644\u0647\u062c\u0648\u0645 \u0641\u064a \u0645\u0646\u062a\u0635\u0641 \u0645\u0627\u0631\u0633 2025 \u0628\u0648\u0627\u0633\u0637\u0629 \u0634\u0631\u0643\u0629 Positive Technologies\u060c \u0648\u0627\u0644\u0630\u064a \u062a\u0636\u0645\u0646 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u062b\u063a\u0631\u0629 \u0647\u0631\u0648\u0628 \u0645\u0646 \u0627\u0644\u062d\u0645\u0627\u064a\u0629 \u062a\u0645 \u062a\u0639\u0642\u0628\u0647\u0627 \u0628\u0627\u0633\u0645 CVE-2025-2783 (\u062f\u0631\u062c\u0629 CVSS: 8.3).\n\u0639\u0627\u0644\u062c\u062a\u00a0\u0634\u0631\u0643\u0629 \u062c\u0648\u062c\u0644\u00a0\u0627\u0644\u062e\u0644\u0644 \u0641\u064a \u0648\u0642\u062a \u0644\u0627\u062d\u0642 \u0645\u0646 \u0630\u0644\u0643 \u0627\u0644\u0634\u0647\u0631 \u0628\u0639\u062f \u0623\u0646 \u0623\u0628\u0644\u063a\u062a \u0634\u0631\u0643\u0629 \u0643\u0627\u0633\u0628\u064a\u0631\u0633\u0643\u064a \u0639\u0646 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u063a\u064a\u0631 \u0642\u0627\u0646\u0648\u0646\u064a \u0641\u064a \u062d\u0645\u0644\u0629 \u0623\u0637\u0644\u0642 \u0639\u0644\u064a\u0647\u0627 \u0627\u0633\u0645 Operation ForumTroll \u062a\u0633\u062a\u0647\u062f\u0641 \u0627\u0644\u0639\u062f\u064a\u062f \u0645\u0646 \u0627\u0644\u0645\u0646\u0638\u0645\u0627\u062a \u0627\u0644\u0631\u0648\u0633\u064a\u0629.\n\n\u0642\u0627\u0644\u00a0\u0627\u0644\u0628\u0627\u062d\u062b\u0627\u0646 \u0627\u0644\u0623\u0645\u0646\u064a\u0627\u0646 \u0633\u062a\u0627\u0646\u064a\u0633\u0644\u0627\u0641 \u0628\u064a\u062c\u0648\u0641 \u0648\u0641\u0644\u0627\u062f\u064a\u0633\u0644\u0627\u0641 \u0644\u0648\u0646\u064a\u0646\u00a0: \"\u0643\u0627\u0646 \u0646\u0627\u0642\u0644 \u0627\u0644\u0647\u062c\u0648\u0645 \u0627\u0644\u0623\u0648\u0644\u064a \u0639\u0628\u0627\u0631\u0629 \u0639\u0646 \u0631\u0633\u0627\u0644\u0629 \u0628\u0631\u064a\u062f \u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a \u062a\u0635\u064a\u062f\u064a\u0629 \u062a\u062d\u062a\u0648\u064a \u0639\u0644\u0649 \u0631\u0627\u0628\u0637 \u062e\u0628\u064a\u062b\". \u0648\u0623\u0636\u0627\u0641\u0627: \"\u0639\u0646\u062f\u0645\u0627 \u0646\u0642\u0631 \u0627\u0644\u0636\u062d\u064a\u0629 \u0639\u0644\u0649 \u0627\u0644\u0631\u0627\u0628\u0637\u060c \u0623\u062f\u0649 \u0630\u0644\u0643 \u0625\u0644\u0649 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0628\u0646\u0642\u0631\u0629 \u0648\u0627\u062d\u062f\u0629 (CVE-2025-2783)\u060c \u0645\u0645\u0627 \u0623\u062f\u0649 \u0625\u0644\u0649 \u062a\u062b\u0628\u064a\u062a \u0627\u0644\u0628\u0627\u0628 \u0627\u0644\u062e\u0644\u0641\u064a Trinper \u0627\u0644\u0630\u064a \u062a\u0633\u062a\u062e\u062f\u0645\u0647 TaxOff\".\n\n#\u0627\u0644\u0627\u0645\u0646_\u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a_\u0627\u0644\u064a\u0645\u0646\u064a\n____\n\u0639\u064a\u0646 \u0639\u0644\u0649 \u0627\u0644\u0634\u0627\u0634\u0629\u060c \u0648\u064a\u062f \u0639\u0644\u0649 \u0627\u0644\u0632\u0646\u0627\u062f \u0627\u0644\u0631\u0642\u0645\u064a\n____", "creation_timestamp": "2026-07-22T00:00:22.531770Z"}, {"uuid": "fb10c9b2-b7e8-40f6-8596-94091c3440e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-27597", "type": "published-proof-of-concept", "source": "https://github.com/intlify/vue-i18n/security/advisories/GHSA-p2ph-7g93-hw3m", "content": "", "creation_timestamp": "2026-08-25T22:35:03.734573Z"}, {"uuid": "1bb9b612-0c9d-47e3-9d87-db9f0a1ba97c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27915", "type": "seen", "source": "https://t.me/pphm_HackerNews/1008", "content": "Invisible Schedules: A Covert Campaign Breaching Mail Systems Through Event Triggers\n\nThreat actors have leveraged a zero-day flaw (CVE-2025-27915) in Zimbra Collaboration Suite (ZCS) to deliver malicious JavaScript via iCalendar (.ICS) files. The vulnerability allows execution of arbitrary script in the context of a user\u2019s session when Zimbra processes the calendar attachment.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-22T05:00:05.028006Z"}, {"uuid": "db872fe6-0c03-45f4-b3da-8bda39426c45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27533", "type": "seen", "source": "https://t.me/pphm_HackerNews/423", "content": "Hidden Threat in Messaging Software Could Crash Critical Systems\n\nApache ActiveMQ, a widely used open-source message broker, has been identified with a critical vulnerability (CVE-2025-27533) that could be exploited to cause a Denial of Service (DoS).This flaw arises from improper validation of buffer sizes during the unmarshalling of OpenWire commands, potentially allowing attackers to deplete system memory and crash the broker service.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-22T05:00:06.085654Z"}, {"uuid": "62b3dba0-9977-467b-946d-6f39a0dd404b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27890", "type": "published-proof-of-concept", "source": "Telegram/0Lzh2WjQOWsuTydOW_ekHZzZKDiwWQ3j_cpMbWJHlr9U_UA", "content": "", "creation_timestamp": "2026-08-25T00:00:09.146912Z"}, {"uuid": "e04c0dfa-2b73-45cf-a343-c181c5b0137e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27533", "type": "seen", "source": "https://t.me/pphm_HackerNews/423", "content": "Hidden Threat in Messaging Software Could Crash Critical Systems\n\nApache ActiveMQ, a widely used open-source message broker, has been identified with a critical vulnerability (CVE-2025-27533) that could be exploited to cause a Denial of Service (DoS).This flaw arises from improper validation of buffer sizes during the unmarshalling of OpenWire commands, potentially allowing attackers to deplete system memory and crash the broker service.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-23T00:00:23.551534Z"}, {"uuid": "d55777a9-ebed-435e-b7eb-f627dd02983c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27915", "type": "exploited", "source": "https://t.me/pphm_HackerNews/1008", "content": "Invisible Schedules: A Covert Campaign Breaching Mail Systems Through Event Triggers\n\nThreat actors have leveraged a zero-day flaw (CVE-2025-27915) in Zimbra Collaboration Suite (ZCS) to deliver malicious JavaScript via iCalendar (.ICS) files. The vulnerability allows execution of arbitrary script in the context of a user\u2019s session when Zimbra processes the calendar attachment.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-23T00:00:25.076666Z"}, {"uuid": "dc9fb659-55bd-4dab-aea8-8dae8c40d586", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "Telegram/lyQjgrzss-14q92fKQzooVmz9KnQq83SmXqNbV8WBn3n-CQ", "content": "", "creation_timestamp": "2026-07-23T11:00:03.606969Z"}, {"uuid": "df728ccf-60a4-45cf-a63a-c62347be05f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "Telegram/U79Ey0URTeETkuOo0EGZDNefR4OqOG8eUavIqMDNcU7VI18", "content": "", "creation_timestamp": "2026-07-23T11:00:03.769503Z"}, {"uuid": "58972519-8df2-46ad-8069-6fbc768db203", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "published-proof-of-concept", "source": "Telegram/U79Ey0URTeETkuOo0EGZDNefR4OqOG8eUavIqMDNcU7VI18", "content": "", "creation_timestamp": "2026-07-24T00:00:08.704532Z"}, {"uuid": "ca83ce3b-07c1-40f1-b151-0f413e2cedeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "published-proof-of-concept", "source": "Telegram/lyQjgrzss-14q92fKQzooVmz9KnQq83SmXqNbV8WBn3n-CQ", "content": "", "creation_timestamp": "2026-07-24T00:00:08.819283Z"}, {"uuid": "fced1441-9d54-4e87-806b-c0f1ff0cbbdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-23)", "content": "", "creation_timestamp": "2026-07-24T10:00:04.684882Z"}, {"uuid": "8ac39bae-8b2a-40af-b0a3-a6722e83526b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27520", "type": "seen", "source": "https://t.me/GithubRedTeam/94977", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Exploit #CVE #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2025-27520\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a electricsheep08\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-24 13:59:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nexploit for CVE-2025-27520 A Remote Code Execution (RCE) vulnerability caused by insecure deserialization  in the latest version (v1.4.2) of BentoML. It allows any unauthenticated user to execute arbitrary code on the server. It exists an unsafe code segment in serde.py. This vulnerability is fixed in 1.4.3.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-24T15:00:03.895598Z"}, {"uuid": "44811f66-e185-4681-b3ce-e07381f2b1a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27520", "type": "seen", "source": "Telegram/g675v-UH8DF27WnjgWKKSkETruqTm270nowLOMEt8RLgjhY", "content": "", "creation_timestamp": "2026-07-25T00:00:09.110618Z"}, {"uuid": "0feab1e4-0a46-409b-b34e-7212579bfc70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27520", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94977", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Exploit #CVE #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2025-27520\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a electricsheep08\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-24 13:59:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nexploit for CVE-2025-27520 A Remote Code Execution (RCE) vulnerability caused by insecure deserialization  in the latest version (v1.4.2) of BentoML. It allows any unauthenticated user to execute arbitrary code on the server. It exists an unsafe code segment in serde.py. This vulnerability is fixed in 1.4.3.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-25T00:00:10.170276Z"}, {"uuid": "5472e93b-bce5-4118-94fa-498d9e919b9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27915", "type": "seen", "source": "https://t.me/ZerodayAlert/564", "content": "\ud83e\udd77\u0412\u043e\u0435\u043d\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043b\u0438\u0441\u044c \u0430\u0442\u0430\u043a\u0430\u043c \u0447\u0435\u0440\u0435\u0437 0Day \u0432 Zimbra\n\n\u2139\ufe0f\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b StrikeReady \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-27915 \u0432 Zimbra Collaboration Suite, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 JavaScript \u0447\u0435\u0440\u0435\u0437 ICS-\u0444\u0430\u0439\u043b\u044b \u043a\u0430\u043b\u0435\u043d\u0434\u0430\u0440\u044f. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0430\u0442\u0430\u043a\u0443 \u043f\u043e\u0434 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u0438\u0441\u044c\u043c\u043e \u043e\u0442 \u043e\u0442\u0434\u0435\u043b\u0430 \u0412\u041c\u0421 \u041b\u0438\u0432\u0438\u0438 \u0441 \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c \u0440\u0430\u0437\u043c\u0435\u0440\u043e\u043c \u043e\u043a\u043e\u043b\u043e 100 \u041a\u0411, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u043c \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\ud83c\udfaf\u0426\u0435\u043b\u0435\u0432\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u0431\u044b\u043b\u0430 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043d\u0430 \u0432\u043e\u0435\u043d\u043d\u0443\u044e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044e \u0432 \u0411\u0440\u0430\u0437\u0438\u043b\u0438\u0438 \u0438 \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u044f\u043d\u0432\u0430\u0440\u044f, \u0437\u0430\u0434\u043e\u043b\u0433\u043e \u0434\u043e \u0432\u044b\u0445\u043e\u0434\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f 27 \u044f\u043d\u0432\u0430\u0440\u044f. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 \u043f\u043e\u0445\u0438\u0449\u0430\u043b \u043b\u043e\u0433\u0438\u043d\u044b, \u043f\u0430\u0440\u043e\u043b\u0438, \u043f\u0438\u0441\u044c\u043c\u0430 \u0438 \u043a\u043e\u043d\u0442\u0430\u043a\u0442\u044b, \u043f\u0435\u0440\u0435\u0441\u044b\u043b\u0430\u044f \u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u0430\u0436\u0434\u044b\u0435 4 \u0447\u0430\u0441\u0430 \u0438 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u044f \u0444\u0438\u043b\u044c\u0442\u0440 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0447\u0442\u044b \u043d\u0430 Proton-\u0430\u0434\u0440\u0435\u0441 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445.\n\n\ud83d\udea8\u0421\u043b\u043e\u0436\u043d\u0430\u044f \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0441 \u043e\u0442\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u043e\u043c \u0438 \u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u043a\u043e\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u043e\u0441\u0442\u0430\u0432\u0430\u0442\u044c\u0441\u044f \u043d\u0435\u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u043c \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0432\u0440\u0435\u043c\u044f. StrikeReady \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u043d\u0443\u043b\u0430, \u0447\u0442\u043e \u043a\u0430\u043b\u0435\u043d\u0434\u0430\u0440\u043d\u044b\u0435 \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e \u0441\u0447\u0438\u0442\u0430\u044e\u0442\u0441\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c\u0438 \u0438 \u043e\u0431\u0445\u043e\u0434\u044f\u0442 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435 \u0444\u0438\u043b\u044c\u0442\u0440\u044b.\n\n#zimbra #zeroday #xss #\u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438 \n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:11.745266Z"}, {"uuid": "a3f9b154-a499-4619-abc7-46c925a35026", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://t.me/ZerodayAlert/514", "content": "Chrome \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0432\u043d\u0435\u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0438\u0437-\u0437\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\n\n\ud83d\udea8 Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0432\u043d\u0435\u043f\u043b\u0430\u043d\u043e\u0432\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Chrome, \u0437\u0430\u043a\u0440\u044b\u0432 \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u0430 CVE-2025-5419 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 8.8, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\ud83d\udcbb \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0435\u043c \u0437\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 JavaScript. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443, \u0447\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u043f\u0443\u0442\u044c \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\ud83d\udd04 \u042d\u0442\u043e \u0443\u0436\u0435 \u0432\u0442\u043e\u0440\u0430\u044f zero-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f \u0432 2025 \u0433\u043e\u0434\u0443 \u043f\u043e\u0441\u043b\u0435 CVE-2025-2783. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Chrome \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 137.0.7151.68/.69, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u044b \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Chromium.\n\n#chrome #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #zeroday #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:13.042507Z"}, {"uuid": "ef30cc61-9a34-4b7a-877c-ecd2b7c13aef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27610", "type": "seen", "source": "https://t.me/ZerodayAlert/490", "content": "\u041d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Rack \u0434\u043b\u044f Ruby: \u0447\u0442\u043e \u043d\u0443\u0436\u043d\u043e \u0437\u043d\u0430\u0442\u044c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\n\n\ud83d\udd0d \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b OPSWAT \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0442\u0440\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 Rack \u0434\u043b\u044f Ruby. \u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0430\u0439\u043b\u0430\u043c, \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u0441\u043e\u0431\u044b\u0442\u0438\u0439 \u0432 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u26a0\ufe0f \u0421\u0430\u043c\u043e\u0439 \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0441\u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-27610 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 7,5, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 Rack::Static, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0435 \u0444\u0438\u043b\u044c\u0442\u0440\u0443\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u043f\u0443\u0442\u0438 \u043f\u0435\u0440\u0435\u0434 \u0432\u044b\u0434\u0430\u0447\u0435\u0439 \u0444\u0430\u0439\u043b\u043e\u0432, \u0447\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0435\u0439.\n\n\ud83d\udee1 \u0414\u043b\u044f \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0438\u0441\u043a\u043e\u0432 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Rack \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0438\u043b\u0438 \u043e\u0442\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u043e\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f Rack::Static. \u0415\u0441\u043b\u0438 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0443\u0431\u0435\u0434\u0438\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 root: \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u044e, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0443\u044e \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b.\n\n#ruby #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #rack \n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:13.939986Z"}, {"uuid": "767fc752-04e3-4f4e-b55d-c8ab11ae27d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://t.me/ZerodayAlert/493", "content": "Google \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 Zero-Click \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Android\n\n\u26a0\ufe0f Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f Android, \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0432 46 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043e\u0434\u043d\u0430 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445. \u0420\u0435\u0447\u044c \u0438\u0434\u0451\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-27363, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0439 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 Android \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\ud83d\udd0d \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u043e\u0439 FreeType \u2014 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433\u0430 \u0448\u0440\u0438\u0444\u0442\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0448\u0440\u0438\u0444\u0442\u043e\u0432 TrueType GX \u0438 variable fonts, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0431\u0435\u0437 \u0432\u0435\u0434\u043e\u043c\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\ud83d\udee1 \u0425\u043e\u0442\u044f \u0442\u043e\u0447\u043d\u044b\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0430\u0442\u0430\u043a \u043f\u043e\u043a\u0430 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b, Google \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0435 \u0438 \u043f\u0440\u0438\u0446\u0435\u043b\u044c\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Android \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0443\u0431\u0435\u0434\u0438\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u043e\u043d \u043d\u0435 \u043d\u0438\u0436\u0435 \u0434\u0430\u0442\u044b 5 \u043c\u0430\u044f 2025 \u0433\u043e\u0434\u0430.\n\n#\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #android #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:13.984582Z"}, {"uuid": "1576a09a-3617-40fb-b12a-6894e7297ca8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://t.me/ZerodayAlert/458", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-2783 \u0432 Chrome: \u043a\u0430\u043a \u0441\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u0430\u0442\u0430\u043a\u0430 \u00ab\u0424\u043e\u0440\u0443\u043c\u043d\u044b\u0439 \u0442\u0440\u043e\u043b\u043b\u044c\u00bb\n\n\ud83d\udee1 \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u00ab\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e\u00bb \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0441\u043b\u043e\u0436\u043d\u0443\u044e \u0446\u0435\u043b\u0435\u0432\u0443\u044e \u0430\u0442\u0430\u043a\u0443 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Chrome, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0443 \u0431\u0435\u0437 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\ud83c\udfad \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0438 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u043f\u0438\u0441\u044c\u043c\u0430 \u0441 \u043f\u0440\u0438\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044f\u043c\u0438 \u043d\u0430 \u00ab\u041f\u0440\u0438\u043c\u0430\u043a\u043e\u0432\u0441\u043a\u0438\u0435 \u0447\u0442\u0435\u043d\u0438\u044f\u00bb, \u0432\u0435\u0434\u0443\u0449\u0438\u0435 \u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u0441\u0430\u0439\u0442 primakovreadings[.]info, \u0430\u0442\u0430\u043a\u0443\u044f \u0433\u043e\u0441\u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u0438 \u0421\u041c\u0418.\n\n\ud83d\udee0 Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043f\u0430\u0442\u0447 25 \u043c\u0430\u0440\u0442\u0430, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-2783 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Mojo, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043c\u0435\u0436\u0434\u0443 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0435\u0439 Chrome \u0438 Windows.\n\n\u0410\u043d\u0430\u043b\u0438\u0437 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 APT-\u0433\u0440\u0443\u043f\u043f\u0443 \u0441 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0439 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439, \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0432\u0448\u0443\u044e \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Chrome, \u0447\u0442\u043e \u043f\u043e\u0434\u0447\u0451\u0440\u043a\u0438\u0432\u0430\u0435\u0442 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u041f\u041e.\n\n#ChromeExploit #zeroday #APT\u0443\u0433\u0440\u043e\u0437\u044b #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:14.984577Z"}, {"uuid": "90255f4c-c89f-4edc-a82d-5eeb9362209e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://t.me/ZerodayAlert/461", "content": "\ud83d\udee1 Firefox \u0441\u0440\u043e\u0447\u043d\u043e \u043b\u0430\u0442\u0430\u0435\u0442 \u0434\u044b\u0440\u0443 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\n\u042d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0439 \u043f\u0430\u0442\u0447 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Windows-\u0432\u0435\u0440\u0441\u0438\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u043f\u043e\u0445\u043e\u0436\u0443\u044e \u043d\u0430 \u0431\u0430\u0433 \u0438\u0437 \u0430\u0442\u0430\u043a \u043d\u0430 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438.\n\n \u0411\u0430\u0433 CVE-2025-2857 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u0432\u044b\u0439\u0442\u0438 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0430\u0432\u0430\u043b\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0437\u0430\u0449\u0438\u0442\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041f\u043e\u043a\u0430 \u0435\u0451 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438.\n\n \u041f\u043e\u0445\u043e\u0436\u0430\u044f \u0434\u044b\u0440\u0430 \u0432 Chrome \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438\nGoogle \u0440\u0430\u043d\u0435\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0430 \u043e CVE-2025-2783, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0438 \u0434\u043b\u044f \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u043f\u0440\u043e\u0442\u0438\u0432 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u0421\u041c\u0418 \u0438 \u0432\u0443\u0437\u043e\u0432.\n\n \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e\u0434\u043e\u0437\u0440\u0435\u0432\u0430\u044e\u0442 \u0443\u0447\u0430\u0441\u0442\u0438\u0435 \u0433\u043e\u0441\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\n\u0421\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438 \u0430\u043a\u043a\u0443\u0440\u0430\u0442\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a \u043d\u0430\u0432\u0435\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0430 \u043c\u044b\u0441\u043b\u044c \u043e \u0440\u0430\u0431\u043e\u0442\u0435 \u043f\u0440\u043e\u0444\u0435\u0441\u0441\u0438\u043e\u043d\u0430\u043b\u043e\u0432 \u2014 \u043d\u043e \u0431\u0435\u0437 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u043e\u0431\u0432\u0438\u043d\u0435\u043d\u0438\u0439.\n\n\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u043b\u044f \u0432\u044b\u0445\u043e\u0434\u0430 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\u0445 \u043f\u043e\u0434\u0440\u044f\u0434 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u0442\u0440\u0435\u043d\u0434 \u0432 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0438 \u0430\u0442\u0430\u043a. \u0420\u0438\u0441\u043a \u0432\u044b\u0441\u043e\u043a, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0434\u043b\u044f Windows-\u0441\u0440\u0435\u0434.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #firefox #chrome @ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:15.079156Z"}, {"uuid": "8f8c736c-0e31-4f5c-b165-7f4716119608", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://t.me/ZerodayAlert/461", "content": "\ud83d\udee1 Firefox \u0441\u0440\u043e\u0447\u043d\u043e \u043b\u0430\u0442\u0430\u0435\u0442 \u0434\u044b\u0440\u0443 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\n\u042d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0439 \u043f\u0430\u0442\u0447 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Windows-\u0432\u0435\u0440\u0441\u0438\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u043f\u043e\u0445\u043e\u0436\u0443\u044e \u043d\u0430 \u0431\u0430\u0433 \u0438\u0437 \u0430\u0442\u0430\u043a \u043d\u0430 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438.\n\n \u0411\u0430\u0433 CVE-2025-2857 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u0432\u044b\u0439\u0442\u0438 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0430\u0432\u0430\u043b\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0437\u0430\u0449\u0438\u0442\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041f\u043e\u043a\u0430 \u0435\u0451 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438.\n\n \u041f\u043e\u0445\u043e\u0436\u0430\u044f \u0434\u044b\u0440\u0430 \u0432 Chrome \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438\nGoogle \u0440\u0430\u043d\u0435\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0430 \u043e CVE-2025-2783, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0438 \u0434\u043b\u044f \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u043f\u0440\u043e\u0442\u0438\u0432 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u0421\u041c\u0418 \u0438 \u0432\u0443\u0437\u043e\u0432.\n\n \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e\u0434\u043e\u0437\u0440\u0435\u0432\u0430\u044e\u0442 \u0443\u0447\u0430\u0441\u0442\u0438\u0435 \u0433\u043e\u0441\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\n\u0421\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438 \u0430\u043a\u043a\u0443\u0440\u0430\u0442\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a \u043d\u0430\u0432\u0435\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0430 \u043c\u044b\u0441\u043b\u044c \u043e \u0440\u0430\u0431\u043e\u0442\u0435 \u043f\u0440\u043e\u0444\u0435\u0441\u0441\u0438\u043e\u043d\u0430\u043b\u043e\u0432 \u2014 \u043d\u043e \u0431\u0435\u0437 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u043e\u0431\u0432\u0438\u043d\u0435\u043d\u0438\u0439.\n\n\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u043b\u044f \u0432\u044b\u0445\u043e\u0434\u0430 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\u0445 \u043f\u043e\u0434\u0440\u044f\u0434 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u0442\u0440\u0435\u043d\u0434 \u0432 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0438 \u0430\u0442\u0430\u043a. \u0420\u0438\u0441\u043a \u0432\u044b\u0441\u043e\u043a, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0434\u043b\u044f Windows-\u0441\u0440\u0435\u0434.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #firefox #chrome @ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:13.918080Z"}, {"uuid": "2205bcbb-dea1-4651-8aca-71b8e8e4d7c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://t.me/ZerodayAlert/458", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-2783 \u0432 Chrome: \u043a\u0430\u043a \u0441\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u0430\u0442\u0430\u043a\u0430 \u00ab\u0424\u043e\u0440\u0443\u043c\u043d\u044b\u0439 \u0442\u0440\u043e\u043b\u043b\u044c\u00bb\n\n\ud83d\udee1 \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u00ab\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e\u00bb \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0441\u043b\u043e\u0436\u043d\u0443\u044e \u0446\u0435\u043b\u0435\u0432\u0443\u044e \u0430\u0442\u0430\u043a\u0443 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Chrome, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0443 \u0431\u0435\u0437 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\ud83c\udfad \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0438 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u043f\u0438\u0441\u044c\u043c\u0430 \u0441 \u043f\u0440\u0438\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044f\u043c\u0438 \u043d\u0430 \u00ab\u041f\u0440\u0438\u043c\u0430\u043a\u043e\u0432\u0441\u043a\u0438\u0435 \u0447\u0442\u0435\u043d\u0438\u044f\u00bb, \u0432\u0435\u0434\u0443\u0449\u0438\u0435 \u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u0441\u0430\u0439\u0442 primakovreadings[.]info, \u0430\u0442\u0430\u043a\u0443\u044f \u0433\u043e\u0441\u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u0438 \u0421\u041c\u0418.\n\n\ud83d\udee0 Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043f\u0430\u0442\u0447 25 \u043c\u0430\u0440\u0442\u0430, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-2783 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Mojo, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043c\u0435\u0436\u0434\u0443 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0435\u0439 Chrome \u0438 Windows.\n\n\u0410\u043d\u0430\u043b\u0438\u0437 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 APT-\u0433\u0440\u0443\u043f\u043f\u0443 \u0441 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0439 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439, \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0432\u0448\u0443\u044e \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Chrome, \u0447\u0442\u043e \u043f\u043e\u0434\u0447\u0451\u0440\u043a\u0438\u0432\u0430\u0435\u0442 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u041f\u041e.\n\n#ChromeExploit #zeroday #APT\u0443\u0433\u0440\u043e\u0437\u044b #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:13.959596Z"}, {"uuid": "e30bc47e-f20c-4730-b9c9-0c0fb6088ba9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "exploited", "source": "https://t.me/ZerodayAlert/493", "content": "Google \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 Zero-Click \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Android\n\n\u26a0\ufe0f Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f Android, \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0432 46 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043e\u0434\u043d\u0430 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445. \u0420\u0435\u0447\u044c \u0438\u0434\u0451\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-27363, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0439 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 Android \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\ud83d\udd0d \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u043e\u0439 FreeType \u2014 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433\u0430 \u0448\u0440\u0438\u0444\u0442\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0448\u0440\u0438\u0444\u0442\u043e\u0432 TrueType GX \u0438 variable fonts, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0431\u0435\u0437 \u0432\u0435\u0434\u043e\u043c\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\ud83d\udee1 \u0425\u043e\u0442\u044f \u0442\u043e\u0447\u043d\u044b\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0430\u0442\u0430\u043a \u043f\u043e\u043a\u0430 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b, Google \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0435 \u0438 \u043f\u0440\u0438\u0446\u0435\u043b\u044c\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Android \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0443\u0431\u0435\u0434\u0438\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u043e\u043d \u043d\u0435 \u043d\u0438\u0436\u0435 \u0434\u0430\u0442\u044b 5 \u043c\u0430\u044f 2025 \u0433\u043e\u0434\u0430.\n\n#\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #android #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:29.035979Z"}, {"uuid": "23c87cbf-de9a-4f95-afd2-bc6086f30c13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27610", "type": "seen", "source": "https://t.me/ZerodayAlert/490", "content": "\u041d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Rack \u0434\u043b\u044f Ruby: \u0447\u0442\u043e \u043d\u0443\u0436\u043d\u043e \u0437\u043d\u0430\u0442\u044c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\n\n\ud83d\udd0d \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b OPSWAT \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0442\u0440\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 Rack \u0434\u043b\u044f Ruby. \u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0430\u0439\u043b\u0430\u043c, \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u0441\u043e\u0431\u044b\u0442\u0438\u0439 \u0432 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u26a0\ufe0f \u0421\u0430\u043c\u043e\u0439 \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0441\u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-27610 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 7,5, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 Rack::Static, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0435 \u0444\u0438\u043b\u044c\u0442\u0440\u0443\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u043f\u0443\u0442\u0438 \u043f\u0435\u0440\u0435\u0434 \u0432\u044b\u0434\u0430\u0447\u0435\u0439 \u0444\u0430\u0439\u043b\u043e\u0432, \u0447\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0435\u0439.\n\n\ud83d\udee1 \u0414\u043b\u044f \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0438\u0441\u043a\u043e\u0432 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Rack \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0438\u043b\u0438 \u043e\u0442\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u043e\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f Rack::Static. \u0415\u0441\u043b\u0438 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0443\u0431\u0435\u0434\u0438\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 root: \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u044e, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0443\u044e \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b.\n\n#ruby #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #rack \n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:29.079816Z"}, {"uuid": "c360747a-7e3f-46eb-a789-6fd055144203", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "exploited", "source": "https://t.me/ZerodayAlert/514", "content": "Chrome \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0432\u043d\u0435\u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0438\u0437-\u0437\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\n\n\ud83d\udea8 Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0432\u043d\u0435\u043f\u043b\u0430\u043d\u043e\u0432\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Chrome, \u0437\u0430\u043a\u0440\u044b\u0432 \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u0430 CVE-2025-5419 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 8.8, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\ud83d\udcbb \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0435\u043c \u0437\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 JavaScript. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443, \u0447\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u043f\u0443\u0442\u044c \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\ud83d\udd04 \u042d\u0442\u043e \u0443\u0436\u0435 \u0432\u0442\u043e\u0440\u0430\u044f zero-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f \u0432 2025 \u0433\u043e\u0434\u0443 \u043f\u043e\u0441\u043b\u0435 CVE-2025-2783. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Chrome \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 137.0.7151.68/.69, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u044b \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Chromium.\n\n#chrome #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #zeroday #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:30.549436Z"}, {"uuid": "f95efbea-c906-49a5-a8e6-5017393b0495", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27915", "type": "exploited", "source": "https://t.me/ZerodayAlert/564", "content": "\ud83e\udd77\u0412\u043e\u0435\u043d\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043b\u0438\u0441\u044c \u0430\u0442\u0430\u043a\u0430\u043c \u0447\u0435\u0440\u0435\u0437 0Day \u0432 Zimbra\n\n\u2139\ufe0f\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b StrikeReady \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-27915 \u0432 Zimbra Collaboration Suite, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 JavaScript \u0447\u0435\u0440\u0435\u0437 ICS-\u0444\u0430\u0439\u043b\u044b \u043a\u0430\u043b\u0435\u043d\u0434\u0430\u0440\u044f. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0430\u0442\u0430\u043a\u0443 \u043f\u043e\u0434 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u0438\u0441\u044c\u043c\u043e \u043e\u0442 \u043e\u0442\u0434\u0435\u043b\u0430 \u0412\u041c\u0421 \u041b\u0438\u0432\u0438\u0438 \u0441 \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c \u0440\u0430\u0437\u043c\u0435\u0440\u043e\u043c \u043e\u043a\u043e\u043b\u043e 100 \u041a\u0411, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u043c \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\ud83c\udfaf\u0426\u0435\u043b\u0435\u0432\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u0431\u044b\u043b\u0430 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043d\u0430 \u0432\u043e\u0435\u043d\u043d\u0443\u044e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044e \u0432 \u0411\u0440\u0430\u0437\u0438\u043b\u0438\u0438 \u0438 \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u044f\u043d\u0432\u0430\u0440\u044f, \u0437\u0430\u0434\u043e\u043b\u0433\u043e \u0434\u043e \u0432\u044b\u0445\u043e\u0434\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f 27 \u044f\u043d\u0432\u0430\u0440\u044f. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 \u043f\u043e\u0445\u0438\u0449\u0430\u043b \u043b\u043e\u0433\u0438\u043d\u044b, \u043f\u0430\u0440\u043e\u043b\u0438, \u043f\u0438\u0441\u044c\u043c\u0430 \u0438 \u043a\u043e\u043d\u0442\u0430\u043a\u0442\u044b, \u043f\u0435\u0440\u0435\u0441\u044b\u043b\u0430\u044f \u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u0430\u0436\u0434\u044b\u0435 4 \u0447\u0430\u0441\u0430 \u0438 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u044f \u0444\u0438\u043b\u044c\u0442\u0440 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0447\u0442\u044b \u043d\u0430 Proton-\u0430\u0434\u0440\u0435\u0441 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445.\n\n\ud83d\udea8\u0421\u043b\u043e\u0436\u043d\u0430\u044f \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0441 \u043e\u0442\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u043e\u043c \u0438 \u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u043a\u043e\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u043e\u0441\u0442\u0430\u0432\u0430\u0442\u044c\u0441\u044f \u043d\u0435\u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u043c \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0432\u0440\u0435\u043c\u044f. StrikeReady \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u043d\u0443\u043b\u0430, \u0447\u0442\u043e \u043a\u0430\u043b\u0435\u043d\u0434\u0430\u0440\u043d\u044b\u0435 \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e \u0441\u0447\u0438\u0442\u0430\u044e\u0442\u0441\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c\u0438 \u0438 \u043e\u0431\u0445\u043e\u0434\u044f\u0442 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435 \u0444\u0438\u043b\u044c\u0442\u0440\u044b.\n\n#zimbra #zeroday #xss #\u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438 \n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:32.077765Z"}, {"uuid": "d1919946-0e13-444f-aa25-7a73d25435cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27520", "type": "published-proof-of-concept", "source": "Telegram/g675v-UH8DF27WnjgWKKSkETruqTm270nowLOMEt8RLgjhY", "content": "", "creation_timestamp": "2026-07-26T00:00:47.722361Z"}, {"uuid": "853b231e-46bc-4560-aa10-7c8f008d81ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "https://t.me/cyberwarehouse/812", "content": "#exploit\nCVE-2025-2775 CVE-2025-2776 CVE-2025-2777 CVE-2025-2778\nSysOwned, Your Friendly Support Ticket - SysAid On-Premise Pre-Auth RCE Chain\n]-> https://labs.watchtowr.com/sysowned-your-friendly-rce-support-ticket/\n\n]-> https://github.com/watchtowrlabs/watchTowr-vs-SysAid-PreAuth-RCE-Chain", "creation_timestamp": "2026-07-26T02:00:13.042426Z"}, {"uuid": "c4a31ebc-eb74-4493-a582-3bc54f54dcd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2778", "type": "seen", "source": "https://t.me/cyberwarehouse/812", "content": "#exploit\nCVE-2025-2775 CVE-2025-2776 CVE-2025-2777 CVE-2025-2778\nSysOwned, Your Friendly Support Ticket - SysAid On-Premise Pre-Auth RCE Chain\n]-> https://labs.watchtowr.com/sysowned-your-friendly-rce-support-ticket/\n\n]-> https://github.com/watchtowrlabs/watchTowr-vs-SysAid-PreAuth-RCE-Chain", "creation_timestamp": "2026-07-26T02:00:13.086299Z"}, {"uuid": "34cfac91-67b1-4c32-957b-e1dc73a6e631", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27364", "type": "seen", "source": "https://t.me/cyberwarehouse/721", "content": "https://securityonline.info/cve-2025-27364-cvss-10-remote-code-execution-flaw-found-in-mitre-caldera-poc-releases/", "creation_timestamp": "2026-07-26T02:00:13.968201Z"}, {"uuid": "287702d5-3a2f-4bb5-8ff3-100fb0b30971", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2777", "type": "seen", "source": "https://t.me/cyberwarehouse/812", "content": "#exploit\nCVE-2025-2775 CVE-2025-2776 CVE-2025-2777 CVE-2025-2778\nSysOwned, Your Friendly Support Ticket - SysAid On-Premise Pre-Auth RCE Chain\n]-> https://labs.watchtowr.com/sysowned-your-friendly-rce-support-ticket/\n\n]-> https://github.com/watchtowrlabs/watchTowr-vs-SysAid-PreAuth-RCE-Chain", "creation_timestamp": "2026-07-26T02:00:12.909041Z"}, {"uuid": "4a180e79-7a59-418d-8f30-2b8a25638a8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "https://t.me/cyberwarehouse/733", "content": "https://securityonline.info/apache-camel-vulnerability-cve-2025-27636-exposes-applications-to-rce-poc-releases/", "creation_timestamp": "2026-07-26T02:00:13.789851Z"}, {"uuid": "f1af3654-cb41-4871-93ce-0e6963f94a50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27533", "type": "seen", "source": "https://t.me/cyberwarehouse/834", "content": "\u041c\u0430\u0439\u0441\u043a\u0438\u0439 Linux Patch Wednesday. \u0412 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043d\u043e\u0433\u043e - 1091. \u0418\u0437 \u043d\u0438\u0445 716 \u0432 Linux Kernel. \ud83e\udd2f \u0414\u043b\u044f 5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0435\u0441\u0442\u044c \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432\u0436\u0438\u0432\u0443\u044e:\n\n\ud83d\udd3b RCE - PHP CSS Parser (CVE-2020-13756). \u0412 AttackerKB, \u0435\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442. \n\ud83d\udd3b DoS - Apache ActiveMQ (CVE-2025-27533). \u0412 AttackerKB, \u0435\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442. \n\ud83d\udd3b SFB - Chromium (CVE-2025-4664). \u0412 CISA KEV.\n\ud83d\udd3b PathTrav - buildkit (CVE-2024-23652) \u0438 MemCor - buildkit (CVE-2024-23651). \u0412 \u0411\u0414\u0423 \u0424\u0421\u0422\u042d\u041a.\n\n\u0415\u0449\u0451 \u0434\u043b\u044f 52 (\u2757\ufe0f) \u0435\u0441\u0442\u044c \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430. \u0418\u0437 \u043d\u0438\u0445 \u043c\u043e\u0436\u043d\u043e \u0432\u044b\u0434\u0435\u043b\u0438\u0442\u044c 2 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u044f \u0443\u0436\u0435 \u043f\u0438\u0441\u0430\u043b \u0440\u0430\u043d\u0435\u0435:\n\n\ud83d\udd38 RCE - Kubernetes \"IngressNightmare\" (CVE-2025-1974 \u0438 4 \u0434\u0440\u0443\u0433\u0438\u0445)\n\ud83d\udd38 RCE - Erlang/OTP (CVE-2025-32433)\n\n\u0422\u0430\u043a\u0436\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b \u0434\u043b\u044f: \n\n\ud83d\udd38 EoP - Linux Kernel (CVE-2023-53033)\n\ud83d\udd38 XSS - Horde IMP (CVE-2025-30349)\n\ud83d\udd38 PathTrav - tar-fs (CVE-2024-12905)\n\ud83d\udd38 SFB - kitty (CVE-2025-43929) \n\ud83d\udd38 DoS - libxml2 (CVE-2025-32414)\n\n\ud83d\uddd2 \u041f\u043e\u043b\u043d\u044b\u0439 \u043e\u0442\u0447\u0451\u0442 Vulristics\n\n@avleonovrus #LinuxPatchWednesday #Vulristics #Linux #Kubernetes #IngressNightmare #Erlang #ErlangOTP", "creation_timestamp": "2026-07-26T02:00:12.136172Z"}, {"uuid": "54f7310d-2b7c-463f-8c50-1e4840e762a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "seen", "source": "https://t.me/cyberwarehouse/812", "content": "#exploit\nCVE-2025-2775 CVE-2025-2776 CVE-2025-2777 CVE-2025-2778\nSysOwned, Your Friendly Support Ticket - SysAid On-Premise Pre-Auth RCE Chain\n]-> https://labs.watchtowr.com/sysowned-your-friendly-rce-support-ticket/\n\n]-> https://github.com/watchtowrlabs/watchTowr-vs-SysAid-PreAuth-RCE-Chain", "creation_timestamp": "2026-07-26T02:00:12.863360Z"}, {"uuid": "db5e79ad-5d3b-470b-8109-a0c6caa9b66a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://t.me/EchelonEyes/3842", "content": "\u041c\u0430\u0439\u0441\u043a\u0438\u0439 \u043f\u0430\u0442\u0447 Android \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 46 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0443\u044e\n\nGoogle \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043c\u0430\u0439\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0435 46 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e zero-day CVE-2025-27363 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 FreeType. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0448\u0440\u0438\u0444\u0442\u044b TrueType GX \u0431\u0435\u0437 \u043f\u0440\u0430\u0432 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u041c\u0430\u0439\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442:\n\u2022  \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f 8 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439;\n\u2022  15 \u0432\u0430\u0436\u043d\u044b\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Framework;\n\u2022  \u043f\u0430\u0442\u0447\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Qualcomm \u0438 MediaTek.\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u0440\u0438\u0437\u044b\u0432\u0430\u044e\u0442 \u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Android. \u0412\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u0441\u0442\u0430\u0440\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043b\u0443\u0447\u0448\u0435 \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438. \n\n#\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #\u043f\u0430\u0442\u0447\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://eyes.etecs.ru/r/540993", "creation_timestamp": "2026-07-26T02:00:30.828667Z"}, {"uuid": "512269b3-261e-4059-82d6-3cf5a3f7e114", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://t.me/EchelonEyes/3786", "content": "Mozilla \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Firefox, \u043f\u043e\u0445\u043e\u0436\u0443\u044e \u043d\u0430 \u0431\u0430\u0433 \u0432 Chrome\n\nMozilla \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Firefox, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-2857. \u0414\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432\u0435\u0440\u0441\u0438\u0438 Firefox \u0434\u043b\u044f Windows, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0441\u0432\u0438\u0434\u0435\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u043e \u0437\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0435\u0439 Google \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0441\u0445\u043e\u0436\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Chrome (CVE-2025-2783), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u0432 \u0445\u043e\u0434\u0435 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0430\u0442\u0430\u043a \u043f\u0440\u043e\u0442\u0438\u0432 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043c\u0435\u0434\u0438\u0430 \u0438 \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0439. \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Kaspersky, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0432\u0448\u0438\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442, \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438 \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438 - \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u0432\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b Chrome. \n\n\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0421\u0428\u0410 CISA \u0443\u0436\u0435 \u0432\u043d\u0435\u0441\u043b\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Chrome \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u0433\u0440\u043e\u0437, \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u043d\u0443\u0432 \u043e\u0441\u043e\u0431\u0443\u044e \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0420\u0430\u043d\u0435\u0435 \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 Mozilla \u0443\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0430 \u0434\u0440\u0443\u0433\u0443\u044e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-9680), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://therecord.media/firefox-sandbox-vulnerability-similar-chrome-zero-day", "creation_timestamp": "2026-07-26T02:00:31.381542Z"}, {"uuid": "5d9ac29a-5aa3-4d98-a10d-1d97df477906", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://t.me/EchelonEyes/3778", "content": "\"\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u044f \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e\" \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0441\u043b\u043e\u0436\u043d\u0443\u044e APT-\u0430\u0442\u0430\u043a\u0443, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Chrome\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u0413\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u0433\u0440\u043e\u0437 (Kaspersky GReAT) \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0446\u0435\u043b\u0435\u0432\u0443\u044e \u0430\u0442\u0430\u043a\u0443 Operation ForumTroll (\u0424\u043e\u0440\u0443\u043c\u043d\u044b\u0439 \u0442\u0440\u043e\u043b\u043b\u044c), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Google Chrome. \u0410\u0442\u0430\u043a\u0430 \u0431\u044b\u043b\u0430 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043d\u0430 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0435 \u0421\u041c\u0418 \u0438 \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0440\u0430\u0441\u0441\u044b\u043b\u0430\u043b\u0438 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u043f\u0438\u0441\u044c\u043c\u0430 \u0441 \u043f\u0440\u0438\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044f\u043c\u0438 \u043d\u0430 \u0444\u043e\u0440\u0443\u043c \"\u041f\u0440\u0438\u043c\u0430\u043a\u043e\u0432\u0441\u043a\u0438\u0435 \u0427\u0442\u0435\u043d\u0438\u044f\". \u041f\u0440\u0438 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0435 \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435 \u0432 Chrome \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u043b\u043e \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Windows \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-2783 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.1), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u0443 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b.\n\nGoogle \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b 25 \u043c\u0430\u0440\u0442\u0430 \u043f\u0430\u0442\u0447, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c. \u0425\u043e\u0442\u044f \u0430\u0442\u0430\u043a\u0430 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0430, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0432\u043e\u043b\u043d\u0430. \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0437\u0430 \u0430\u0442\u0430\u043a\u043e\u0439 \u0441\u0442\u043e\u0438\u0442 APT-\u0433\u0440\u0443\u043f\u043f\u0430, \u0446\u0435\u043b\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0431\u044b\u043b \u0448\u043f\u0438\u043e\u043d\u0430\u0436.\n\n#\u0430\u0442\u0430\u043a\u0430 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e\u0434\u043d\u044f \n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.kaspersky.ru/blog/forum-troll-apt-with-zero-day-vulnerability/39300/", "creation_timestamp": "2026-07-26T02:00:31.538682Z"}, {"uuid": "c949c0fc-4d51-4575-8be1-8beb12fb080f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "seen", "source": "https://t.me/EchelonEyes/3719", "content": "\u0412 \u0447\u0438\u043f\u0435 Bluetooth, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0435\u0441\u0442\u044c \u0432 \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u043d\u0435\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b\n\n\u0412\u0435\u0437\u0434\u0435\u0441\u0443\u0449\u0438\u0439 \u043c\u0438\u043a\u0440\u043e\u0447\u0438\u043f ESP32 \u043e\u0442 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f Espressif, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u0432 1 \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043d\u0435\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a.\n\n\u041a\u0430\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0438\u0441\u043f\u0430\u043d\u0441\u043a\u0438\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u041c\u0438\u0433\u0435\u043b\u044c \u0422\u0430\u0440\u0430\u0441\u043a\u043e \u0410\u043a\u0443\u043d\u044c\u044f \u0438 \u0410\u043d\u0442\u043e\u043d\u0438\u043e \u0412\u0430\u0441\u043a\u0435\u0441 \u0411\u043b\u0430\u043d\u043a\u043e \u0438\u0437 Tarlogic Security \u043d\u0435\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u0442\u044c \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c, \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u0442\u044c \u043d\u0430 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0432 \u0441\u0435\u0442\u0438 \u0438 \u0434\u043e\u043b\u0433\u043e\u0441\u0440\u043e\u0447\u043d\u043e \u0442\u0430\u043c \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0442\u044c\u0441\u044f. \u042d\u0442\u0438 \u0432\u044b\u0432\u043e\u0434\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 RootedCON \u0432 \u041c\u0430\u0434\u0440\u0438\u0434\u0435.\n\n\u00ab\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u043e\u0433\u043e \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u043e\u0442 \u0447\u0443\u0436\u043e\u0433\u043e \u0438\u043c\u0435\u043d\u0438 \u0438 \u043d\u0430\u0432\u0441\u0435\u0433\u0434\u0430 \u0437\u0430\u0440\u0430\u0436\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0435 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u044b, \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u044b, \u0438\u043d\u0442\u0435\u043b\u043b\u0435\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0437\u0430\u043c\u043a\u0438 \u0438\u043b\u0438 \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u043e\u0435 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435, \u043e\u0431\u0445\u043e\u0434\u044f \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0430\u0443\u0434\u0438\u0442\u0430 \u043a\u043e\u0434\u0430\u00bb.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438, \u0447\u0442\u043e ESP32 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u0438\u043c \u0438\u0437 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 \u043c\u0438\u0440\u0435 \u0447\u0438\u043f\u043e\u0432 \u0434\u043b\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043f\u043e Wi-Fi + Bluetooth \u0432 IoT-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f Tarlogic \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u0434\u0440\u0430\u0439\u0432\u0435\u0440 USB Bluetooth \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 C, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e-\u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u043c \u0438 \u043a\u0440\u043e\u0441\u0441\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435\u043d\u043d\u044b\u043c, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044f \u043f\u0440\u044f\u043c\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044e \u0431\u0435\u0437 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f API, \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u043d\u044b\u0445 \u0434\u043b\u044f \u041e\u0421.\n\n\u0412\u043e\u043e\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0441\u044c \u044d\u0442\u0438\u043c \u043d\u043e\u0432\u044b\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u044f\u043c\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0442\u0440\u0430\u0444\u0438\u043a\u0443 Bluetooth, Tarlogic \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 (\u043a\u043e\u0434 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 0x3F) \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 ESP32 Bluetooth, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c \u043d\u0438\u0437\u043a\u043e\u0443\u0440\u043e\u0432\u043d\u0435\u0432\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438 Bluetooth.\n\n\u0412\u0441\u0435\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432\u044b\u044f\u0432\u0438\u043b\u0438 29 \u043d\u0435\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432 \u0441\u043e\u0432\u043e\u043a\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u0438\u0437\u0443\u044e\u0442\u0441\u044f \u043a\u0430\u043a \u00ab\u0431\u044d\u043a\u0434\u043e\u0440\u00bb, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0438 \u043f\u0430\u043c\u044f\u0442\u044c\u044e, \u043f\u043e\u0434\u043c\u0435\u043d\u044b MAC-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043f\u0430\u043a\u0435\u0442\u043e\u0432 LMP/LLCP.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-27840. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.documentcloud.org/documents/25554812-2025-rootedcon-bluetoothtools/\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c", "creation_timestamp": "2026-07-26T02:00:32.116779Z"}, {"uuid": "c665213b-f703-4977-a1aa-0926513be8e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://t.me/cult_security/465", "content": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u044f \"\u0424\u043e\u0440\u0443\u043c\u043d\u044b\u0439 \u0442\u0440\u043e\u043b\u043b\u044c\"\n\n\u0412 \u043c\u0430\u0440\u0442\u0435 2025 \u0433\u043e\u0434\u0430 \u0432 \u0420\u043e\u0441\u0441\u0438\u0438 \u0431\u044b\u043b\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u00ab\u0424\u043e\u0440\u0443\u043c\u043d\u044b\u0439 \u0442\u0440\u043e\u043b\u043b\u044c\u00bb. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u00ab\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0435\u0439 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e\u00bb.\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b Kaspersky GReAT \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u0431\u0440\u0435\u0448\u0438 \u0438 \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Google. 25 \u043c\u0430\u0440\u0442\u0430 2025 \u0433\u043e\u0434\u0430 \u0432\u044b\u0448\u043b\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-2783.\n\nJoin our club Cult \ud83d\udc41", "creation_timestamp": "2026-07-26T02:02:56.315737Z"}, {"uuid": "2ce1b1d5-9a82-487f-b353-7b63594f196c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27915", "type": "seen", "source": "https://t.me/Positive_Technologies/3877", "content": "\ud83d\udc7e \u041d\u043e\u044f\u0431\u0440\u044c\u0441\u043a\u0438\u0439 \u0443\u043b\u043e\u0432 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u044b\u043b \u0431\u043e\u0433\u0430\u0442\u044b\u043c: \u043d\u0430\u0448\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e\u0441\u0447\u0438\u0442\u0430\u043b\u0438 \u0442\u0430\u043a\u043e\u0432\u044b\u043c\u0438 \u0446\u0435\u043b\u044b\u0445 \u0434\u0435\u0432\u044f\u0442\u044c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\n\u041e \u043d\u0438\u0445 \u0443\u0436\u0435 \u0437\u043d\u0430\u044e\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 MaxPatrol VM, \u043a\u0443\u0434\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u0445 \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u0435\u0442 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 12 \u0447\u0430\u0441\u043e\u0432 \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u0438\u0445 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0441\u0435\u0442\u0438\u0442\u0435\u043b\u0438 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u043f\u043e\u0440\u0442\u0430\u043b\u0430 dbugs \ud83d\ude09\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Microsoft\n\n\u041c\u043e\u0433\u0443\u0442 \u043a\u043e\u0441\u043d\u0443\u0442\u044c\u0441\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 Windows \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043e\u043a\u043e\u043b\u043e \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\ud83d\udd34 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 Remote Access Connection Manager \u2014  PT-2025-42115 (CVE-2025-59230, CVSS \u2014 7,8)\n\n\u041f\u043e\u043b\u0443\u0447\u0438\u0432 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f, \u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f SYSTEM \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c.\n\n\ud83d\udd34 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 Agere Modem \u2014 PT-2025-41973 (CVE-2025-24990, CVSS \u2014 7,8)\n\n\u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u041f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 EDR-\u0440\u0435\u0448\u0435\u043d\u0438\u0439.\n\n\ud83d\udd34 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Windows Server (WSUS) \u2014 PT-2025-42147 (CVE-2025-59287, CVSS \u2014 9,8)\n\n\u041c\u043e\u0436\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 Windows-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 WSUS Server Role. \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0445\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0440\u0435\u0434\u0438 \u0441\u0438\u0441\u0442\u0435\u043c-\u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b.\n\n\ud83d\udd34 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u044f\u0440\u043b\u044b\u043a\u043e\u0432 Microsoft Windows \u2014 PT-2025-34796 (CVE-2025-9491, CVSS \u2014 7,8)\n\n\u0418\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043f\u0440\u043e\u0432\u043e\u0434\u043d\u0438\u043a\u0430 Windows \u043c\u043e\u0436\u0435\u0442 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0430\u0442\u044c \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u044b \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 \u0432 .lnk-\u0444\u0430\u0439\u043b\u0430\u0445, \u0441\u043a\u0440\u044b\u0432\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442 \u2014 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043a\u0440\u0430\u0436\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0438\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043b\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0438\u0445 \u0430\u0442\u0430\u043a.\n\n\ud83d\udd34 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0432 Microsoft SharePoint \u2014 PT-2025-28601 (CVE-2025-49704, CVSS \u2014 8,8)\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u0435\u0435, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440.\n\n\ud83d\udd34 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0432 \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u0435 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u044f\u0434\u0440\u0430 Linux \u2014 PT-2025-24274 (CVE-2025-38001, CVSS \u2014 5,7)\n\n\u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 Linux, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Debian 12, Ubuntu \u0438 \u043e\u043f\u0442\u0438\u043c\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0434\u043b\u044f \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 (COS) Google.\n\n\u0410\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\ud83d\udd34\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0431\u0430\u0437 \u0437\u043d\u0430\u043d\u0438\u0439, \u043e\u0431\u044a\u0435\u043a\u0442\u043d\u044b\u0445 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449 \u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 XWiki \u2014 PT-2025-7547 (CVE-2025-24893, CVSS \u2014 9,8)\n\n\u041f\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u043c \u0434\u0430\u043d\u043d\u044b\u043c, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043e \u043e\u043a\u043e\u043b\u043e 24 \u0442\u044b\u0441\u044f\u0447 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 XWiki.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043c\u0430\u043a\u0440\u043e\u0441 SolrSearch, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u043f\u043e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u043c\u0443 \u0432 XWiki. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 GET-\u0437\u0430\u043f\u0440\u043e\u0441, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\ud83d\udd34 XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Zimbra Collaboration Suite \u2014 PT-2025-11082 (CVE-2025-27915, CVSS \u2014 5,4)\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0432\u0435\u043d\u0434\u043e\u0440\u0430, Zimbra \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u0432 6 \u0442\u044b\u0441\u044f\u0447\u0430\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0432 127 \u0441\u0442\u0440\u0430\u043d\u0430\u0445. \n\n\u041f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442 \u043f\u0438\u0441\u044c\u043c\u0430 \u0441\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 ICS-\u0444\u0430\u0439\u043b\u0430\u043c\u0438, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u043d\u0435\u0434\u0440\u0435\u043d \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 JavaScript-\u043a\u043e\u0434. \u0415\u0441\u043b\u0438 \u0444\u0430\u0439\u043b \u0431\u0443\u0434\u0435\u0442 \u0437\u0430\u043f\u0443\u0449\u0435\u043d, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0436\u0435\u0440\u0442\u0432\u044b, \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043f\u0438\u0441\u044c\u043c\u0430 \u0438 \u043a\u0440\u0430\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435.\n\n\ud83d\udd34 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0432 Redis \u2014 PT-2025-40594 (CVE-2025-49844, CVSS \u2014 9,9)\n\n\u041f\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c Wiz, \u043d\u0430 \u043c\u043e\u043c\u0435\u043d\u0442 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u043e\u0441\u044c \u043e\u043a\u043e\u043b\u043e 330 \u0442\u044b\u0441\u044f\u0447 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Redis (\u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 60 \u0442\u044b\u0441\u044f\u0447 \u043d\u0435 \u0431\u044b\u043b\u0438 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439).\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0435\u043c\u0443 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0442\u044c, \u0441\u0442\u0438\u0440\u0430\u0442\u044c \u0438\u043b\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f, \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0440\u0435\u0441\u0443\u0440\u0441\u044b \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c. \u041f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432 Redis \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f, \u0447\u0442\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u043f\u0440\u043e\u0449\u0430\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\ud83d\udc49 \u0411\u043e\u043b\u044c\u0448\u0435 \u043e\u0431\u043e \u0432\u0441\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0438 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u043b\u0438 \u0432 \u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442\u0435.\n\n#\u0432\u0442\u0440\u0435\u043d\u0434\u0435VM \n@Positive_Technologies", "creation_timestamp": "2026-07-26T02:03:00.213034Z"}, {"uuid": "a570167f-bfc6-4071-b871-0a065c756fa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://t.me/Positive_Technologies/3436", "content": "Team46 \u0438 TaxOff: \u0434\u0432\u0435 \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u043e\u0434\u043d\u043e\u0439 \u043c\u0435\u0434\u0430\u043b\u0438 \ud83d\ude11\n\n\u0412 \u043c\u0430\u0440\u0442\u0435 2025 \u0433\u043e\u0434\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b TI-\u0434\u0435\u043f\u0430\u0440\u0442\u0430\u043c\u0435\u043d\u0442\u0430 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043d\u043e\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Positive Technologies (PT Expert Security Center, PT ESC) \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u0438 \u0430\u0442\u0430\u043a\u0443, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0432 \u044d\u0442\u043e \u0436\u0435 \u0432\u0440\u0435\u043c\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f CVE-2025-2783 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0441\u0430\u043c\u0443 \u0430\u0442\u0430\u043a\u0443 \u043e\u043f\u0438\u0441\u0430\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u00ab\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e\u00bb, \u043e\u0434\u043d\u0430\u043a\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u043e\u0441\u0442\u0430\u043b\u0430\u0441\u044c \u0431\u0435\u0437 \u0430\u0442\u0440\u0438\u0431\u0443\u0446\u0438\u0438.\n\n\ud83e\ude9e \u0412 \u043e\u0442\u0447\u0435\u0442\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u0430\u0442\u0440\u0438\u0431\u0443\u0446\u0438\u044f \u0434\u0430\u043d\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043a \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0435 TaxOff, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u0440\u0430\u043d\u0435\u0435. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442\u0441\u044f \u0434\u0430\u043d\u043d\u044b\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0441\u0447\u0438\u0442\u0430\u0442\u044c \u0435\u0449\u0435 \u043e\u0434\u043d\u0443 \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u0443\u044e \u043d\u0430\u043c\u0438 \u0440\u0430\u043d\u0435\u0435 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0443 Team46 \u0438 TaxOff \u043e\u0434\u043d\u043e\u0439 \u0438 \u0442\u043e\u0439 \u0436\u0435 \u0433\u0440\u0443\u043f\u043f\u043e\u0439.\n\n\u041d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u043c \u0432\u0435\u043a\u0442\u043e\u0440\u043e\u043c \u0430\u0442\u0430\u043a\u0438 \u0431\u044b\u043b\u043e \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u043e\u0435 \u043f\u0438\u0441\u044c\u043c\u043e, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0435\u0435 \u0441\u0441\u044b\u043b\u043a\u0443, \u043f\u0440\u0438 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0435 \u043f\u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0436\u0435\u0440\u0442\u0432\u0430 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043b\u0430 one-click exploit, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u0439 \u043a \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0431\u044d\u043a\u0434\u043e\u0440\u0430 Trinper \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 TaxOff \u0432 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0412 \u044d\u0442\u043e\u0439 \u0430\u0442\u0430\u043a\u0435 \u0431\u044b\u043b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u0431\u044d\u043a\u0434\u043e\u0440 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 Team46.\n\n\u0413\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 Team46 \u0431\u044b\u043b\u0430 \u0440\u0430\u043d\u0435\u0435 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u0430 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 DLL-Hijacking \u0434\u043b\u044f \u042f\u043d\u0434\u0435\u043a\u0441 \u0411\u0440\u0430\u0443\u0437\u0435\u0440\u0430 (CVE-2024-6473).\n\n\ud83d\udcd6 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 \u0447\u0438\u0442\u0430\u0439\u0442\u0435 \u043d\u0430 \u043d\u0430\u0448\u0435\u043c \u0441\u0430\u0439\u0442\u0435.\n\n#TI #APT #cve\n@ptescalator", "creation_timestamp": "2026-07-26T07:01:18.193563Z"}, {"uuid": "7b0431ee-72c8-4539-87b6-3b9344dbca34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/812", "content": "#exploit\nCVE-2025-2775 CVE-2025-2776 CVE-2025-2777 CVE-2025-2778\nSysOwned, Your Friendly Support Ticket - SysAid On-Premise Pre-Auth RCE Chain\n]-> https://labs.watchtowr.com/sysowned-your-friendly-rce-support-ticket/\n\n]-> https://github.com/watchtowrlabs/watchTowr-vs-SysAid-PreAuth-RCE-Chain", "creation_timestamp": "2026-07-27T00:00:29.674383Z"}, {"uuid": "8cd35c12-db1a-4014-b4f4-edc57e5fec3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2778", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/812", "content": "#exploit\nCVE-2025-2775 CVE-2025-2776 CVE-2025-2777 CVE-2025-2778\nSysOwned, Your Friendly Support Ticket - SysAid On-Premise Pre-Auth RCE Chain\n]-> https://labs.watchtowr.com/sysowned-your-friendly-rce-support-ticket/\n\n]-> https://github.com/watchtowrlabs/watchTowr-vs-SysAid-PreAuth-RCE-Chain", "creation_timestamp": "2026-07-27T00:00:29.709429Z"}, {"uuid": "89bbd828-e9c4-4060-9dd7-a968d1549c9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27364", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/721", "content": "https://securityonline.info/cve-2025-27364-cvss-10-remote-code-execution-flaw-found-in-mitre-caldera-poc-releases/", "creation_timestamp": "2026-07-27T00:00:28.698054Z"}, {"uuid": "53ada848-a448-465d-bbe0-cdefa7050a28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2776", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/812", "content": "#exploit\nCVE-2025-2775 CVE-2025-2776 CVE-2025-2777 CVE-2025-2778\nSysOwned, Your Friendly Support Ticket - SysAid On-Premise Pre-Auth RCE Chain\n]-> https://labs.watchtowr.com/sysowned-your-friendly-rce-support-ticket/\n\n]-> https://github.com/watchtowrlabs/watchTowr-vs-SysAid-PreAuth-RCE-Chain", "creation_timestamp": "2026-07-27T00:00:29.746531Z"}, {"uuid": "1af62226-9c76-470d-8a28-b5e76b6bbd92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2777", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/812", "content": "#exploit\nCVE-2025-2775 CVE-2025-2776 CVE-2025-2777 CVE-2025-2778\nSysOwned, Your Friendly Support Ticket - SysAid On-Premise Pre-Auth RCE Chain\n]-> https://labs.watchtowr.com/sysowned-your-friendly-rce-support-ticket/\n\n]-> https://github.com/watchtowrlabs/watchTowr-vs-SysAid-PreAuth-RCE-Chain", "creation_timestamp": "2026-07-27T00:00:29.787111Z"}, {"uuid": "77d8661e-561d-46c6-af1e-92bc85ccd3ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/733", "content": "https://securityonline.info/apache-camel-vulnerability-cve-2025-27636-exposes-applications-to-rce-poc-releases/", "creation_timestamp": "2026-07-27T00:00:28.805604Z"}, {"uuid": "aabe59ff-df5d-41ff-bc5d-b9292cb445a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27533", "type": "seen", "source": "https://t.me/cyberwarehouse/834", "content": "\u041c\u0430\u0439\u0441\u043a\u0438\u0439 Linux Patch Wednesday. \u0412 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043d\u043e\u0433\u043e - 1091. \u0418\u0437 \u043d\u0438\u0445 716 \u0432 Linux Kernel. \ud83e\udd2f \u0414\u043b\u044f 5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0435\u0441\u0442\u044c \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432\u0436\u0438\u0432\u0443\u044e:\n\n\ud83d\udd3b RCE - PHP CSS Parser (CVE-2020-13756). \u0412 AttackerKB, \u0435\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442. \n\ud83d\udd3b DoS - Apache ActiveMQ (CVE-2025-27533). \u0412 AttackerKB, \u0435\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442. \n\ud83d\udd3b SFB - Chromium (CVE-2025-4664). \u0412 CISA KEV.\n\ud83d\udd3b PathTrav - buildkit (CVE-2024-23652) \u0438 MemCor - buildkit (CVE-2024-23651). \u0412 \u0411\u0414\u0423 \u0424\u0421\u0422\u042d\u041a.\n\n\u0415\u0449\u0451 \u0434\u043b\u044f 52 (\u2757\ufe0f) \u0435\u0441\u0442\u044c \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430. \u0418\u0437 \u043d\u0438\u0445 \u043c\u043e\u0436\u043d\u043e \u0432\u044b\u0434\u0435\u043b\u0438\u0442\u044c 2 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u044f \u0443\u0436\u0435 \u043f\u0438\u0441\u0430\u043b \u0440\u0430\u043d\u0435\u0435:\n\n\ud83d\udd38 RCE - Kubernetes \"IngressNightmare\" (CVE-2025-1974 \u0438 4 \u0434\u0440\u0443\u0433\u0438\u0445)\n\ud83d\udd38 RCE - Erlang/OTP (CVE-2025-32433)\n\n\u0422\u0430\u043a\u0436\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b \u0434\u043b\u044f: \n\n\ud83d\udd38 EoP - Linux Kernel (CVE-2023-53033)\n\ud83d\udd38 XSS - Horde IMP (CVE-2025-30349)\n\ud83d\udd38 PathTrav - tar-fs (CVE-2024-12905)\n\ud83d\udd38 SFB - kitty (CVE-2025-43929) \n\ud83d\udd38 DoS - libxml2 (CVE-2025-32414)\n\n\ud83d\uddd2 \u041f\u043e\u043b\u043d\u044b\u0439 \u043e\u0442\u0447\u0451\u0442 Vulristics\n\n@avleonovrus #LinuxPatchWednesday #Vulristics #Linux #Kubernetes #IngressNightmare #Erlang #ErlangOTP", "creation_timestamp": "2026-07-27T00:00:30.475965Z"}, {"uuid": "86d6b140-dfa2-466b-9aa0-b448d1201424", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "seen", "source": "https://t.me/EchelonEyes/3842", "content": "\u041c\u0430\u0439\u0441\u043a\u0438\u0439 \u043f\u0430\u0442\u0447 Android \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 46 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0443\u044e\n\nGoogle \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043c\u0430\u0439\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0435 46 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e zero-day CVE-2025-27363 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 FreeType. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0448\u0440\u0438\u0444\u0442\u044b TrueType GX \u0431\u0435\u0437 \u043f\u0440\u0430\u0432 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u041c\u0430\u0439\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442:\n\u2022  \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f 8 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439;\n\u2022  15 \u0432\u0430\u0436\u043d\u044b\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Framework;\n\u2022  \u043f\u0430\u0442\u0447\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Qualcomm \u0438 MediaTek.\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u0440\u0438\u0437\u044b\u0432\u0430\u044e\u0442 \u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Android. \u0412\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u0441\u0442\u0430\u0440\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043b\u0443\u0447\u0448\u0435 \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438. \n\n#\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #\u043f\u0430\u0442\u0447\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://eyes.etecs.ru/r/540993", "creation_timestamp": "2026-07-27T00:00:35.762607Z"}, {"uuid": "26e0ed1f-0d24-45b4-85b0-adef226b9dbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://t.me/EchelonEyes/3778", "content": "\"\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u044f \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e\" \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0441\u043b\u043e\u0436\u043d\u0443\u044e APT-\u0430\u0442\u0430\u043a\u0443, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Chrome\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u0413\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u0433\u0440\u043e\u0437 (Kaspersky GReAT) \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0446\u0435\u043b\u0435\u0432\u0443\u044e \u0430\u0442\u0430\u043a\u0443 Operation ForumTroll (\u0424\u043e\u0440\u0443\u043c\u043d\u044b\u0439 \u0442\u0440\u043e\u043b\u043b\u044c), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Google Chrome. \u0410\u0442\u0430\u043a\u0430 \u0431\u044b\u043b\u0430 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043d\u0430 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0435 \u0421\u041c\u0418 \u0438 \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0440\u0430\u0441\u0441\u044b\u043b\u0430\u043b\u0438 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u043f\u0438\u0441\u044c\u043c\u0430 \u0441 \u043f\u0440\u0438\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044f\u043c\u0438 \u043d\u0430 \u0444\u043e\u0440\u0443\u043c \"\u041f\u0440\u0438\u043c\u0430\u043a\u043e\u0432\u0441\u043a\u0438\u0435 \u0427\u0442\u0435\u043d\u0438\u044f\". \u041f\u0440\u0438 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0435 \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435 \u0432 Chrome \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u043b\u043e \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Windows \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-2783 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.1), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u0443 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b.\n\nGoogle \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b 25 \u043c\u0430\u0440\u0442\u0430 \u043f\u0430\u0442\u0447, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c. \u0425\u043e\u0442\u044f \u0430\u0442\u0430\u043a\u0430 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0430, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0432\u043e\u043b\u043d\u0430. \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0437\u0430 \u0430\u0442\u0430\u043a\u043e\u0439 \u0441\u0442\u043e\u0438\u0442 APT-\u0433\u0440\u0443\u043f\u043f\u0430, \u0446\u0435\u043b\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0431\u044b\u043b \u0448\u043f\u0438\u043e\u043d\u0430\u0436.\n\n#\u0430\u0442\u0430\u043a\u0430 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e\u0434\u043d\u044f \n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.kaspersky.ru/blog/forum-troll-apt-with-zero-day-vulnerability/39300/", "creation_timestamp": "2026-07-27T00:00:37.257864Z"}, {"uuid": "cb961b68-39b7-4751-acf9-f8e40b977943", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://t.me/EchelonEyes/3786", "content": "Mozilla \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Firefox, \u043f\u043e\u0445\u043e\u0436\u0443\u044e \u043d\u0430 \u0431\u0430\u0433 \u0432 Chrome\n\nMozilla \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Firefox, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-2857. \u0414\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432\u0435\u0440\u0441\u0438\u0438 Firefox \u0434\u043b\u044f Windows, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0441\u0432\u0438\u0434\u0435\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u043e \u0437\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0435\u0439 Google \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0441\u0445\u043e\u0436\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Chrome (CVE-2025-2783), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u0432 \u0445\u043e\u0434\u0435 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0430\u0442\u0430\u043a \u043f\u0440\u043e\u0442\u0438\u0432 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043c\u0435\u0434\u0438\u0430 \u0438 \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0439. \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Kaspersky, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0432\u0448\u0438\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442, \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438 \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438 - \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u0432\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b Chrome. \n\n\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0421\u0428\u0410 CISA \u0443\u0436\u0435 \u0432\u043d\u0435\u0441\u043b\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Chrome \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u0433\u0440\u043e\u0437, \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u043d\u0443\u0432 \u043e\u0441\u043e\u0431\u0443\u044e \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0420\u0430\u043d\u0435\u0435 \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 Mozilla \u0443\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0430 \u0434\u0440\u0443\u0433\u0443\u044e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-9680), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://therecord.media/firefox-sandbox-vulnerability-similar-chrome-zero-day", "creation_timestamp": "2026-07-27T00:00:37.113593Z"}, {"uuid": "756d34b0-2c6f-4b44-aa55-d86277fe6686", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "seen", "source": "https://t.me/EchelonEyes/3719", "content": "\u0412 \u0447\u0438\u043f\u0435 Bluetooth, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0435\u0441\u0442\u044c \u0432 \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u043d\u0435\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b\n\n\u0412\u0435\u0437\u0434\u0435\u0441\u0443\u0449\u0438\u0439 \u043c\u0438\u043a\u0440\u043e\u0447\u0438\u043f ESP32 \u043e\u0442 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f Espressif, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u0432 1 \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043d\u0435\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a.\n\n\u041a\u0430\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0438\u0441\u043f\u0430\u043d\u0441\u043a\u0438\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u041c\u0438\u0433\u0435\u043b\u044c \u0422\u0430\u0440\u0430\u0441\u043a\u043e \u0410\u043a\u0443\u043d\u044c\u044f \u0438 \u0410\u043d\u0442\u043e\u043d\u0438\u043e \u0412\u0430\u0441\u043a\u0435\u0441 \u0411\u043b\u0430\u043d\u043a\u043e \u0438\u0437 Tarlogic Security \u043d\u0435\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u0442\u044c \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c, \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u0442\u044c \u043d\u0430 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0432 \u0441\u0435\u0442\u0438 \u0438 \u0434\u043e\u043b\u0433\u043e\u0441\u0440\u043e\u0447\u043d\u043e \u0442\u0430\u043c \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0442\u044c\u0441\u044f. \u042d\u0442\u0438 \u0432\u044b\u0432\u043e\u0434\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 RootedCON \u0432 \u041c\u0430\u0434\u0440\u0438\u0434\u0435.\n\n\u00ab\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u043e\u0433\u043e \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u043e\u0442 \u0447\u0443\u0436\u043e\u0433\u043e \u0438\u043c\u0435\u043d\u0438 \u0438 \u043d\u0430\u0432\u0441\u0435\u0433\u0434\u0430 \u0437\u0430\u0440\u0430\u0436\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0435 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u044b, \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u044b, \u0438\u043d\u0442\u0435\u043b\u043b\u0435\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0437\u0430\u043c\u043a\u0438 \u0438\u043b\u0438 \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u043e\u0435 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435, \u043e\u0431\u0445\u043e\u0434\u044f \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0430\u0443\u0434\u0438\u0442\u0430 \u043a\u043e\u0434\u0430\u00bb.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438, \u0447\u0442\u043e ESP32 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u0438\u043c \u0438\u0437 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 \u043c\u0438\u0440\u0435 \u0447\u0438\u043f\u043e\u0432 \u0434\u043b\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043f\u043e Wi-Fi + Bluetooth \u0432 IoT-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f Tarlogic \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u0434\u0440\u0430\u0439\u0432\u0435\u0440 USB Bluetooth \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 C, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e-\u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u043c \u0438 \u043a\u0440\u043e\u0441\u0441\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435\u043d\u043d\u044b\u043c, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044f \u043f\u0440\u044f\u043c\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044e \u0431\u0435\u0437 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f API, \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u043d\u044b\u0445 \u0434\u043b\u044f \u041e\u0421.\n\n\u0412\u043e\u043e\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0441\u044c \u044d\u0442\u0438\u043c \u043d\u043e\u0432\u044b\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u044f\u043c\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0442\u0440\u0430\u0444\u0438\u043a\u0443 Bluetooth, Tarlogic \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 (\u043a\u043e\u0434 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 0x3F) \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 ESP32 Bluetooth, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c \u043d\u0438\u0437\u043a\u043e\u0443\u0440\u043e\u0432\u043d\u0435\u0432\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438 Bluetooth.\n\n\u0412\u0441\u0435\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432\u044b\u044f\u0432\u0438\u043b\u0438 29 \u043d\u0435\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432 \u0441\u043e\u0432\u043e\u043a\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u0438\u0437\u0443\u044e\u0442\u0441\u044f \u043a\u0430\u043a \u00ab\u0431\u044d\u043a\u0434\u043e\u0440\u00bb, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0438 \u043f\u0430\u043c\u044f\u0442\u044c\u044e, \u043f\u043e\u0434\u043c\u0435\u043d\u044b MAC-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043f\u0430\u043a\u0435\u0442\u043e\u0432 LMP/LLCP.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-27840. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.documentcloud.org/documents/25554812-2025-rootedcon-bluetoothtools/\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c", "creation_timestamp": "2026-07-27T00:00:37.843991Z"}, {"uuid": "ffc2875c-6b2d-4502-901d-2e1577ac97b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27915", "type": "seen", "source": "https://t.me/Positive_Technologies/3877", "content": "\ud83d\udc7e \u041d\u043e\u044f\u0431\u0440\u044c\u0441\u043a\u0438\u0439 \u0443\u043b\u043e\u0432 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u044b\u043b \u0431\u043e\u0433\u0430\u0442\u044b\u043c: \u043d\u0430\u0448\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e\u0441\u0447\u0438\u0442\u0430\u043b\u0438 \u0442\u0430\u043a\u043e\u0432\u044b\u043c\u0438 \u0446\u0435\u043b\u044b\u0445 \u0434\u0435\u0432\u044f\u0442\u044c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\n\u041e \u043d\u0438\u0445 \u0443\u0436\u0435 \u0437\u043d\u0430\u044e\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 MaxPatrol VM, \u043a\u0443\u0434\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u0445 \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u0435\u0442 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 12 \u0447\u0430\u0441\u043e\u0432 \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u0438\u0445 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0441\u0435\u0442\u0438\u0442\u0435\u043b\u0438 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u043f\u043e\u0440\u0442\u0430\u043b\u0430 dbugs \ud83d\ude09\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Microsoft\n\n\u041c\u043e\u0433\u0443\u0442 \u043a\u043e\u0441\u043d\u0443\u0442\u044c\u0441\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 Windows \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043e\u043a\u043e\u043b\u043e \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\ud83d\udd34 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 Remote Access Connection Manager \u2014  PT-2025-42115 (CVE-2025-59230, CVSS \u2014 7,8)\n\n\u041f\u043e\u043b\u0443\u0447\u0438\u0432 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f, \u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f SYSTEM \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c.\n\n\ud83d\udd34 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 Agere Modem \u2014 PT-2025-41973 (CVE-2025-24990, CVSS \u2014 7,8)\n\n\u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u041f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 EDR-\u0440\u0435\u0448\u0435\u043d\u0438\u0439.\n\n\ud83d\udd34 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Windows Server (WSUS) \u2014 PT-2025-42147 (CVE-2025-59287, CVSS \u2014 9,8)\n\n\u041c\u043e\u0436\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 Windows-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 WSUS Server Role. \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0445\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0440\u0435\u0434\u0438 \u0441\u0438\u0441\u0442\u0435\u043c-\u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b.\n\n\ud83d\udd34 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u044f\u0440\u043b\u044b\u043a\u043e\u0432 Microsoft Windows \u2014 PT-2025-34796 (CVE-2025-9491, CVSS \u2014 7,8)\n\n\u0418\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043f\u0440\u043e\u0432\u043e\u0434\u043d\u0438\u043a\u0430 Windows \u043c\u043e\u0436\u0435\u0442 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0430\u0442\u044c \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u044b \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 \u0432 .lnk-\u0444\u0430\u0439\u043b\u0430\u0445, \u0441\u043a\u0440\u044b\u0432\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442 \u2014 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043a\u0440\u0430\u0436\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0438\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043b\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0438\u0445 \u0430\u0442\u0430\u043a.\n\n\ud83d\udd34 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0432 Microsoft SharePoint \u2014 PT-2025-28601 (CVE-2025-49704, CVSS \u2014 8,8)\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u0435\u0435, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440.\n\n\ud83d\udd34 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0432 \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u0435 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u044f\u0434\u0440\u0430 Linux \u2014 PT-2025-24274 (CVE-2025-38001, CVSS \u2014 5,7)\n\n\u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 Linux, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Debian 12, Ubuntu \u0438 \u043e\u043f\u0442\u0438\u043c\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0434\u043b\u044f \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 (COS) Google.\n\n\u0410\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\ud83d\udd34\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0431\u0430\u0437 \u0437\u043d\u0430\u043d\u0438\u0439, \u043e\u0431\u044a\u0435\u043a\u0442\u043d\u044b\u0445 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449 \u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 XWiki \u2014 PT-2025-7547 (CVE-2025-24893, CVSS \u2014 9,8)\n\n\u041f\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u043c \u0434\u0430\u043d\u043d\u044b\u043c, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043e \u043e\u043a\u043e\u043b\u043e 24 \u0442\u044b\u0441\u044f\u0447 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 XWiki.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043c\u0430\u043a\u0440\u043e\u0441 SolrSearch, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u043f\u043e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u043c\u0443 \u0432 XWiki. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 GET-\u0437\u0430\u043f\u0440\u043e\u0441, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\ud83d\udd34 XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Zimbra Collaboration Suite \u2014 PT-2025-11082 (CVE-2025-27915, CVSS \u2014 5,4)\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0432\u0435\u043d\u0434\u043e\u0440\u0430, Zimbra \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u0432 6 \u0442\u044b\u0441\u044f\u0447\u0430\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0432 127 \u0441\u0442\u0440\u0430\u043d\u0430\u0445. \n\n\u041f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442 \u043f\u0438\u0441\u044c\u043c\u0430 \u0441\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 ICS-\u0444\u0430\u0439\u043b\u0430\u043c\u0438, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u043d\u0435\u0434\u0440\u0435\u043d \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 JavaScript-\u043a\u043e\u0434. \u0415\u0441\u043b\u0438 \u0444\u0430\u0439\u043b \u0431\u0443\u0434\u0435\u0442 \u0437\u0430\u043f\u0443\u0449\u0435\u043d, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0436\u0435\u0440\u0442\u0432\u044b, \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043f\u0438\u0441\u044c\u043c\u0430 \u0438 \u043a\u0440\u0430\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435.\n\n\ud83d\udd34 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0432 Redis \u2014 PT-2025-40594 (CVE-2025-49844, CVSS \u2014 9,9)\n\n\u041f\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c Wiz, \u043d\u0430 \u043c\u043e\u043c\u0435\u043d\u0442 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u043e\u0441\u044c \u043e\u043a\u043e\u043b\u043e 330 \u0442\u044b\u0441\u044f\u0447 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Redis (\u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 60 \u0442\u044b\u0441\u044f\u0447 \u043d\u0435 \u0431\u044b\u043b\u0438 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439).\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0435\u043c\u0443 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0442\u044c, \u0441\u0442\u0438\u0440\u0430\u0442\u044c \u0438\u043b\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f, \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0440\u0435\u0441\u0443\u0440\u0441\u044b \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c. \u041f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432 Redis \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f, \u0447\u0442\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u043f\u0440\u043e\u0449\u0430\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\ud83d\udc49 \u0411\u043e\u043b\u044c\u0448\u0435 \u043e\u0431\u043e \u0432\u0441\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0438 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u043b\u0438 \u0432 \u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442\u0435.\n\n#\u0432\u0442\u0440\u0435\u043d\u0434\u0435VM \n@Positive_Technologies", "creation_timestamp": "2026-07-27T00:01:24.287568Z"}, {"uuid": "845caea9-d435-4c2a-bee6-5b83359e7d8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://t.me/Positive_Technologies/3436", "content": "Team46 \u0438 TaxOff: \u0434\u0432\u0435 \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u043e\u0434\u043d\u043e\u0439 \u043c\u0435\u0434\u0430\u043b\u0438 \ud83d\ude11\n\n\u0412 \u043c\u0430\u0440\u0442\u0435 2025 \u0433\u043e\u0434\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b TI-\u0434\u0435\u043f\u0430\u0440\u0442\u0430\u043c\u0435\u043d\u0442\u0430 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043d\u043e\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Positive Technologies (PT Expert Security Center, PT ESC) \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u0438 \u0430\u0442\u0430\u043a\u0443, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0432 \u044d\u0442\u043e \u0436\u0435 \u0432\u0440\u0435\u043c\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f CVE-2025-2783 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0441\u0430\u043c\u0443 \u0430\u0442\u0430\u043a\u0443 \u043e\u043f\u0438\u0441\u0430\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u00ab\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e\u00bb, \u043e\u0434\u043d\u0430\u043a\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u043e\u0441\u0442\u0430\u043b\u0430\u0441\u044c \u0431\u0435\u0437 \u0430\u0442\u0440\u0438\u0431\u0443\u0446\u0438\u0438.\n\n\ud83e\ude9e \u0412 \u043e\u0442\u0447\u0435\u0442\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u0430\u0442\u0440\u0438\u0431\u0443\u0446\u0438\u044f \u0434\u0430\u043d\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043a \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0435 TaxOff, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u0440\u0430\u043d\u0435\u0435. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442\u0441\u044f \u0434\u0430\u043d\u043d\u044b\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0441\u0447\u0438\u0442\u0430\u0442\u044c \u0435\u0449\u0435 \u043e\u0434\u043d\u0443 \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u0443\u044e \u043d\u0430\u043c\u0438 \u0440\u0430\u043d\u0435\u0435 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0443 Team46 \u0438 TaxOff \u043e\u0434\u043d\u043e\u0439 \u0438 \u0442\u043e\u0439 \u0436\u0435 \u0433\u0440\u0443\u043f\u043f\u043e\u0439.\n\n\u041d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u043c \u0432\u0435\u043a\u0442\u043e\u0440\u043e\u043c \u0430\u0442\u0430\u043a\u0438 \u0431\u044b\u043b\u043e \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u043e\u0435 \u043f\u0438\u0441\u044c\u043c\u043e, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0435\u0435 \u0441\u0441\u044b\u043b\u043a\u0443, \u043f\u0440\u0438 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0435 \u043f\u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0436\u0435\u0440\u0442\u0432\u0430 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043b\u0430 one-click exploit, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u0439 \u043a \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0431\u044d\u043a\u0434\u043e\u0440\u0430 Trinper \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 TaxOff \u0432 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0412 \u044d\u0442\u043e\u0439 \u0430\u0442\u0430\u043a\u0435 \u0431\u044b\u043b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u0431\u044d\u043a\u0434\u043e\u0440 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 Team46.\n\n\u0413\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 Team46 \u0431\u044b\u043b\u0430 \u0440\u0430\u043d\u0435\u0435 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u0430 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 DLL-Hijacking \u0434\u043b\u044f \u042f\u043d\u0434\u0435\u043a\u0441 \u0411\u0440\u0430\u0443\u0437\u0435\u0440\u0430 (CVE-2024-6473).\n\n\ud83d\udcd6 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 \u0447\u0438\u0442\u0430\u0439\u0442\u0435 \u043d\u0430 \u043d\u0430\u0448\u0435\u043c \u0441\u0430\u0439\u0442\u0435.\n\n#TI #APT #cve\n@ptescalator", "creation_timestamp": "2026-07-27T00:01:25.049006Z"}, {"uuid": "5e006111-24fc-43f0-bcd9-ffd99fbc9b50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://t.me/cult_security/465", "content": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u044f \"\u0424\u043e\u0440\u0443\u043c\u043d\u044b\u0439 \u0442\u0440\u043e\u043b\u043b\u044c\"\n\n\u0412 \u043c\u0430\u0440\u0442\u0435 2025 \u0433\u043e\u0434\u0430 \u0432 \u0420\u043e\u0441\u0441\u0438\u0438 \u0431\u044b\u043b\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u00ab\u0424\u043e\u0440\u0443\u043c\u043d\u044b\u0439 \u0442\u0440\u043e\u043b\u043b\u044c\u00bb. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u00ab\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0435\u0439 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e\u00bb.\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b Kaspersky GReAT \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u0431\u0440\u0435\u0448\u0438 \u0438 \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Google. 25 \u043c\u0430\u0440\u0442\u0430 2025 \u0433\u043e\u0434\u0430 \u0432\u044b\u0448\u043b\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-2783.\n\nJoin our club Cult \ud83d\udc41", "creation_timestamp": "2026-07-27T00:01:22.670618Z"}, {"uuid": "b3a07b21-d5f9-4ce8-a335-57a34c2dc293", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "published-proof-of-concept", "source": "Telegram/FMxKlI5Q8oe-wqfdJhLf519zmPU2wTxgtOLa-sFM77th6qo", "content": "", "creation_timestamp": "2026-08-29T00:00:28.255631Z"}, {"uuid": "ba453fcb-2c73-4415-a6a4-9270be5fcba4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27840", "type": "published-proof-of-concept", "source": "https://t.me/EchelonEyes/3719", "content": "\u0412 \u0447\u0438\u043f\u0435 Bluetooth, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0435\u0441\u0442\u044c \u0432 \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u043d\u0435\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b\n\n\u0412\u0435\u0437\u0434\u0435\u0441\u0443\u0449\u0438\u0439 \u043c\u0438\u043a\u0440\u043e\u0447\u0438\u043f ESP32 \u043e\u0442 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f Espressif, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u0432 1 \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043d\u0435\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a.\n\n\u041a\u0430\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0438\u0441\u043f\u0430\u043d\u0441\u043a\u0438\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u041c\u0438\u0433\u0435\u043b\u044c \u0422\u0430\u0440\u0430\u0441\u043a\u043e \u0410\u043a\u0443\u043d\u044c\u044f \u0438 \u0410\u043d\u0442\u043e\u043d\u0438\u043e \u0412\u0430\u0441\u043a\u0435\u0441 \u0411\u043b\u0430\u043d\u043a\u043e \u0438\u0437 Tarlogic Security \u043d\u0435\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u0442\u044c \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c, \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u0442\u044c \u043d\u0430 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0432 \u0441\u0435\u0442\u0438 \u0438 \u0434\u043e\u043b\u0433\u043e\u0441\u0440\u043e\u0447\u043d\u043e \u0442\u0430\u043c \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0442\u044c\u0441\u044f. \u042d\u0442\u0438 \u0432\u044b\u0432\u043e\u0434\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 RootedCON \u0432 \u041c\u0430\u0434\u0440\u0438\u0434\u0435.\n\n\u00ab\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u043e\u0433\u043e \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u043e\u0442 \u0447\u0443\u0436\u043e\u0433\u043e \u0438\u043c\u0435\u043d\u0438 \u0438 \u043d\u0430\u0432\u0441\u0435\u0433\u0434\u0430 \u0437\u0430\u0440\u0430\u0436\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0435 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u044b, \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u044b, \u0438\u043d\u0442\u0435\u043b\u043b\u0435\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0437\u0430\u043c\u043a\u0438 \u0438\u043b\u0438 \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u043e\u0435 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435, \u043e\u0431\u0445\u043e\u0434\u044f \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0430\u0443\u0434\u0438\u0442\u0430 \u043a\u043e\u0434\u0430\u00bb.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438, \u0447\u0442\u043e ESP32 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u0438\u043c \u0438\u0437 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 \u043c\u0438\u0440\u0435 \u0447\u0438\u043f\u043e\u0432 \u0434\u043b\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043f\u043e Wi-Fi + Bluetooth \u0432 IoT-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f Tarlogic \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u0434\u0440\u0430\u0439\u0432\u0435\u0440 USB Bluetooth \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 C, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e-\u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u043c \u0438 \u043a\u0440\u043e\u0441\u0441\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435\u043d\u043d\u044b\u043c, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044f \u043f\u0440\u044f\u043c\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044e \u0431\u0435\u0437 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f API, \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u043d\u044b\u0445 \u0434\u043b\u044f \u041e\u0421.\n\n\u0412\u043e\u043e\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0441\u044c \u044d\u0442\u0438\u043c \u043d\u043e\u0432\u044b\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u044f\u043c\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0442\u0440\u0430\u0444\u0438\u043a\u0443 Bluetooth, Tarlogic \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 (\u043a\u043e\u0434 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 0x3F) \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 ESP32 Bluetooth, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c \u043d\u0438\u0437\u043a\u043e\u0443\u0440\u043e\u0432\u043d\u0435\u0432\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438 Bluetooth.\n\n\u0412\u0441\u0435\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432\u044b\u044f\u0432\u0438\u043b\u0438 29 \u043d\u0435\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432 \u0441\u043e\u0432\u043e\u043a\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u0438\u0437\u0443\u044e\u0442\u0441\u044f \u043a\u0430\u043a \u00ab\u0431\u044d\u043a\u0434\u043e\u0440\u00bb, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0438 \u043f\u0430\u043c\u044f\u0442\u044c\u044e, \u043f\u043e\u0434\u043c\u0435\u043d\u044b MAC-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043f\u0430\u043a\u0435\u0442\u043e\u0432 LMP/LLCP.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-27840. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.documentcloud.org/documents/25554812-2025-rootedcon-bluetoothtools/\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c", "creation_timestamp": "2026-07-28T00:00:52.297378Z"}, {"uuid": "cfec077e-8bcf-4549-a945-5ceb6e6d22ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "exploited", "source": "https://t.me/EchelonEyes/3786", "content": "Mozilla \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Firefox, \u043f\u043e\u0445\u043e\u0436\u0443\u044e \u043d\u0430 \u0431\u0430\u0433 \u0432 Chrome\n\nMozilla \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Firefox, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-2857. \u0414\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432\u0435\u0440\u0441\u0438\u0438 Firefox \u0434\u043b\u044f Windows, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0441\u0432\u0438\u0434\u0435\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u043e \u0437\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0435\u0439 Google \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0441\u0445\u043e\u0436\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Chrome (CVE-2025-2783), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u0432 \u0445\u043e\u0434\u0435 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0430\u0442\u0430\u043a \u043f\u0440\u043e\u0442\u0438\u0432 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043c\u0435\u0434\u0438\u0430 \u0438 \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0439. \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Kaspersky, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0432\u0448\u0438\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442, \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438 \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438 - \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u0432\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b Chrome. \n\n\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0421\u0428\u0410 CISA \u0443\u0436\u0435 \u0432\u043d\u0435\u0441\u043b\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Chrome \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u0433\u0440\u043e\u0437, \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u043d\u0443\u0432 \u043e\u0441\u043e\u0431\u0443\u044e \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0420\u0430\u043d\u0435\u0435 \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 Mozilla \u0443\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0430 \u0434\u0440\u0443\u0433\u0443\u044e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-9680), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://therecord.media/firefox-sandbox-vulnerability-similar-chrome-zero-day", "creation_timestamp": "2026-07-28T00:00:52.910845Z"}, {"uuid": "8e59e5ce-6757-4e94-9363-afc6f17c5d6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27363", "type": "exploited", "source": "https://t.me/EchelonEyes/3842", "content": "\u041c\u0430\u0439\u0441\u043a\u0438\u0439 \u043f\u0430\u0442\u0447 Android \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 46 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0443\u044e\n\nGoogle \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043c\u0430\u0439\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0435 46 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e zero-day CVE-2025-27363 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 FreeType. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0448\u0440\u0438\u0444\u0442\u044b TrueType GX \u0431\u0435\u0437 \u043f\u0440\u0430\u0432 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u041c\u0430\u0439\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442:\n\u2022  \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f 8 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439;\n\u2022  15 \u0432\u0430\u0436\u043d\u044b\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Framework;\n\u2022  \u043f\u0430\u0442\u0447\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Qualcomm \u0438 MediaTek.\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u0440\u0438\u0437\u044b\u0432\u0430\u044e\u0442 \u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Android. \u0412\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u0441\u0442\u0430\u0440\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043b\u0443\u0447\u0448\u0435 \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438. \n\n#\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #\u043f\u0430\u0442\u0447\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://eyes.etecs.ru/r/540993", "creation_timestamp": "2026-07-28T00:00:53.355901Z"}, {"uuid": "07e981a1-2d34-4569-a94f-6a649ecb6f0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27915", "type": "seen", "source": "https://t.me/Positive_Technologies/3877", "content": "\ud83d\udc7e \u041d\u043e\u044f\u0431\u0440\u044c\u0441\u043a\u0438\u0439 \u0443\u043b\u043e\u0432 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u044b\u043b \u0431\u043e\u0433\u0430\u0442\u044b\u043c: \u043d\u0430\u0448\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e\u0441\u0447\u0438\u0442\u0430\u043b\u0438 \u0442\u0430\u043a\u043e\u0432\u044b\u043c\u0438 \u0446\u0435\u043b\u044b\u0445 \u0434\u0435\u0432\u044f\u0442\u044c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\n\u041e \u043d\u0438\u0445 \u0443\u0436\u0435 \u0437\u043d\u0430\u044e\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 MaxPatrol VM, \u043a\u0443\u0434\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u0445 \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u0435\u0442 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 12 \u0447\u0430\u0441\u043e\u0432 \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u0438\u0445 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0441\u0435\u0442\u0438\u0442\u0435\u043b\u0438 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u043f\u043e\u0440\u0442\u0430\u043b\u0430 dbugs \ud83d\ude09\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Microsoft\n\n\u041c\u043e\u0433\u0443\u0442 \u043a\u043e\u0441\u043d\u0443\u0442\u044c\u0441\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 Windows \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043e\u043a\u043e\u043b\u043e \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\ud83d\udd34 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 Remote Access Connection Manager \u2014  PT-2025-42115 (CVE-2025-59230, CVSS \u2014 7,8)\n\n\u041f\u043e\u043b\u0443\u0447\u0438\u0432 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f, \u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f SYSTEM \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c.\n\n\ud83d\udd34 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 Agere Modem \u2014 PT-2025-41973 (CVE-2025-24990, CVSS \u2014 7,8)\n\n\u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u041f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 EDR-\u0440\u0435\u0448\u0435\u043d\u0438\u0439.\n\n\ud83d\udd34 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Windows Server (WSUS) \u2014 PT-2025-42147 (CVE-2025-59287, CVSS \u2014 9,8)\n\n\u041c\u043e\u0436\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 Windows-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 WSUS Server Role. \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0445\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0440\u0435\u0434\u0438 \u0441\u0438\u0441\u0442\u0435\u043c-\u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b.\n\n\ud83d\udd34 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u044f\u0440\u043b\u044b\u043a\u043e\u0432 Microsoft Windows \u2014 PT-2025-34796 (CVE-2025-9491, CVSS \u2014 7,8)\n\n\u0418\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043f\u0440\u043e\u0432\u043e\u0434\u043d\u0438\u043a\u0430 Windows \u043c\u043e\u0436\u0435\u0442 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0430\u0442\u044c \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u044b \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 \u0432 .lnk-\u0444\u0430\u0439\u043b\u0430\u0445, \u0441\u043a\u0440\u044b\u0432\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442 \u2014 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043a\u0440\u0430\u0436\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0438\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043b\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0438\u0445 \u0430\u0442\u0430\u043a.\n\n\ud83d\udd34 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0432 Microsoft SharePoint \u2014 PT-2025-28601 (CVE-2025-49704, CVSS \u2014 8,8)\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u0435\u0435, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440.\n\n\ud83d\udd34 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0432 \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u0435 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u044f\u0434\u0440\u0430 Linux \u2014 PT-2025-24274 (CVE-2025-38001, CVSS \u2014 5,7)\n\n\u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 Linux, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Debian 12, Ubuntu \u0438 \u043e\u043f\u0442\u0438\u043c\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0434\u043b\u044f \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 (COS) Google.\n\n\u0410\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\ud83d\udd34\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0431\u0430\u0437 \u0437\u043d\u0430\u043d\u0438\u0439, \u043e\u0431\u044a\u0435\u043a\u0442\u043d\u044b\u0445 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449 \u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 XWiki \u2014 PT-2025-7547 (CVE-2025-24893, CVSS \u2014 9,8)\n\n\u041f\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u043c \u0434\u0430\u043d\u043d\u044b\u043c, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043e \u043e\u043a\u043e\u043b\u043e 24 \u0442\u044b\u0441\u044f\u0447 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 XWiki.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043c\u0430\u043a\u0440\u043e\u0441 SolrSearch, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u043f\u043e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u043c\u0443 \u0432 XWiki. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 GET-\u0437\u0430\u043f\u0440\u043e\u0441, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\ud83d\udd34 XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Zimbra Collaboration Suite \u2014 PT-2025-11082 (CVE-2025-27915, CVSS \u2014 5,4)\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0432\u0435\u043d\u0434\u043e\u0440\u0430, Zimbra \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u0432 6 \u0442\u044b\u0441\u044f\u0447\u0430\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0432 127 \u0441\u0442\u0440\u0430\u043d\u0430\u0445. \n\n\u041f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442 \u043f\u0438\u0441\u044c\u043c\u0430 \u0441\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 ICS-\u0444\u0430\u0439\u043b\u0430\u043c\u0438, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u043d\u0435\u0434\u0440\u0435\u043d \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 JavaScript-\u043a\u043e\u0434. \u0415\u0441\u043b\u0438 \u0444\u0430\u0439\u043b \u0431\u0443\u0434\u0435\u0442 \u0437\u0430\u043f\u0443\u0449\u0435\u043d, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0436\u0435\u0440\u0442\u0432\u044b, \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043f\u0438\u0441\u044c\u043c\u0430 \u0438 \u043a\u0440\u0430\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435.\n\n\ud83d\udd34 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0432 Redis \u2014 PT-2025-40594 (CVE-2025-49844, CVSS \u2014 9,9)\n\n\u041f\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c Wiz, \u043d\u0430 \u043c\u043e\u043c\u0435\u043d\u0442 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u043e\u0441\u044c \u043e\u043a\u043e\u043b\u043e 330 \u0442\u044b\u0441\u044f\u0447 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Redis (\u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 60 \u0442\u044b\u0441\u044f\u0447 \u043d\u0435 \u0431\u044b\u043b\u0438 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439).\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0435\u043c\u0443 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0442\u044c, \u0441\u0442\u0438\u0440\u0430\u0442\u044c \u0438\u043b\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f, \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0440\u0435\u0441\u0443\u0440\u0441\u044b \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c. \u041f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432 Redis \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f, \u0447\u0442\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u043f\u0440\u043e\u0449\u0430\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\ud83d\udc49 \u0411\u043e\u043b\u044c\u0448\u0435 \u043e\u0431\u043e \u0432\u0441\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0438 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u043b\u0438 \u0432 \u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442\u0435.\n\n#\u0432\u0442\u0440\u0435\u043d\u0434\u0435VM \n@Positive_Technologies", "creation_timestamp": "2026-07-28T15:00:05.778602Z"}, {"uuid": "9c4356af-6f9a-4acd-8763-47d2edf5b24d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://t.me/cult_security/465", "content": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u044f \"\u0424\u043e\u0440\u0443\u043c\u043d\u044b\u0439 \u0442\u0440\u043e\u043b\u043b\u044c\"\n\n\u0412 \u043c\u0430\u0440\u0442\u0435 2025 \u0433\u043e\u0434\u0430 \u0432 \u0420\u043e\u0441\u0441\u0438\u0438 \u0431\u044b\u043b\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u00ab\u0424\u043e\u0440\u0443\u043c\u043d\u044b\u0439 \u0442\u0440\u043e\u043b\u043b\u044c\u00bb. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u00ab\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0435\u0439 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e\u00bb.\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b Kaspersky GReAT \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u0431\u0440\u0435\u0448\u0438 \u0438 \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Google. 25 \u043c\u0430\u0440\u0442\u0430 2025 \u0433\u043e\u0434\u0430 \u0432\u044b\u0448\u043b\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-2783.\n\nJoin our club Cult \ud83d\udc41", "creation_timestamp": "2026-07-28T14:00:05.944450Z"}, {"uuid": "d5ee84ca-c2ab-4426-bc6b-3447f4e62291", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://t.me/Positive_Technologies/3436", "content": "Team46 \u0438 TaxOff: \u0434\u0432\u0435 \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u043e\u0434\u043d\u043e\u0439 \u043c\u0435\u0434\u0430\u043b\u0438 \ud83d\ude11\n\n\u0412 \u043c\u0430\u0440\u0442\u0435 2025 \u0433\u043e\u0434\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b TI-\u0434\u0435\u043f\u0430\u0440\u0442\u0430\u043c\u0435\u043d\u0442\u0430 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043d\u043e\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Positive Technologies (PT Expert Security Center, PT ESC) \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u0438 \u0430\u0442\u0430\u043a\u0443, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0432 \u044d\u0442\u043e \u0436\u0435 \u0432\u0440\u0435\u043c\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f CVE-2025-2783 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0441\u0430\u043c\u0443 \u0430\u0442\u0430\u043a\u0443 \u043e\u043f\u0438\u0441\u0430\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u00ab\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e\u00bb, \u043e\u0434\u043d\u0430\u043a\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u043e\u0441\u0442\u0430\u043b\u0430\u0441\u044c \u0431\u0435\u0437 \u0430\u0442\u0440\u0438\u0431\u0443\u0446\u0438\u0438.\n\n\ud83e\ude9e \u0412 \u043e\u0442\u0447\u0435\u0442\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u0430\u0442\u0440\u0438\u0431\u0443\u0446\u0438\u044f \u0434\u0430\u043d\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043a \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0435 TaxOff, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u0440\u0430\u043d\u0435\u0435. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442\u0441\u044f \u0434\u0430\u043d\u043d\u044b\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0441\u0447\u0438\u0442\u0430\u0442\u044c \u0435\u0449\u0435 \u043e\u0434\u043d\u0443 \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u0443\u044e \u043d\u0430\u043c\u0438 \u0440\u0430\u043d\u0435\u0435 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0443 Team46 \u0438 TaxOff \u043e\u0434\u043d\u043e\u0439 \u0438 \u0442\u043e\u0439 \u0436\u0435 \u0433\u0440\u0443\u043f\u043f\u043e\u0439.\n\n\u041d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u043c \u0432\u0435\u043a\u0442\u043e\u0440\u043e\u043c \u0430\u0442\u0430\u043a\u0438 \u0431\u044b\u043b\u043e \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u043e\u0435 \u043f\u0438\u0441\u044c\u043c\u043e, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0435\u0435 \u0441\u0441\u044b\u043b\u043a\u0443, \u043f\u0440\u0438 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0435 \u043f\u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0436\u0435\u0440\u0442\u0432\u0430 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043b\u0430 one-click exploit, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u0439 \u043a \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0431\u044d\u043a\u0434\u043e\u0440\u0430 Trinper \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 TaxOff \u0432 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0412 \u044d\u0442\u043e\u0439 \u0430\u0442\u0430\u043a\u0435 \u0431\u044b\u043b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u0431\u044d\u043a\u0434\u043e\u0440 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 Team46.\n\n\u0413\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 Team46 \u0431\u044b\u043b\u0430 \u0440\u0430\u043d\u0435\u0435 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u0430 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 DLL-Hijacking \u0434\u043b\u044f \u042f\u043d\u0434\u0435\u043a\u0441 \u0411\u0440\u0430\u0443\u0437\u0435\u0440\u0430 (CVE-2024-6473).\n\n\ud83d\udcd6 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 \u0447\u0438\u0442\u0430\u0439\u0442\u0435 \u043d\u0430 \u043d\u0430\u0448\u0435\u043c \u0441\u0430\u0439\u0442\u0435.\n\n#TI #APT #cve\n@ptescalator", "creation_timestamp": "2026-07-28T16:00:08.901820Z"}, {"uuid": "85daafb3-3478-4b5f-add6-f5660bc76911", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://t.me/Positive_Technologies/3436", "content": "Team46 \u0438 TaxOff: \u0434\u0432\u0435 \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u043e\u0434\u043d\u043e\u0439 \u043c\u0435\u0434\u0430\u043b\u0438 \ud83d\ude11\n\n\u0412 \u043c\u0430\u0440\u0442\u0435 2025 \u0433\u043e\u0434\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b TI-\u0434\u0435\u043f\u0430\u0440\u0442\u0430\u043c\u0435\u043d\u0442\u0430 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043d\u043e\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Positive Technologies (PT Expert Security Center, PT ESC) \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u0438 \u0430\u0442\u0430\u043a\u0443, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0432 \u044d\u0442\u043e \u0436\u0435 \u0432\u0440\u0435\u043c\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f CVE-2025-2783 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0441\u0430\u043c\u0443 \u0430\u0442\u0430\u043a\u0443 \u043e\u043f\u0438\u0441\u0430\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u00ab\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e\u00bb, \u043e\u0434\u043d\u0430\u043a\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u043e\u0441\u0442\u0430\u043b\u0430\u0441\u044c \u0431\u0435\u0437 \u0430\u0442\u0440\u0438\u0431\u0443\u0446\u0438\u0438.\n\n\ud83e\ude9e \u0412 \u043e\u0442\u0447\u0435\u0442\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u0430\u0442\u0440\u0438\u0431\u0443\u0446\u0438\u044f \u0434\u0430\u043d\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043a \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0435 TaxOff, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u0440\u0430\u043d\u0435\u0435. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442\u0441\u044f \u0434\u0430\u043d\u043d\u044b\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0441\u0447\u0438\u0442\u0430\u0442\u044c \u0435\u0449\u0435 \u043e\u0434\u043d\u0443 \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u0443\u044e \u043d\u0430\u043c\u0438 \u0440\u0430\u043d\u0435\u0435 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0443 Team46 \u0438 TaxOff \u043e\u0434\u043d\u043e\u0439 \u0438 \u0442\u043e\u0439 \u0436\u0435 \u0433\u0440\u0443\u043f\u043f\u043e\u0439.\n\n\u041d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u043c \u0432\u0435\u043a\u0442\u043e\u0440\u043e\u043c \u0430\u0442\u0430\u043a\u0438 \u0431\u044b\u043b\u043e \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u043e\u0435 \u043f\u0438\u0441\u044c\u043c\u043e, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0435\u0435 \u0441\u0441\u044b\u043b\u043a\u0443, \u043f\u0440\u0438 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0435 \u043f\u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0436\u0435\u0440\u0442\u0432\u0430 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043b\u0430 one-click exploit, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u0439 \u043a \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0431\u044d\u043a\u0434\u043e\u0440\u0430 Trinper \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 TaxOff \u0432 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0412 \u044d\u0442\u043e\u0439 \u0430\u0442\u0430\u043a\u0435 \u0431\u044b\u043b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u0431\u044d\u043a\u0434\u043e\u0440 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 Team46.\n\n\u0413\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 Team46 \u0431\u044b\u043b\u0430 \u0440\u0430\u043d\u0435\u0435 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u0430 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 DLL-Hijacking \u0434\u043b\u044f \u042f\u043d\u0434\u0435\u043a\u0441 \u0411\u0440\u0430\u0443\u0437\u0435\u0440\u0430 (CVE-2024-6473).\n\n\ud83d\udcd6 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 \u0447\u0438\u0442\u0430\u0439\u0442\u0435 \u043d\u0430 \u043d\u0430\u0448\u0435\u043c \u0441\u0430\u0439\u0442\u0435.\n\n#TI #APT #cve\n@ptescalator", "creation_timestamp": "2026-07-29T00:00:32.303804Z"}, {"uuid": "6f17d2ad-d56a-42c3-984c-710616e2b3d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27915", "type": "seen", "source": "https://t.me/Positive_Technologies/3877", "content": "\ud83d\udc7e \u041d\u043e\u044f\u0431\u0440\u044c\u0441\u043a\u0438\u0439 \u0443\u043b\u043e\u0432 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u044b\u043b \u0431\u043e\u0433\u0430\u0442\u044b\u043c: \u043d\u0430\u0448\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e\u0441\u0447\u0438\u0442\u0430\u043b\u0438 \u0442\u0430\u043a\u043e\u0432\u044b\u043c\u0438 \u0446\u0435\u043b\u044b\u0445 \u0434\u0435\u0432\u044f\u0442\u044c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\n\u041e \u043d\u0438\u0445 \u0443\u0436\u0435 \u0437\u043d\u0430\u044e\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 MaxPatrol VM, \u043a\u0443\u0434\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u0445 \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u0435\u0442 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 12 \u0447\u0430\u0441\u043e\u0432 \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u0438\u0445 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0441\u0435\u0442\u0438\u0442\u0435\u043b\u0438 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u043f\u043e\u0440\u0442\u0430\u043b\u0430 dbugs \ud83d\ude09\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Microsoft\n\n\u041c\u043e\u0433\u0443\u0442 \u043a\u043e\u0441\u043d\u0443\u0442\u044c\u0441\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 Windows \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043e\u043a\u043e\u043b\u043e \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\ud83d\udd34 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 Remote Access Connection Manager \u2014  PT-2025-42115 (CVE-2025-59230, CVSS \u2014 7,8)\n\n\u041f\u043e\u043b\u0443\u0447\u0438\u0432 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f, \u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f SYSTEM \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c.\n\n\ud83d\udd34 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 Agere Modem \u2014 PT-2025-41973 (CVE-2025-24990, CVSS \u2014 7,8)\n\n\u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u041f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 EDR-\u0440\u0435\u0448\u0435\u043d\u0438\u0439.\n\n\ud83d\udd34 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Windows Server (WSUS) \u2014 PT-2025-42147 (CVE-2025-59287, CVSS \u2014 9,8)\n\n\u041c\u043e\u0436\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 Windows-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 WSUS Server Role. \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0445\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0440\u0435\u0434\u0438 \u0441\u0438\u0441\u0442\u0435\u043c-\u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b.\n\n\ud83d\udd34 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u044f\u0440\u043b\u044b\u043a\u043e\u0432 Microsoft Windows \u2014 PT-2025-34796 (CVE-2025-9491, CVSS \u2014 7,8)\n\n\u0418\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043f\u0440\u043e\u0432\u043e\u0434\u043d\u0438\u043a\u0430 Windows \u043c\u043e\u0436\u0435\u0442 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0430\u0442\u044c \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u044b \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 \u0432 .lnk-\u0444\u0430\u0439\u043b\u0430\u0445, \u0441\u043a\u0440\u044b\u0432\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442 \u2014 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043a\u0440\u0430\u0436\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0438\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043b\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0438\u0445 \u0430\u0442\u0430\u043a.\n\n\ud83d\udd34 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0432 Microsoft SharePoint \u2014 PT-2025-28601 (CVE-2025-49704, CVSS \u2014 8,8)\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u0435\u0435, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440.\n\n\ud83d\udd34 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0432 \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u0435 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u044f\u0434\u0440\u0430 Linux \u2014 PT-2025-24274 (CVE-2025-38001, CVSS \u2014 5,7)\n\n\u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 Linux, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Debian 12, Ubuntu \u0438 \u043e\u043f\u0442\u0438\u043c\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0434\u043b\u044f \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 (COS) Google.\n\n\u0410\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\ud83d\udd34\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0431\u0430\u0437 \u0437\u043d\u0430\u043d\u0438\u0439, \u043e\u0431\u044a\u0435\u043a\u0442\u043d\u044b\u0445 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449 \u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 XWiki \u2014 PT-2025-7547 (CVE-2025-24893, CVSS \u2014 9,8)\n\n\u041f\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u043c \u0434\u0430\u043d\u043d\u044b\u043c, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043e \u043e\u043a\u043e\u043b\u043e 24 \u0442\u044b\u0441\u044f\u0447 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 XWiki.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043c\u0430\u043a\u0440\u043e\u0441 SolrSearch, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u043f\u043e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u043c\u0443 \u0432 XWiki. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 GET-\u0437\u0430\u043f\u0440\u043e\u0441, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\ud83d\udd34 XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Zimbra Collaboration Suite \u2014 PT-2025-11082 (CVE-2025-27915, CVSS \u2014 5,4)\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0432\u0435\u043d\u0434\u043e\u0440\u0430, Zimbra \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u0432 6 \u0442\u044b\u0441\u044f\u0447\u0430\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0432 127 \u0441\u0442\u0440\u0430\u043d\u0430\u0445. \n\n\u041f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442 \u043f\u0438\u0441\u044c\u043c\u0430 \u0441\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 ICS-\u0444\u0430\u0439\u043b\u0430\u043c\u0438, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u043d\u0435\u0434\u0440\u0435\u043d \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 JavaScript-\u043a\u043e\u0434. \u0415\u0441\u043b\u0438 \u0444\u0430\u0439\u043b \u0431\u0443\u0434\u0435\u0442 \u0437\u0430\u043f\u0443\u0449\u0435\u043d, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0436\u0435\u0440\u0442\u0432\u044b, \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043f\u0438\u0441\u044c\u043c\u0430 \u0438 \u043a\u0440\u0430\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435.\n\n\ud83d\udd34 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0432 Redis \u2014 PT-2025-40594 (CVE-2025-49844, CVSS \u2014 9,9)\n\n\u041f\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c Wiz, \u043d\u0430 \u043c\u043e\u043c\u0435\u043d\u0442 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u043e\u0441\u044c \u043e\u043a\u043e\u043b\u043e 330 \u0442\u044b\u0441\u044f\u0447 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Redis (\u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 60 \u0442\u044b\u0441\u044f\u0447 \u043d\u0435 \u0431\u044b\u043b\u0438 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439).\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0435\u043c\u0443 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0442\u044c, \u0441\u0442\u0438\u0440\u0430\u0442\u044c \u0438\u043b\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f, \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0440\u0435\u0441\u0443\u0440\u0441\u044b \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c. \u041f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432 Redis \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f, \u0447\u0442\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u043f\u0440\u043e\u0449\u0430\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\ud83d\udc49 \u0411\u043e\u043b\u044c\u0448\u0435 \u043e\u0431\u043e \u0432\u0441\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0438 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u043b\u0438 \u0432 \u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442\u0435.\n\n#\u0432\u0442\u0440\u0435\u043d\u0434\u0435VM \n@Positive_Technologies", "creation_timestamp": "2026-07-29T00:00:33.483715Z"}, {"uuid": "c0c5fb8a-f779-408d-9ea4-cc00c4741699", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://t.me/cult_security/465", "content": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u044f \"\u0424\u043e\u0440\u0443\u043c\u043d\u044b\u0439 \u0442\u0440\u043e\u043b\u043b\u044c\"\n\n\u0412 \u043c\u0430\u0440\u0442\u0435 2025 \u0433\u043e\u0434\u0430 \u0432 \u0420\u043e\u0441\u0441\u0438\u0438 \u0431\u044b\u043b\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u00ab\u0424\u043e\u0440\u0443\u043c\u043d\u044b\u0439 \u0442\u0440\u043e\u043b\u043b\u044c\u00bb. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u00ab\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0435\u0439 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e\u00bb.\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b Kaspersky GReAT \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u0431\u0440\u0435\u0448\u0438 \u0438 \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Google. 25 \u043c\u0430\u0440\u0442\u0430 2025 \u0433\u043e\u0434\u0430 \u0432\u044b\u0448\u043b\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-2783.\n\nJoin our club Cult \ud83d\udc41", "creation_timestamp": "2026-07-29T00:00:34.980575Z"}, {"uuid": "9d7628b2-8b81-4424-a10d-b65599ad5222", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27093", "type": "seen", "source": "https://t.me/reverseame/5517", "content": "Sliver C2 Insecure Default Network Policy (CVE-2025-27093) #SliverC2 #Wireguard #CVE202527093 #NetworkPolicy #CommandAndControl https://hngnh.com/posts/Sliver-CVE-2025-27093/", "creation_timestamp": "2026-07-29T08:01:21.314097Z"}, {"uuid": "ed1195a1-7b7a-4ef6-b6e7-fea20416baea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "https://t.me/reverseame/5155", "content": "SysOwned, Your Friendly Support Ticket - SysAid On-Premise Pre-Auth RCE Chain (CVE-2025-2775 And Friends) #SysOwned #SysAid #Vulnerabilities #PreAuthRCE #CVE20252775 https://labs.watchtowr.com/sysowned-your-friendly-rce-support-ticket/", "creation_timestamp": "2026-07-29T12:02:03.638739Z"}, {"uuid": "84df16a7-a248-4e5b-9095-2e8b22d6761f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27218", "type": "seen", "source": "https://t.me/reverseame/5076", "content": "Sitecore: Unsafe Deserialisation Again! (CVE-2025-27218) #Sitecore #UnsafeDeserialisation #RemoteCommandExecution #CVE-2025-27218 #SearchlightCyber https://slcyber.io/blog/sitecore-unsafe-deserialization-again-cve-2025-27218/", "creation_timestamp": "2026-07-29T12:02:04.446511Z"}, {"uuid": "e6554a49-a88d-4c29-89da-d40760afa5b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/191", "content": "Chrome Zero-Day Exploited to Deliver Italian Memento Labs\u2019 LeetAgent Spyware\nA zero-day vulnerability in Google Chrome, identified as\u00a0CVE-2025-2783, was recently exploited in the wild to deliver the LeetAgent spyware. This spyware has been linked to the Italian vendor Memento Labs, previously known as Hacking Team. The vulnerability, a sandbox escape, allowed attackers to bypass Chrome\u2019s security protections and target organizations in Russia and Belarus. A [\u2026] The post Chrome Zero-Day Exploited to Deliver Italian Memento Labs\u2019 LeetAgent Spyware appeared first on SecPod Blog .\n\nSource: secpod.com \u2014 link\n#cybersecurity #infosec", "creation_timestamp": "2026-07-29T13:00:05.926463Z"}, {"uuid": "a6d33fc7-f69b-41cc-a8e7-0082333ea391", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2783", "type": "exploited", "source": "https://t.me/Intel_Encyclopedia/191", "content": "Chrome Zero-Day Exploited to Deliver Italian Memento Labs\u2019 LeetAgent Spyware\nA zero-day vulnerability in Google Chrome, identified as\u00a0CVE-2025-2783, was recently exploited in the wild to deliver the LeetAgent spyware. This spyware has been linked to the Italian vendor Memento Labs, previously known as Hacking Team. The vulnerability, a sandbox escape, allowed attackers to bypass Chrome\u2019s security protections and target organizations in Russia and Belarus. A [\u2026] The post Chrome Zero-Day Exploited to Deliver Italian Memento Labs\u2019 LeetAgent Spyware appeared first on SecPod Blog .\n\nSource: secpod.com \u2014 link\n#cybersecurity #infosec", "creation_timestamp": "2026-07-30T00:00:29.732712Z"}, {"uuid": "1f4ff3b4-bb2a-4be9-bf32-c44ec850054b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27093", "type": "seen", "source": "https://t.me/reverseame/5517", "content": "Sliver C2 Insecure Default Network Policy (CVE-2025-27093) #SliverC2 #Wireguard #CVE202527093 #NetworkPolicy #CommandAndControl https://hngnh.com/posts/Sliver-CVE-2025-27093/", "creation_timestamp": "2026-07-30T00:02:11.364393Z"}, {"uuid": "2b6a7ee1-feb7-4e44-a878-09edc31700b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "https://t.me/reverseame/5155", "content": "SysOwned, Your Friendly Support Ticket - SysAid On-Premise Pre-Auth RCE Chain (CVE-2025-2775 And Friends) #SysOwned #SysAid #Vulnerabilities #PreAuthRCE #CVE20252775 https://labs.watchtowr.com/sysowned-your-friendly-rce-support-ticket/", "creation_timestamp": "2026-07-30T00:02:14.741436Z"}, {"uuid": "a89a5e53-e984-4026-9ca0-300879375dea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27218", "type": "seen", "source": "https://t.me/reverseame/5076", "content": "Sitecore: Unsafe Deserialisation Again! (CVE-2025-27218) #Sitecore #UnsafeDeserialisation #RemoteCommandExecution #CVE-2025-27218 #SearchlightCyber https://slcyber.io/blog/sitecore-unsafe-deserialization-again-cve-2025-27218/", "creation_timestamp": "2026-07-30T00:02:15.511544Z"}, {"uuid": "bba78079-96e5-4a94-bd7e-5d1b163e7f7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2749", "type": "seen", "source": "https://t.me/CyberDispatch/1348", "content": "CISA Adds 8 Actively Exploited Vulnerabilities to KEV Catalog\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) urgently added eight zero-day vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog on April 20, 2026, confirming active exploitation across enterprise tools from Cisco, Quest, PaperCut, TeamCity, Kentico, and Zimbra.\n\nKey flaws include three Cisco SD-WAN vulnerabilities\u2014CVE-2026-20127 (authentication bypass), CVE-2022-20775 (privilege escalation), and CVE-2026-20133 (sensitive info exposure)\u2014plus CVE-2025-32975 (CVSS 10.0) in Quest KACE SMA, enabling full user impersonation without credentials.\n\nOthers: CVE-2023-27351 (PaperCut improper auth, CVSS 8.2); CVE-2024-27199 (TeamCity path traversal, CVSS 7.3); CVE-2025-2749 (Kentico path traversal, CVSS 7.2).", "creation_timestamp": "2026-08-30T00:00:43.055237Z"}, {"uuid": "f575acff-b942-4b40-afeb-418834fcf3b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2749", "type": "seen", "source": "https://t.me/CyberDispatch/1348", "content": "CISA Adds 8 Actively Exploited Vulnerabilities to KEV Catalog\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) urgently added eight zero-day vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog on April 20, 2026, confirming active exploitation across enterprise tools from Cisco, Quest, PaperCut, TeamCity, Kentico, and Zimbra.\n\nKey flaws include three Cisco SD-WAN vulnerabilities\u2014CVE-2026-20127 (authentication bypass), CVE-2022-20775 (privilege escalation), and CVE-2026-20133 (sensitive info exposure)\u2014plus CVE-2025-32975 (CVSS 10.0) in Quest KACE SMA, enabling full user impersonation without credentials.\n\nOthers: CVE-2023-27351 (PaperCut improper auth, CVSS 8.2); CVE-2024-27199 (TeamCity path traversal, CVSS 7.3); CVE-2025-2749 (Kentico path traversal, CVSS 7.2).", "creation_timestamp": "2026-08-31T00:00:27.777528Z"}, {"uuid": "8ceb2540-3bfe-42f4-8191-c9301e1309f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-31)", "content": "", "creation_timestamp": "2026-09-01T10:00:04.349004Z"}, {"uuid": "d054f227-e0da-4d8e-b957-92c5182ae59c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "seen", "source": "Telegram/zbOkxYY_zAluor3Y7uOLusXS9OsJZvZ7mv8JI_Sd5cs7MNw", "content": "", "creation_timestamp": "2026-09-02T01:00:06.705312Z"}, {"uuid": "a9d43ded-d60d-4cb1-ba5e-910a23aaf627", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27789", "type": "seen", "source": "https://gist.github.com/djlan/08b65cfaf26247f94419d7a882d7d203", "content": "# \u4fee\u590d `@babel/helpers` \u7684 CVE-2025-27789\uff1a\u901a\u8fc7 npm overrides \u7edf\u4e00\u5b89\u5168\u7248\u672c\n\n> **\u4e00\u53e5\u8bdd\u6458\u8981\uff1a** \u6b64 PR \u5728\u5ba2\u6237\u7aef\u3001\u793a\u4f8b\u5bbf\u4e3b\u5e94\u7528\u548c\u6269\u5c55\u793a\u4f8b\u7684 6 \u4e2a `package.json` \u4e2d\u52a0\u5165 `@babel/helpers: ^7.27.6` \u7684 npm `overrides`\uff0c\u4f7f\u8fd9\u4e9b\u72ec\u7acb\u5b89\u88c5\u8fb9\u754c\u5185\u7684\u4f20\u9012\u4f9d\u8d56\u89e3\u6790\u5230 PR \u6240\u6307\u5b9a\u7684\u5b89\u5168\u7248\u672c\u8303\u56f4\u3002\n\n| \u9879\u76ee | \u5185\u5bb9 |\n|---|---|\n| PR | [AzureNotebooks PR 648520](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/648520) |\n| \u4f5c\u8005 | GitHub Copilot |\n| \u72b6\u6001 | Active\uff1b\u975e Draft\uff1b\u5305\u5185\u8bb0\u5f55\u7684\u5408\u5e76\u72b6\u6001\u4e3a `succeeded` |\n| \u5206\u652f | `copilot/swe-wi2417040-d3514` \u2192 `main` |\n| \u521b\u5efa\u65f6\u95f4 | 2025-07-02 16:57:51\uff08\u6570\u636e\u5305\u672a\u6ce8\u660e\u65f6\u533a\uff09 |\n| \u63d0\u4ea4 | 1 |\n| \u8fed\u4ee3 | 2 |\n| \u6587\u4ef6 | 6 \u4e2a\u4fee\u6539 |\n| \u5dee\u5f02\u7edf\u8ba1 | \u7ea6 `+17 / -10` \u884c\uff08\u6309\u6570\u636e\u5305\u4e2d\u7684\u6587\u672c diff \u7edf\u8ba1\uff0c\u5305\u542b\u683c\u5f0f\u8c03\u6574\uff09 |\n\n## \u76ee\u5f55\n\n1. [\u53d8\u66f4\u6982\u89c8](#\u53d8\u66f4\u6982\u89c8)\n2. [\u6309\u529f\u80fd\u6a21\u5757\u8bf4\u660e](#\u6309\u529f\u80fd\u6a21\u5757\u8bf4\u660e)\n3. [\u5de5\u4f5c\u539f\u7406](#\u5de5\u4f5c\u539f\u7406)\n4. [\u5f71\u54cd\u5206\u6790](#\u5f71\u54cd\u5206\u6790)\n5. [\u98ce\u9669\u4e0e\u517c\u5bb9\u6027\u5173\u6ce8](#\u98ce\u9669\u4e0e\u517c\u5bb9\u6027\u5173\u6ce8)\n6. [\u6d4b\u8bd5\u4e0e\u9a8c\u8bc1\u5efa\u8bae](#\u6d4b\u8bd5\u4e0e\u9a8c\u8bc1\u5efa\u8bae)\n7. [\u5dee\u5f02\u8986\u76d6\u4e0e\u5206\u6790\u8fb9\u754c](#\u5dee\u5f02\u8986\u76d6\u4e0e\u5206\u6790\u8fb9\u754c)\n\n## \u53d8\u66f4\u6982\u89c8\n\nPR \u63cf\u8ff0\u79f0\uff0c\u7ec4\u4ef6\u6cbb\u7406\u53d1\u73b0 `@babel/helpers` 7.24.4 \u5b58\u5728 CVE-2025-27789\uff1b\u4ed3\u5e93\u4e2d\u867d\u672a\u53d1\u73b0\u5bf9\u8be5\u5177\u4f53\u7248\u672c\u7684\u76f4\u63a5\u5f15\u7528\uff0c\u4f46\u5b83\u53ef\u80fd\u7531\u4f20\u9012\u4f9d\u8d56\u5f15\u5165\u3002\u4e3a\u907f\u514d\u6bcf\u6761\u4f9d\u8d56\u94fe\u5206\u522b\u5347\u7ea7\uff0c\u53d8\u66f4\u5728 6 \u4e2a\u53ef\u72ec\u7acb\u5b89\u88c5 npm \u4f9d\u8d56\u7684\u5305\u4e2d\u8bbe\u7f6e\u6839\u7ea7 `overrides`\uff0c\u8981\u6c42 npm \u5c06\u4f9d\u8d56\u6811\u4e2d\u7684 `@babel/helpers` \u89e3\u6790\u5230 `^7.27.6`\u3002\n\n\u6539\u52a8\u6ca1\u6709\u4fee\u6539\u5e94\u7528\u4e1a\u52a1\u4ee3\u7801\u3001Babel \u8c03\u7528\u65b9\u5f0f\u6216\u516c\u5f00 API\u3002\u5176\u4f5c\u7528\u53d1\u751f\u5728\u4f9d\u8d56\u5b89\u88c5/\u89e3\u6790\u9636\u6bb5\uff1a\u91cd\u65b0\u6267\u884c\u517c\u5bb9 `overrides` \u7684 npm \u5b89\u88c5\u540e\uff0c\u53d7\u8fd9\u4e9b\u6e05\u5355\u63a7\u5236\u7684\u4f9d\u8d56\u6811\u5e94\u91c7\u7528\u6ee1\u8db3\u8be5\u8303\u56f4\u7684\u7248\u672c\u3002\n\n## \u6309\u529f\u80fd\u6a21\u5757\u8bf4\u660e\n\n### 1. \u4e3b\u5ba2\u6237\u7aef\u4f9d\u8d56\u6cbb\u7406\n\n- [`src/client/package.json`](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/648520?path=/src/client/package.json&_a=files)\uff1a\u5728\u73b0\u6709 `overrides` \u4e2d\u589e\u52a0 `@babel/helpers: ^7.27.6`\u3002\n- \u8fd9\u662f\u4e3b\u8981\u5ba2\u6237\u7aef\u5305\u7684\u96c6\u4e2d\u4f9d\u8d56\u7ea6\u675f\uff0c\u53ef\u8986\u76d6\u5ba2\u6237\u7aef\u4f9d\u8d56\u6811\u4e2d\u76f4\u63a5\u6216\u95f4\u63a5\u5f15\u5165\u7684 `@babel/helpers`\u3002\n- \u8be5\u6587\u4ef6\u539f\u672c\u5df2\u6709\u591a\u4e2a\u5b89\u5168\u6216\u517c\u5bb9\u6027\u8986\u76d6\u9879\uff0c\u672c\u6b21\u6cbf\u7528\u65e2\u6709\u673a\u5236\uff0c\u6ca1\u6709\u5f15\u5165\u65b0\u7684\u4f9d\u8d56\u7ba1\u7406\u6a21\u5f0f\u3002\n\n### 2. \u793a\u4f8b\u5bbf\u4e3b\u5e94\u7528\n\n- [`sample/react-host-app/package.json`](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/648520?path=/sample/react-host-app/package.json&_a=files)\uff1a\u5728\u5df2\u6709 `postcss` override \u540e\u8ffd\u52a0 `@babel/helpers`\u3002\n- [`sample/angular-host-app/package.json`](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/648520?path=/sample/angular-host-app/package.json&_a=files)\uff1a\u4fdd\u7559\u539f\u6709 `semver@7`\u3001`postcss`\u3001`follow-redirects` \u7ea6\u675f\u5e76\u8ffd\u52a0 `@babel/helpers`\uff1b\u540c\u65f6\u5c06\u591a\u884c JSON \u538b\u7f29\u4e3a\u5355\u884c\uff0c\u5c5e\u4e8e\u8868\u793a\u5f62\u5f0f\u53d8\u5316\u3002\n- \u4e24\u4e2a\u5bbf\u4e3b\u5e94\u7528\u62e5\u6709\u5404\u81ea\u7684 `package.json`\uff0c\u56e0\u6b64\u4ec5\u4fee\u6539\u4e3b\u5ba2\u6237\u7aef\u6e05\u5355\u4e0d\u8db3\u4ee5\u7ea6\u675f\u5b83\u4eec\u72ec\u7acb\u5b89\u88c5\u65f6\u7684\u4f9d\u8d56\u6811\uff1b\u672c\u6b21\u5206\u522b\u6dfb\u52a0 override\uff0c\u4f7f React \u548c Angular \u793a\u4f8b\u5177\u6709\u76f8\u540c\u7684\u5b89\u5168\u57fa\u7ebf\u3002\n\n### 3. \u901a\u7528\u6269\u5c55\u793a\u4f8b\n\n- [`sample/extensions/common-extensions/NotebookGrader/package.json`](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/648520?path=/sample/extensions/common-extensions/NotebookGrader/package.json&_a=files)\n- [`sample/extensions/common-extensions/SystemMonitor/package.json`](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/648520?path=/sample/extensions/common-extensions/SystemMonitor/package.json&_a=files)\n\n\u8fd9\u4e24\u4e2a\u6269\u5c55\u6b64\u524d\u6ca1\u6709 `overrides` \u8282\u70b9\u3002\u672c\u6b21\u65b0\u589e\u6839\u7ea7\u8282\u70b9\uff0c\u4f7f\u6269\u5c55\u5728\u72ec\u7acb\u5b89\u88c5\u4f9d\u8d56\u65f6\u4e5f\u80fd\u8986\u76d6\u4f20\u9012\u4f9d\u8d56\u4e2d\u7684 `@babel/helpers`\u3002SystemMonitor \u6587\u4ef6\u8fd8\u51fa\u73b0\u4e86\u6587\u4ef6\u672b\u5c3e\u6362\u884c\u72b6\u6001\u53d8\u5316\uff0c\u4f46\u6ca1\u6709\u5305\u5185\u8bc1\u636e\u8868\u660e\u5176\u914d\u7f6e\u8bed\u4e49\u53d1\u751f\u5176\u4ed6\u6539\u53d8\u3002\n\n### 4. \u670d\u52a1\u7aef Terminal \u6269\u5c55\u793a\u4f8b\n\n- [`sample/extensions/server-extensions/Terminal/package.json`](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/648520?path=/sample/extensions/server-extensions/Terminal/package.json&_a=files)\uff1a\u65b0\u589e\u76f8\u540c\u7684 `@babel/helpers` override\u3002\n- \u540c\u4e00\u6587\u4ef6\u8fd8\u628a `CommandPrompt` \u56fe\u6807\u503c\u4ece\u5b57\u9762 Unicode \u5b57\u7b26\u6539\u4e3a JSON Unicode \u8f6c\u4e49 `\\uE756`\u3002\u4e24\u79cd\u5199\u6cd5\u5728 JSON \u89e3\u7801\u540e\u901a\u5e38\u8868\u793a\u540c\u4e00\u4e2a\u7801\u4f4d\uff0c\u56e0\u6b64\u9884\u671f\u4e0d\u6539\u53d8\u56fe\u6807\u503c\uff0c\u4f46\u8fd9\u662f\u5b89\u5168\u4f9d\u8d56\u4fee\u590d\u4e4b\u5916\u7684\u9644\u5e26\u53d8\u66f4\uff0c\u5e94\u5355\u72ec\u6838\u5b9e\u7ec8\u7aef\u83dc\u5355\u56fe\u6807\u4ecd\u53ef\u6b63\u786e\u6e32\u67d3\u3002\n- \u6587\u4ef6\u672b\u5c3e\u6362\u884c\u72b6\u6001\u4e5f\u53d1\u751f\u53d8\u5316\uff0c\u4e0d\u5f71\u54cd JSON \u6570\u636e\u6a21\u578b\u3002\n\n## \u5de5\u4f5c\u539f\u7406\n\n`overrides` \u662f npm \u5728\u6784\u9020\u4f9d\u8d56\u6811\u65f6\u5e94\u7528\u7684\u9876\u5c42\u7ea6\u675f\u3002\u5373\u4f7f `@babel/helpers` \u4e0d\u662f\u8fd9\u4e9b\u9879\u76ee\u7684\u76f4\u63a5 dependency\uff0c\u53ea\u8981\u67d0\u4e2a\u76f4\u63a5\u6216\u4f20\u9012\u4f9d\u8d56\u8bf7\u6c42\u5b83\uff0cnpm \u4e5f\u4f1a\u5c1d\u8bd5\u6309\u7167 override \u9009\u62e9\u6ee1\u8db3 `^7.27.6` \u7684\u7248\u672c\u3002\u8fd9\u6837\u53ef\u4ee5\u5728\u4e0d\u9010\u4e00\u4fee\u6539\u4e0a\u6e38\u5305\u7248\u672c\u7684\u60c5\u51b5\u4e0b\u7edf\u4e00\u4f20\u9012\u4f9d\u8d56\u3002\n\n`^7.27.6` \u4e0d\u662f\u7cbe\u786e\u9501\u5b9a\uff1a\u6309\u7167\u8bed\u4e49\u5316\u7248\u672c\u89c4\u5219\uff0c\u5b83\u5141\u8bb8\u5b89\u88c5 `7.27.6` \u53ca\u4e4b\u540e\u3001\u4f46\u4f4e\u4e8e `8.0.0` \u7684\u517c\u5bb9\u7248\u672c\u3002\u5b9e\u9645\u843d\u5730\u7248\u672c\u4ecd\u53d6\u51b3\u4e8e\u5b89\u88c5\u65f6\u53ef\u7528\u7684\u6ce8\u518c\u8868\u7248\u672c\u3001\u9501\u6587\u4ef6\u72b6\u6001\u4ee5\u53ca\u6240\u4f7f\u7528\u7684 npm \u7248\u672c\u3002\n\n\u6bcf\u4e2a\u6e05\u5355\u90fd\u9700\u8981\u5355\u72ec\u8bbe\u7f6e override\uff0c\u56e0\u4e3a npm override \u7684\u4f5c\u7528\u57df\u662f\u6267\u884c\u5b89\u88c5\u7684\u6839\u9879\u76ee\uff1b\u67d0\u4e2a\u5b50\u9879\u76ee\u4e0d\u4f1a\u81ea\u52a8\u7ee7\u627f\u53e6\u4e00\u4e2a\u76ee\u5f55\u4e2d `package.json` \u7684\u6839\u7ea7 override\u3002\n\n## \u5f71\u54cd\u5206\u6790\n\n### \u6b63\u9762\u5f71\u54cd\n\n- \u5c06 6 \u4e2a\u5b89\u88c5\u8fb9\u754c\u7684 `@babel/helpers` \u6700\u4f4e\u7248\u672c\u63d0\u5347\u5230 PR \u6307\u5b9a\u7684 `7.27.6`\uff0c\u964d\u4f4e\u7ee7\u7eed\u89e3\u6790\u5230 PR \u6240\u8ff0\u6613\u53d7\u5f71\u54cd\u7248\u672c\u7684\u53ef\u80fd\u6027\u3002\n- \u4fee\u6539\u96c6\u4e2d\u5728\u4f9d\u8d56\u5143\u6570\u636e\uff0c\u4e0d\u6539\u53d8\u5e94\u7528\u6e90\u4ee3\u7801\u63a5\u53e3\uff0c\u9884\u671f\u4e1a\u52a1\u529f\u80fd\u5f71\u54cd\u8f83\u5c0f\u3002\n- \u5bf9\u4e3b\u5ba2\u6237\u7aef\u3001\u5bbf\u4e3b\u793a\u4f8b\u548c\u6269\u5c55\u793a\u4f8b\u540c\u65f6\u5904\u7406\uff0c\u907f\u514d\u53ea\u4fee\u590d\u4e3b\u5305\u800c\u9057\u6f0f\u53ef\u72ec\u7acb\u5b89\u88c5\u7684\u6837\u4f8b\u5de5\u7a0b\u3002\n\n### \u8fd0\u884c\u65f6\u4e0e\u6784\u5efa\u5f71\u54cd\n\n- \u53d8\u66f4\u672c\u8eab\u5728\u5b89\u88c5\u65f6\u751f\u6548\uff1b\u5982\u679c\u6784\u5efa\u590d\u7528\u65e7\u7684 `node_modules` \u6216\u65e7\u9501\u6587\u4ef6\u4e14\u4e0d\u91cd\u65b0\u89e3\u6790\u4f9d\u8d56\uff0c\u65b0\u7684 override \u53ef\u80fd\u4e0d\u4f1a\u7acb\u5373\u4f53\u73b0\u5728\u4ea7\u7269\u4e2d\u3002\n- `@babel/helpers` \u63d0\u4f9b Babel \u8f6c\u8bd1\u4ee3\u7801\u4f7f\u7528\u7684\u8fd0\u884c\u65f6\u8f85\u52a9\u5b9e\u73b0\u3002\u867d\u7136\u540c\u5c5e 7.x \u8303\u56f4\u901a\u5e38\u5f3a\u8c03\u517c\u5bb9\u6027\uff0c\u4f46\u5f3a\u5236\u66ff\u6362\u4f20\u9012\u7248\u672c\u4ecd\u53ef\u80fd\u5f71\u54cd\u7531\u65e7 Babel \u5de5\u5177\u94fe\u751f\u6210\u6216\u6d88\u8d39\u8f85\u52a9\u51fd\u6570\u7684\u6784\u5efa\u7ed3\u679c\uff0c\u9700\u8981\u901a\u8fc7\u5b9e\u9645\u5b89\u88c5\u548c\u6784\u5efa\u786e\u8ba4\u3002\n- Terminal \u7684\u56fe\u6807\u8f6c\u4e49\u53d8\u66f4\u7406\u8bba\u4e0a\u4fdd\u6301\u540c\u4e00\u7801\u4f4d\uff0c\u4f46\u5b83\u4e0d\u5c5e\u4e8e CVE \u4fee\u590d\u7684\u5fc5\u8981\u90e8\u5206\uff0c\u82e5\u6d88\u8d39\u65b9\u8bfb\u53d6\u7684\u662f\u539f\u59cb JSON \u6587\u672c\u800c\u975e\u89e3\u6790\u540e\u7684\u503c\uff0c\u884c\u4e3a\u53ef\u80fd\u4e0d\u540c\uff1b\u6570\u636e\u5305\u672a\u63d0\u4f9b\u6d88\u8d39\u5b9e\u73b0\uff0c\u4e0d\u80fd\u65ad\u8a00\u7edd\u5bf9\u65e0\u5f71\u54cd\u3002\n\n## \u98ce\u9669\u4e0e\u517c\u5bb9\u6027\u5173\u6ce8\n\n| \u98ce\u9669 | \u5177\u4f53\u5173\u6ce8\u70b9 | \u5efa\u8bae |\n|---|---|---|\n| npm \u7248\u672c\u517c\u5bb9\u6027 | `overrides` \u9700\u8981\u652f\u6301\u8be5\u5b57\u6bb5\u7684 npm \u7248\u672c\uff1b\u8f83\u65e7 npm \u53ef\u80fd\u5ffd\u7565\u6216\u4e0d\u652f\u6301\u5b83\u3002\u6570\u636e\u5305\u672a\u7ed9\u51fa CI/\u5f00\u53d1\u73af\u5883 npm \u7248\u672c\u3002 | \u7528\u4ed3\u5e93\u89c4\u5b9a\u7684 Node/npm \u7248\u672c\u6267\u884c\u5b89\u88c5\uff0c\u5e76\u786e\u8ba4 override \u88ab\u5e94\u7528\u3002 |\n| \u9501\u6587\u4ef6\u672a\u540c\u6b65 | \u6570\u636e\u5305\u7684 6 \u4e2a\u53d8\u66f4\u5747\u4e3a `package.json`\uff0c\u6ca1\u6709\u5bf9\u5e94 lockfile \u5dee\u5f02\u3002\u82e5\u4ed3\u5e93\u4f7f\u7528 `npm ci`\uff0c\u6e05\u5355\u4e0e\u9501\u6587\u4ef6\u4e0d\u4e00\u81f4\u53ef\u80fd\u5931\u8d25\uff0c\u6216\u9501\u5b9a\u7ed3\u679c\u53ef\u80fd\u4ecd\u9700\u91cd\u65b0\u751f\u6210\u3002 | \u68c0\u67e5\u5404\u76ee\u5f55\u662f\u5426\u5b58\u5728\u53d7\u7248\u672c\u63a7\u5236\u7684 lockfile\uff0c\u5e76\u6309\u4ed3\u5e93\u6d41\u7a0b\u66f4\u65b0\u6216\u8bc1\u660e\u65e0\u9700\u66f4\u65b0\u3002 |\n| \u8303\u56f4\u800c\u975e\u7cbe\u786e\u7248\u672c | `^7.27.6` \u53ef\u81ea\u52a8\u63a5\u53d7\u540e\u7eed 7.x \u7248\u672c\uff0c\u672a\u6765\u5b89\u88c5\u7ed3\u679c\u53ef\u80fd\u53d8\u5316\u3002 | \u82e5\u6784\u5efa\u8981\u6c42\u5b8c\u5168\u53ef\u91cd\u590d\uff0c\u5e94\u4f9d\u8d56 lockfile \u56fa\u5b9a\u89e3\u6790\u7ed3\u679c\uff0c\u6216\u8bc4\u4f30\u662f\u5426\u5e94\u4f7f\u7528\u7cbe\u786e\u7248\u672c\u3002 |\n| \u4f20\u9012\u4f9d\u8d56\u517c\u5bb9\u6027 | \u67d0\u4e9b\u4e0a\u6e38\u4f9d\u8d56\u53ef\u80fd\u58f0\u660e\u6216\u9690\u542b\u4f9d\u8d56\u8f83\u65e7 helper \u884c\u4e3a\uff1b\u5f3a\u5236\u7edf\u4e00\u7248\u672c\u53ef\u80fd\u66b4\u9732\u6784\u5efa/\u8fd0\u884c\u65f6\u5dee\u5f02\u3002 | \u5bf9\u5168\u90e8 6 \u4e2a\u5b89\u88c5\u8fb9\u754c\u6267\u884c\u5e72\u51c0\u5b89\u88c5\u4e0e\u6784\u5efa\uff0c\u800c\u4e0d\u53ea\u68c0\u67e5 JSON \u8bed\u6cd5\u3002 |\n| \u8986\u76d6\u662f\u5426\u771f\u6b63\u751f\u6548 | override \u4ec5\u5bf9\u4ee5\u5bf9\u5e94\u6e05\u5355\u4e3a\u5b89\u88c5\u6839\u76ee\u5f55\u7684 npm \u4f9d\u8d56\u6811\u751f\u6548\uff1b\u5176\u4ed6\u5de5\u4f5c\u533a\u6216\u4e0d\u540c\u5305\u7ba1\u7406\u5668\u4e0d\u4e00\u5b9a\u91c7\u7528\u5b83\u3002 | \u4f7f\u7528 `npm ls @babel/helpers` \u6216\u7b49\u4ef7\u547d\u4ee4\u9010\u4e2a\u9a8c\u8bc1\u5b9e\u9645\u89e3\u6790\u7248\u672c\u3002 |\n| \u65e0\u5173\u683c\u5f0f/\u5185\u5bb9\u53d8\u66f4 | Angular \u6e05\u5355\u88ab\u538b\u7f29\u4e3a\u5355\u884c\uff1bTerminal \u56fe\u6807\u6539\u4e3a\u8f6c\u4e49\u5f62\u5f0f\u3002\u5b83\u4eec\u589e\u52a0\u5ba1\u9605\u566a\u58f0\uff0cTerminal \u53d8\u66f4\u8fd8\u6709\u8f7b\u5fae\u884c\u4e3a\u98ce\u9669\u3002 | \u786e\u8ba4\u683c\u5f0f\u5316\u7b26\u5408\u4ed3\u5e93\u60ef\u4f8b\uff0c\u5e76\u5355\u72ec\u9a8c\u8bc1 Terminal \u56fe\u6807\uff1b\u82e5\u975e\u5fc5\u8981\u53ef\u62c6\u9664\u9644\u5e26\u53d8\u66f4\u3002 |\n| \u5b89\u5168\u7ed3\u8bba\u8303\u56f4 | \u6570\u636e\u5305\u53ea\u8f6c\u8ff0 PR \u5bf9 CVE \u548c\u5b89\u5168\u7248\u672c\u7684\u63cf\u8ff0\uff0c\u6ca1\u6709\u6f0f\u6d1e\u516c\u544a\u3001\u626b\u63cf\u62a5\u544a\u6216\u5b89\u88c5\u540e\u7684\u4f9d\u8d56\u6811\u8bc1\u636e\u3002 | \u4ee5\u7ec4\u4ef6\u6cbb\u7406\u544a\u8b66/\u5b98\u65b9\u516c\u544a\u786e\u8ba4\u4fee\u590d\u7248\u672c\uff0c\u5e76\u5728\u5b89\u88c5\u540e\u91cd\u65b0\u8fd0\u884c\u5b89\u5168\u626b\u63cf\u3002 |\n\n## \u6d4b\u8bd5\u4e0e\u9a8c\u8bc1\u5efa\u8bae\n\n\u6570\u636e\u5305\u6ca1\u6709\u5305\u542b\u6d4b\u8bd5\u4fee\u6539\u3001\u6d4b\u8bd5\u6267\u884c\u7ed3\u679c\u3001CI \u6784\u5efa\u7ed3\u679c\u6216\u7ec4\u4ef6\u6cbb\u7406\u590d\u626b\u7ed3\u679c\uff0c\u56e0\u6b64\u4e0d\u80fd\u58f0\u79f0\u672c PR \u5df2\u901a\u8fc7\u8fd9\u4e9b\u9a8c\u8bc1\u3002\u5efa\u8bae\u81f3\u5c11\u6267\u884c\uff1a\n\n1. \u5728 6 \u4e2a\u76ee\u5f55\u5206\u522b\u8fdb\u884c\u4ed3\u5e93\u89c4\u5b9a\u7684\u5e72\u51c0\u4f9d\u8d56\u5b89\u88c5\uff0c\u786e\u8ba4 JSON \u53ef\u89e3\u6790\u4e14 npm \u63a5\u53d7 `overrides`\u3002\n2. \u5bf9\u6bcf\u4e2a\u5b89\u88c5\u8fb9\u754c\u67e5\u8be2 `@babel/helpers` \u7684\u5b9e\u9645\u4f9d\u8d56\u6811\uff0c\u786e\u8ba4\u4e0d\u5b58\u5728\u4f4e\u4e8e `7.27.6` \u7684\u89e3\u6790\u5b9e\u4f8b\uff0c\u5e76\u8bb0\u5f55\u6700\u7ec8\u7248\u672c\u3002\n3. \u8fd0\u884c\u4e3b\u5ba2\u6237\u7aef\u3001React/Angular \u5bbf\u4e3b\u5e94\u7528\u4ee5\u53ca\u4e09\u4e2a\u6269\u5c55\u793a\u4f8b\u7684\u73b0\u6709\u6784\u5efa\u548c\u6d4b\u8bd5\u3002\n4. \u542f\u52a8\u6216\u6267\u884c Terminal \u793a\u4f8b\u7684\u76f8\u5173 UI \u9a8c\u8bc1\uff0c\u786e\u8ba4 `CommandPrompt` \u56fe\u6807\u4ecd\u6b63\u786e\u663e\u793a\u3002\n5. \u91cd\u65b0\u8fd0\u884c\u7ec4\u4ef6\u6cbb\u7406\u6216\u4ed3\u5e93\u73b0\u6709\u5b89\u5168\u626b\u63cf\uff0c\u786e\u8ba4 CVE-2025-27789 \u544a\u8b66\u88ab\u89e3\u9664\u3002\n6. \u82e5\u5b58\u5728 lockfile\uff0c\u4f7f\u7528 CI \u540c\u6b3e `npm ci` \u9a8c\u8bc1\u6e05\u5355\u4e0e\u9501\u6587\u4ef6\u4e00\u81f4\u4e14\u5b89\u88c5\u53ef\u91cd\u590d\u3002\n\n## \u5dee\u5f02\u8986\u76d6\u4e0e\u5206\u6790\u8fb9\u754c\n\n- \u6570\u636e\u5305\u5217\u51fa 6 \u4e2a changed files\uff0c\u5e76\u63d0\u4f9b\u4e86\u5bf9\u5e94\u7684 6 \u4efd diff\uff1b\u6bcf\u4efd diff \u7684 `truncated` \u5747\u4e3a `false`\uff0c\u603b\u4f53 `diffTruncated` \u4e5f\u4e3a `false`\u3002\u56e0\u6b64\uff0c\u5305\u5185\u5217\u51fa\u7684\u6587\u4ef6\u7ea7\u5dee\u5f02\u6ca1\u6709\u6807\u8bb0\u4e3a\u622a\u65ad\u3002\n- \u603b\u5dee\u5f02\u5927\u5c0f\u4e3a 3,061 \u5b57\u8282\uff0c\u4f4e\u4e8e\u6570\u636e\u5305\u6ce8\u660e\u7684\u603b\u4f53 524,288 \u5b57\u8282\u548c\u5355\u6587\u4ef6 65,536 \u5b57\u8282\u4e0a\u9650\u3002\n- \u6570\u636e\u5305\u6ca1\u6709 errors \u6216 warnings\u3002\n- \u201c\u672a\u622a\u65ad\u201d\u4ec5\u8868\u793a\u5bfc\u51fa\u7684 diff \u6587\u672c\u672a\u89e6\u53d1\u622a\u65ad\u6807\u8bb0\uff0c\u4e0d\u4ee3\u8868\u6570\u636e\u5305\u5305\u542b\u4ed3\u5e93\u5b8c\u6574\u6587\u4ef6\u5185\u5bb9\u6216\u6240\u6709\u5916\u90e8\u4e0a\u4e0b\u6587\u3002\u5305\u4e2d\u672a\u63d0\u4f9b\u5b8c\u6574 `package.json`\u3001\u4efb\u4f55 lockfile \u5185\u5bb9\u3001\u4f9d\u8d56\u89e3\u6790\u6811\u3001CVE \u516c\u544a\u6b63\u6587\u3001\u6784\u5efa\u65e5\u5fd7\u3001\u6d4b\u8bd5\u7ed3\u679c\u3001\u7b56\u7565\u9a8c\u8bc1\u7ed3\u679c\u6216 PR \u8ba8\u8bba\uff0c\u56e0\u6b64\u4e0a\u8ff0\u9879\u76ee\u5747\u672a\u4f5c\u8d85\u51fa\u8bc1\u636e\u7684\u7ed3\u8bba\u3002\n- \u884c\u6570\u7edf\u8ba1\u6765\u81ea\u5305\u5185\u6587\u672c diff\uff1bAngular \u7684\u5355\u884c\u683c\u5f0f\u5316\u3001\u6587\u4ef6\u672b\u5c3e\u6362\u884c\u6807\u8bb0\u4ee5\u53ca Terminal \u7684\u5b57\u7b26\u8f6c\u4e49\u4f1a\u4f7f\u884c\u7ea7\u7edf\u8ba1\u9ad8\u4e8e\u5b9e\u9645\u8bed\u4e49\u6539\u52a8\u91cf\u3002\n", "creation_timestamp": "2026-09-01T20:22:11.504472Z"}, {"uuid": "ce7f0f49-186d-459e-9067-274745e1aa3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27789", "type": "seen", "source": "https://gist.github.com/djlan/74212a12decc46a1ae79f40089381559", "content": "# \u66f4\u65b0 @babel \u4f9d\u8d56\u4ee5\u4fee\u590d CVE-2025-27789\n\n> **\u4e00\u53e5\u8bdd\u603b\u7ed3\uff1a** \u672c PR \u901a\u8fc7\u63d0\u5347 AzNB.Lobby \u7684 Babel \u7f16\u8bd1\u4e0e Jest \u8f6c\u8bd1\u5de5\u5177\u7248\u672c\uff0c\u4f7f\u4f9d\u8d56\u89e3\u6790\u8f6c\u5411\u5305\u542b\u5df2\u4fee\u590d `@babel/helpers` \u7684\u8f83\u65b0\u7248\u672c\uff1b\u4f46\u6700\u7ec8\u53d8\u66f4\u672a\u63d0\u4ea4\u9501\u6587\u4ef6\uff0c\u4e5f\u672a\u63d0\u4f9b\u6784\u5efa\u3001\u6d4b\u8bd5\u6216\u5b89\u5168\u626b\u63cf\u7ed3\u679c\u3002\n\n| \u9879\u76ee | \u5185\u5bb9 |\n|---|---|\n| PR | [AzureNotebooks PR 648522](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/648522) |\n| \u4f5c\u8005 | GitHub Copilot |\n| \u72b6\u6001 | Active\uff0c\u975e\u8349\u7a3f\uff1b\u5408\u5e76\u72b6\u6001\u4e3a Succeeded |\n| \u5206\u652f | `copilot/swe-wi2417022-e4ab6` \u2192 `main` |\n| \u521b\u5efa\u65f6\u95f4 | 2025-07-02 16:58:51 |\n| \u63d0\u4ea4\u6570 | 2 |\n| \u8fed\u4ee3\u6570 | 3 |\n| \u53d8\u66f4\u7edf\u8ba1 | 1 \u4e2a\u6587\u4ef6\uff0c4 \u884c\u65b0\u589e\u30014 \u884c\u5220\u9664 |\n| \u5dee\u5f02\u91c7\u96c6 | `git-local`\uff0c\u5171 1006 \u5b57\u8282\uff0c\u6574\u4f53\u53ca\u5355\u6587\u4ef6\u5dee\u5f02\u5747\u672a\u622a\u65ad |\n\n## \u76ee\u5f55\n\n- [\u53d8\u66f4\u6982\u89c8](#\u53d8\u66f4\u6982\u89c8)\n- [\u6309\u529f\u80fd\u6a21\u5757\u8bf4\u660e](#\u6309\u529f\u80fd\u6a21\u5757\u8bf4\u660e)\n  - [\u5b89\u5168\u4f9d\u8d56\u5347\u7ea7](#\u5b89\u5168\u4f9d\u8d56\u5347\u7ea7)\n  - [Babel \u7f16\u8bd1\u94fe\u517c\u5bb9\u6027](#babel-\u7f16\u8bd1\u94fe\u517c\u5bb9\u6027)\n  - [Jest \u8f6c\u8bd1\u96c6\u6210](#jest-\u8f6c\u8bd1\u96c6\u6210)\n  - [\u6587\u6863\u4e0e\u63d0\u4ea4\u6f14\u8fdb](#\u6587\u6863\u4e0e\u63d0\u4ea4\u6f14\u8fdb)\n- [\u5f71\u54cd\u5206\u6790](#\u5f71\u54cd\u5206\u6790)\n- [\u98ce\u9669\u4e0e\u517c\u5bb9\u6027\u5173\u6ce8](#\u98ce\u9669\u4e0e\u517c\u5bb9\u6027\u5173\u6ce8)\n- [\u6d4b\u8bd5\u4e0e\u9a8c\u8bc1](#\u6d4b\u8bd5\u4e0e\u9a8c\u8bc1)\n- [\u5dee\u5f02\u8986\u76d6\u4e0e\u5206\u6790\u8fb9\u754c](#\u5dee\u5f02\u8986\u76d6\u4e0e\u5206\u6790\u8fb9\u754c)\n\n## \u53d8\u66f4\u6982\u89c8\n\n\u6700\u7ec8\u4ee3\u7801\u53d8\u66f4\u96c6\u4e2d\u5728 [AzNB.Lobby/package.json](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/648522?path=/src/service/aznb/AzNB.Collab/AzNB.Lobby/package.json&_a=files) \u7684 `devDependencies`\uff1a\n\n| \u4f9d\u8d56 | \u539f\u7248\u672c\u8303\u56f4 | \u65b0\u7248\u672c\u8303\u56f4 | \u4f5c\u7528 |\n|---|---:|---:|---|\n| `@babel/core` | `^7.19.6` | `^7.27.0` | Babel \u6838\u5fc3\u7f16\u8bd1\u4e0e\u63d2\u4ef6\u8c03\u5ea6 |\n| `@babel/preset-env` | `^7.19.4` | `^7.27.0` | \u6309\u76ee\u6807\u8fd0\u884c\u73af\u5883\u8f6c\u6362 JavaScript |\n| `@babel/preset-typescript` | `^7.18.6` | `^7.23.3` | \u79fb\u9664 TypeScript \u7c7b\u578b\u8bed\u6cd5\u5e76\u4ea4\u7ed9 Babel \u8f6c\u6362 |\n| `babel-jest` | `^29.2.2` | `^29.7.0` | \u5728 Jest \u6d4b\u8bd5\u8fd0\u884c\u65f6\u4f7f\u7528 Babel \u8f6c\u8bd1\u6e90\u7801 |\n\nPR \u7684\u76ee\u6807\u662f\u5904\u7406 `@babel/helpers 7.22.5` \u5bf9\u5e94\u7684 CVE-2025-27789\u3002\u5b9e\u73b0\u65b9\u5f0f\u4e0d\u662f\u76f4\u63a5\u58f0\u660e `@babel/helpers`\uff0c\u800c\u662f\u5347\u7ea7\u5f15\u5165\u5b83\u7684 Babel \u5de5\u5177\u94fe\uff0c\u8ba9\u540e\u7eed\u4f9d\u8d56\u5b89\u88c5\u6839\u636e\u65b0\u7684\u4e0a\u6e38\u7ea6\u675f\u89e3\u6790\u5230\u975e\u6f0f\u6d1e\u7248\u672c\u3002\u7531\u4e8e\u8fd9\u4e9b\u5305\u5747\u4f4d\u4e8e `devDependencies`\uff0c\u76f4\u63a5\u5f71\u54cd\u4e3b\u8981\u843d\u5728\u672c\u5730\u5f00\u53d1\u3001\u6784\u5efa\u548c\u6d4b\u8bd5\u9636\u6bb5\uff0c\u800c\u4e0d\u662f\u5e94\u7528\u8fd0\u884c\u65f6\u663e\u5f0f\u4f9d\u8d56\u3002\n\n## \u6309\u529f\u80fd\u6a21\u5757\u8bf4\u660e\n\n### \u5b89\u5168\u4f9d\u8d56\u5347\u7ea7\n\n[package.json](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/648522?path=/src/service/aznb/AzNB.Collab/AzNB.Lobby/package.json&_a=files) \u5c06 `@babel/core` \u63d0\u5347\u5230 `^7.27.0`\u3002\u6839\u636e PR \u63cf\u8ff0\uff0c\u6f0f\u6d1e\u6765\u6e90\u4f4d\u4e8e `@babel/core` \u7684\u4f20\u9012\u4f9d\u8d56\u94fe\u4e2d\uff0c\u56e0\u6b64\u6838\u5fc3\u5305\u5347\u7ea7\u540e\uff0c\u5176\u4f9d\u8d56\u58f0\u660e\u4f1a\u8981\u6c42\u8f83\u65b0\u7684 `@babel/helpers`\uff0c\u4ece\u6e90\u5934\u907f\u514d\u7ee7\u7eed\u5f15\u7528\u5df2\u77e5\u6f0f\u6d1e\u7248\u672c\u3002\n\n`@babel/preset-env` \u540c\u6b65\u63d0\u5347\u5230 `^7.27.0`\uff0c\u4f7f\u9884\u8bbe\u4e0e Babel \u6838\u5fc3\u4fdd\u6301\u540c\u4e00\u4ee3\u7248\u672c\uff0c\u964d\u4f4e\u6838\u5fc3\u548c\u9884\u8bbe\u4e4b\u95f4 API\u3001\u63d2\u4ef6\u96c6\u5408\u6216\u4f9d\u8d56\u7ea6\u675f\u4e0d\u4e00\u81f4\u7684\u6982\u7387\u3002\n\n\u9700\u8981\u6ce8\u610f\uff0c\u5206\u6790\u5305\u4e2d\u6ca1\u6709\u6700\u7ec8\u5b89\u88c5\u540e\u7684\u4f9d\u8d56\u6811\u6216\u9501\u6587\u4ef6\u5dee\u5f02\uff0c\u56e0\u6b64\u53ea\u80fd\u786e\u8ba4\u6e05\u5355\u4e2d\u7684\u7248\u672c\u8303\u56f4\u5df2\u66f4\u65b0\uff0c\u4e0d\u80fd\u4ec5\u51ed\u5f53\u524d\u5dee\u5f02\u786e\u8ba4\u5b9e\u9645\u5b89\u88c5\u7248\u672c\u6216\u5b89\u5168\u544a\u8b66\u5df2\u7ecf\u6d88\u5931\u3002\n\n### Babel \u7f16\u8bd1\u94fe\u517c\u5bb9\u6027\n\n`@babel/preset-typescript` \u4ece `^7.18.6` \u5347\u81f3 `^7.23.3`\uff0c\u4f7f TypeScript \u8bed\u6cd5\u8f6c\u6362\u7ec4\u4ef6\u4e0e\u8f83\u65b0\u7684 Babel \u6838\u5fc3\u66f4\u63a5\u8fd1\u3002\u8be5\u5347\u7ea7\u53ef\u80fd\u5e26\u5165 7.19 \u81f3 7.23 \u671f\u95f4\u5bf9 TypeScript \u65b0\u8bed\u6cd5\u3001\u7c7b\u7279\u6027\u3001\u6a21\u5757\u5904\u7406\u6216\u914d\u7f6e\u6821\u9a8c\u7684\u53d8\u5316\u3002\n\n\u672c\u6b21\u6ca1\u6709\u4fee\u6539 Babel \u914d\u7f6e\u6216\u4e1a\u52a1\u6e90\u7801\uff0c\u56e0\u6b64\u5de5\u4f5c\u673a\u5236\u4ecd\u662f\u6cbf\u7528\u73b0\u6709\u7f16\u8bd1\u914d\u7f6e\uff0c\u4ec5\u66ff\u6362\u6267\u884c\u8fd9\u4e9b\u914d\u7f6e\u7684\u5de5\u5177\u7248\u672c\u3002\u662f\u5426\u4ea7\u751f\u8f93\u51fa\u5dee\u5f02\u53d6\u51b3\u4e8e\u9879\u76ee\u73b0\u6709\u7684 Babel \u914d\u7f6e\u3001\u76ee\u6807\u73af\u5883\u548c\u6e90\u7801\u8bed\u6cd5\uff1b\u8fd9\u4e9b\u5185\u5bb9\u672a\u5305\u542b\u5728\u5206\u6790\u5305\u4e2d\uff0c\u4e0d\u80fd\u8fdb\u4e00\u6b65\u65ad\u8a00\u3002\n\n### Jest \u8f6c\u8bd1\u96c6\u6210\n\n`babel-jest` \u4ece `^29.2.2` \u5347\u81f3 `^29.7.0`\u3002\u5b83\u4e0e Jest \u8fd0\u884c\u65f6\u96c6\u6210\uff0c\u5728\u6d4b\u8bd5\u52a0\u8f7d JavaScript \u6216 TypeScript \u6587\u4ef6\u65f6\u8c03\u7528 Babel\u3002\u5347\u7ea7\u4fdd\u6301\u5728 Jest 29 \u4e3b\u7248\u672c\u5185\uff0c\u4e3b\u8981\u76ee\u7684\u662f\u8ba9\u6d4b\u8bd5\u8f6c\u8bd1\u5c42\u4e0e\u66f4\u65b0\u540e\u7684 Babel \u4f9d\u8d56\u517c\u5bb9\uff0c\u540c\u65f6\u5438\u6536 29.x \u540e\u7eed\u4fee\u590d\u3002\n\n\u8fd9\u9879\u6539\u52a8\u4e0d\u6539\u53d8\u6d4b\u8bd5\u811a\u672c\u672c\u8eab\uff0c\u4f46\u53ef\u80fd\u6539\u53d8\u6d4b\u8bd5\u6587\u4ef6\u7684\u8f6c\u6362\u3001\u7f13\u5b58\u952e\u6216 source map \u884c\u4e3a\u3002\u5206\u6790\u5305\u6ca1\u6709\u6d4b\u8bd5\u6267\u884c\u7ed3\u679c\uff0c\u65e0\u6cd5\u786e\u8ba4\u73b0\u6709\u6d4b\u8bd5\u5728\u65b0\u7ec4\u5408\u4e0b\u7684\u5b9e\u9645\u8868\u73b0\u3002\n\n### \u6587\u6863\u4e0e\u63d0\u4ea4\u6f14\u8fdb\n\nPR \u63cf\u8ff0\u63d0\u5230\u66fe\u6dfb\u52a0 `SECURITY_UPDATE.md`\uff0c\u63d0\u4ea4\u5386\u53f2\u968f\u540e\u663e\u793a\u8be5\u6587\u4ef6\u6309\u8bc4\u5ba1\u610f\u89c1\u88ab\u5220\u9664\u3002\u6700\u7ec8 `changedFiles` \u548c\u5dee\u5f02\u4e2d\u53ea\u6709 `package.json`\uff0c\u56e0\u6b64\u8be5\u6587\u6863\u4e0d\u5c5e\u4e8e\u6700\u7ec8 PR \u5185\u5bb9\uff0c\u672c\u8bf4\u660e\u4e0d\u5bf9\u5176\u6b63\u6587\u4f5c\u5206\u6790\u3002\n\n## \u5f71\u54cd\u5206\u6790\n\n### \u9884\u671f\u6536\u76ca\n\n- \u4fee\u6b63 Babel \u4f20\u9012\u4f9d\u8d56\u7684\u7248\u672c\u7ea6\u675f\uff0c\u4e3a\u6d88\u9664 CVE-2025-27789 \u544a\u8b66\u63d0\u4f9b\u4f9d\u8d56\u6e05\u5355\u5c42\u9762\u7684\u57fa\u7840\u3002\n- \u5bf9\u9f50 `@babel/core`\u3001`@babel/preset-env` \u548c `babel-jest`\uff0c\u907f\u514d\u53ea\u5347\u7ea7\u5355\u4e2a\u5305\u5bfc\u81f4\u5de5\u5177\u94fe\u7248\u672c\u7ec4\u5408\u4e0d\u534f\u8c03\u3002\n- \u53d8\u66f4\u8303\u56f4\u4ec5\u9650 AzNB.Lobby \u7684\u5f00\u53d1\u4f9d\u8d56\u58f0\u660e\uff0c\u6ca1\u6709\u770b\u5230\u751f\u4ea7\u4ee3\u7801\u3001\u516c\u5f00 API\u3001\u6570\u636e\u6a21\u578b\u6216\u90e8\u7f72\u914d\u7f6e\u53d8\u5316\u3002\n\n### \u5f71\u54cd\u8303\u56f4\n\n- **\u5f00\u53d1\u4e0e CI \u6784\u5efa\uff1a** \u5b89\u88c5\u4f9d\u8d56\u548c\u6267\u884c Babel \u7f16\u8bd1\u65f6\u4f1a\u4f7f\u7528\u65b0\u7248\u672c\u5de5\u5177\u94fe\u3002\n- **\u6d4b\u8bd5\uff1a** Jest \u901a\u8fc7 `babel-jest` \u8f6c\u8bd1\u6d4b\u8bd5\u53ca\u88ab\u6d4b\u6e90\u7801\u7684\u884c\u4e3a\u53ef\u80fd\u53d1\u751f\u7ec6\u5fae\u53d8\u5316\u3002\n- **\u8fd0\u884c\u65f6\uff1a** \u8fd9\u4e9b\u4f9d\u8d56\u4f4d\u4e8e `devDependencies`\uff1b\u5305\u5185\u672a\u5c55\u793a\u5c06\u5176\u6253\u5165\u751f\u4ea7\u5236\u54c1\u7684\u8bc1\u636e\uff0c\u56e0\u6b64\u65e0\u6cd5\u786e\u8ba4\u751f\u4ea7\u5236\u54c1\u662f\u5426\u5b8c\u5168\u4e0d\u53d7\u5f71\u54cd\u3002\n- **\u4f9d\u8d56\u53ef\u590d\u73b0\u6027\uff1a** \u6700\u7ec8\u5dee\u5f02\u6ca1\u6709\u9501\u6587\u4ef6\uff0c\u5f53\u524d PR \u672c\u8eab\u672a\u56fa\u5b9a\u65b0\u7684\u5b8c\u6574\u4f20\u9012\u4f9d\u8d56\u6811\u3002\n\n## \u98ce\u9669\u4e0e\u517c\u5bb9\u6027\u5173\u6ce8\n\n1. **\u9501\u6587\u4ef6\u672a\u540c\u6b65\u662f\u6700\u5177\u4f53\u7684\u4ea4\u4ed8\u98ce\u9669\u3002** PR \u63cf\u8ff0\u6307\u51fa\u53d7\u5f71\u54cd\u7248\u672c\u66fe\u51fa\u73b0\u5728 `package-lock.json`\uff0c\u4f46\u6700\u7ec8\u53d8\u66f4\u5217\u8868\u6ca1\u6709\u8be5\u6587\u4ef6\u3002\u82e5 CI \u6216\u53d1\u5e03\u6d41\u7a0b\u4f7f\u7528 `npm ci`\uff0c\u5b83\u901a\u5e38\u8981\u6c42 `package.json` \u4e0e\u9501\u6587\u4ef6\u4e00\u81f4\uff0c\u53ef\u80fd\u76f4\u63a5\u5931\u8d25\uff1b\u5373\u4f7f\u6d41\u7a0b\u5141\u8bb8\u5b89\u88c5\uff0c\u4e5f\u53ef\u80fd\u7ee7\u7eed\u4f7f\u7528\u65e7\u9501\u5b9a\u7ed3\u679c\u6216\u5728\u4e0d\u540c\u65f6\u95f4\u89e3\u6790\u51fa\u4e0d\u540c\u4f9d\u8d56\u6811\u3002\n2. **Babel \u8de8\u591a\u4e2a\u6b21\u7248\u672c\u5347\u7ea7\u53ef\u80fd\u6539\u53d8\u7f16\u8bd1\u8f93\u51fa\u3002** `@babel/core` \u548c `@babel/preset-env` \u4ece 7.19 \u63d0\u5347\u5230 7.27\uff0c\u53ef\u80fd\u6d89\u53ca\u63d2\u4ef6\u9ed8\u8ba4\u884c\u4e3a\u3001\u76ee\u6807\u73af\u5883\u6570\u636e\u548c\u8bed\u6cd5\u8f6c\u6362\u4fee\u590d\u3002\u65e7\u6d4f\u89c8\u5668\u6216\u7279\u5b9a Node.js \u7248\u672c\u7684\u8f93\u51fa\u517c\u5bb9\u6027\u9700\u8981\u901a\u8fc7\u5b9e\u9645\u6784\u5efa\u4ea7\u7269\u786e\u8ba4\u3002\n3. **TypeScript \u8f6c\u8bd1\u8bed\u4e49\u53ef\u80fd\u6709\u5dee\u5f02\u3002** `@babel/preset-typescript` \u7684\u5347\u7ea7\u53ef\u80fd\u5f71\u54cd\u8f83\u65b0 TypeScript \u8bed\u6cd5\u3001\u7c7b\u5b57\u6bb5\u3001\u547d\u540d\u7a7a\u95f4\u6216\u4ec5\u7c7b\u578b\u5bfc\u5165\u7684\u5904\u7406\uff1b\u98ce\u9669\u53d6\u51b3\u4e8e\u9879\u76ee\u6e90\u7801\u548c Babel \u914d\u7f6e\uff0c\u5305\u5185\u672a\u63d0\u4f9b\u8fd9\u4e9b\u5185\u5bb9\u3002\n4. **Jest \u8f6c\u6362\u4e0e\u7f13\u5b58\u517c\u5bb9\u6027\u3002** \u5c3d\u7ba1 `babel-jest` \u4fdd\u6301\u5728 29.x\uff0c\u7248\u672c\u53d8\u5316\u4ecd\u53ef\u80fd\u5f71\u54cd\u8f6c\u6362\u7f13\u5b58\u3001source map \u548c Babel \u914d\u7f6e\u52a0\u8f7d\u3002\u9700\u8981\u5173\u6ce8\u5feb\u7167\u3001\u8986\u76d6\u7387\u5b9a\u4f4d\u53ca\u4f9d\u8d56\u4e8e\u8f6c\u6362\u7ec6\u8282\u7684\u6d4b\u8bd5\u3002\n5. **Caret \u8303\u56f4\u5141\u8bb8\u540e\u7eed\u6f02\u79fb\u3002** \u65b0\u7248\u672c\u7ee7\u7eed\u4f7f\u7528 `^`\uff0c\u672a\u6765\u91cd\u65b0\u751f\u6210\u9501\u6587\u4ef6\u65f6\u53ef\u89e3\u6790\u5230\u66f4\u9ad8\u7684\u517c\u5bb9\u6b21\u7248\u672c\u3002\u82e5\u6ca1\u6709\u63d0\u4ea4\u5e76\u5ba1\u6838\u9501\u6587\u4ef6\uff0c\u5b9e\u9645\u5b89\u88c5\u5185\u5bb9\u4e0d\u5b8c\u5168\u7531\u672c\u6b21\u56db\u4e2a\u7248\u672c\u53f7\u51b3\u5b9a\u3002\n6. **\u5b89\u5168\u4fee\u590d\u5c1a\u7f3a\u95ed\u73af\u8bc1\u636e\u3002** \u6e05\u5355\u5347\u7ea7\u610f\u56fe\u5408\u7406\uff0c\u4f46\u5206\u6790\u5305\u6ca1\u6709\u65b0\u7684 `package-lock.json`\u3001`npm ls @babel/helpers` \u8f93\u51fa\u6216\u5b89\u5168\u626b\u63cf\u7ed3\u679c\uff0c\u4e0d\u80fd\u786e\u8ba4\u6700\u7ec8\u89e3\u6790\u7248\u672c\u53ca CVE \u544a\u8b66\u72b6\u6001\u3002\n\n## \u6d4b\u8bd5\u4e0e\u9a8c\u8bc1\n\n\u5206\u6790\u5305\u6ca1\u6709\u5305\u542b\u65b0\u589e\u6216\u4fee\u6539\u7684\u6d4b\u8bd5\u6587\u4ef6\uff0c\u4e5f\u6ca1\u6709\u63d0\u4f9b\u6784\u5efa\u3001\u5355\u5143\u6d4b\u8bd5\u3001\u96c6\u6210\u6d4b\u8bd5\u6216\u5b89\u5168\u626b\u63cf\u7684\u6267\u884c\u7ed3\u679c\u3002PR \u63cf\u8ff0\u5c06\u4ee5\u4e0b\u4e8b\u9879\u5217\u4e3a\u5408\u5e76\u540e\u7684\u540e\u7eed\u6b65\u9aa4\uff0c\u800c\u975e\u5f53\u524d\u5305\u4e2d\u5df2\u7ecf\u5b8c\u6210\u7684\u9a8c\u8bc1\uff1a\n\n- \u5728\u53d7\u5f71\u54cd\u76ee\u5f55\u6267\u884c\u4f9d\u8d56\u5b89\u88c5\u5e76\u66f4\u65b0\u9501\u6587\u4ef6\u3002\n- \u9a8c\u8bc1\u9879\u76ee\u6784\u5efa\u548c\u6d4b\u8bd5\u901a\u8fc7\u3002\n- \u5728\u7ec4\u4ef6\u6cbb\u7406\u6216\u5176\u4ed6\u5b89\u5168\u626b\u63cf\u5de5\u5177\u4e2d\u786e\u8ba4\u6f0f\u6d1e\u5df2\u89e3\u51b3\u3002\n\n\u56e0\u6b64\uff0c\u672c PR \u5f53\u524d\u53ef\u786e\u8ba4\u7684\u662f\u4f9d\u8d56\u58f0\u660e\u53d1\u751f\u4e86\u53d8\u5316\uff1b\u65e0\u6cd5\u786e\u8ba4\u5b89\u88c5\u3001\u7f16\u8bd1\u3001\u6d4b\u8bd5\u548c\u5b89\u5168\u626b\u63cf\u7684\u6700\u7ec8\u7ed3\u679c\u3002\n\n## \u5dee\u5f02\u8986\u76d6\u4e0e\u5206\u6790\u8fb9\u754c\n\n- \u5206\u6790\u5305\u58f0\u660e\u5171\u6709 **1 \u4e2a\u6700\u7ec8\u53d8\u66f4\u6587\u4ef6**\uff0c\u4e14\u63d0\u4f9b\u4e86\u8be5\u6587\u4ef6\u7684\u5b8c\u6574\u5dee\u5f02\uff1b\u5355\u6587\u4ef6 `truncated` \u4e3a `false`\uff0c\u6574\u4f53 `diffTruncated` \u4e5f\u4e3a `false`\u3002\n- \u5dee\u5f02\u603b\u91cf\u4e3a **1006 \u5b57\u8282**\uff0c\u672a\u8fbe\u5230\u5305\u4e2d\u8bb0\u5f55\u7684\u6574\u4f53\u6216\u5355\u6587\u4ef6\u622a\u65ad\u4e0a\u9650\uff0c\u56e0\u6b64\u4e0d\u5b58\u5728\u5df2\u6807\u8bb0\u7684\u622a\u65ad\u7247\u6bb5\u3002\n- \u672c\u8bf4\u660e\u8986\u76d6\u4e86\u5305\u5185\u63d0\u4f9b\u7684\u5168\u90e8\u6700\u7ec8\u4ee3\u7801\u5dee\u5f02\uff0c\u4f46\u5206\u6790\u5305\u4e0d\u5305\u542b\u4ed3\u5e93\u5176\u4ed6\u6587\u4ef6\u5185\u5bb9\uff0c\u65e0\u6cd5\u68c0\u67e5 Babel/Jest \u914d\u7f6e\u3001\u6e90\u7801\u8bed\u6cd5\u4f7f\u7528\u3001CI \u547d\u4ee4\u6216 Node.js/npm \u7248\u672c\u517c\u5bb9\u6027\u3002\n- PR \u63cf\u8ff0\u63d0\u5230 `package-lock.json` \u4e2d\u7684\u6f0f\u6d1e\u4f9d\u8d56\uff0c\u4f46\u8be5\u9501\u6587\u4ef6\u4e0d\u5728\u6700\u7ec8\u53d8\u66f4\u6216\u5dee\u5f02\u4e2d\uff1b\u4e0d\u80fd\u63a8\u65ad\u5176\u5f53\u524d\u5185\u5bb9\uff0c\u4e5f\u4e0d\u80fd\u58f0\u79f0\u5df2\u5206\u6790\u6216\u66f4\u65b0\u3002\n- \u63d0\u4ea4\u5386\u53f2\u8868\u660e `SECURITY_UPDATE.md` \u66fe\u6dfb\u52a0\u540e\u5220\u9664\uff0c\u4f46\u5305\u5185\u6ca1\u6709\u8be5\u6587\u4ef6\u5185\u5bb9\uff1b\u9664\u786e\u8ba4\u5b83\u4e0d\u5728\u6700\u7ec8\u53d8\u66f4\u4e2d\u5916\uff0c\u4e0d\u5bf9\u5176\u5185\u5bb9\u4f5c\u4efb\u4f55\u5224\u65ad\u3002\n", "creation_timestamp": "2026-09-01T20:22:11.563649Z"}, {"uuid": "521ae6ff-92ae-4dec-b352-b5a8976b3dd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27789", "type": "seen", "source": "https://gist.github.com/djlan/1a2315d247f96c9ac406eb3048e294c5", "content": "# \u4fee\u590d `@babel/runtime` 7.24.0 \u4e2d\u7684 CVE-2025-27789 \u6f0f\u6d1e\n\n> **\u4e00\u53e5\u8bdd\u6458\u8981\uff1a** \u6b64 PR \u5728 7 \u4e2a\u72ec\u7acb\u7684 npm \u5305\u6e05\u5355\u4e2d\u52a0\u5165\u6839\u7ea7 `overrides`\uff0c\u8981\u6c42\u4f20\u9012\u4f9d\u8d56\u4e2d\u7684 `@babel/runtime` \u89e3\u6790\u4e3a `>=7.24.1`\uff0c\u4ee5\u89c4\u907f 7.24.0 \u6240\u6d89\u53ca\u7684\u4e2d\u7b49\u7ea7\u522b CVE-2025-27789\u3002\n\n| \u9879\u76ee | \u4fe1\u606f |\n|---|---|\n| PR | [AzureNotebooks PR 648523](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/648523) |\n| \u4f5c\u8005 | GitHub Copilot |\n| \u72b6\u6001 | Active\uff0c\u975e\u8349\u7a3f\uff1b\u6570\u636e\u5305\u4e2d\u7684\u5408\u5e76\u72b6\u6001\u4e3a `succeeded` |\n| \u5206\u652f | `copilot/swe-wi2417041-81c63` \u2192 `main` |\n| \u521b\u5efa\u65f6\u95f4 | 2025-07-02 16:59:09 |\n| \u53d8\u66f4\u7edf\u8ba1 | 7 \u4e2a\u6587\u4ef6\uff0c\u65b0\u589e 21 \u884c\u3001\u5220\u9664 2 \u884c\uff1b1 \u4e2a\u63d0\u4ea4\uff0c2 \u6b21\u8fed\u4ee3 |\n\n## \u76ee\u5f55\n\n- [\u53d8\u66f4\u6982\u89c8](#\u53d8\u66f4\u6982\u89c8)\n- [\u6309\u529f\u80fd\u6a21\u5757\u8bf4\u660e](#\u6309\u529f\u80fd\u6a21\u5757\u8bf4\u660e)\n  - [\u901a\u7528\u793a\u4f8b\u6269\u5c55](#1-\u901a\u7528\u793a\u4f8b\u6269\u5c55)\n  - [Terminal \u670d\u52a1\u7aef\u6269\u5c55](#2-terminal-\u670d\u52a1\u7aef\u6269\u5c55)\n  - [AzNB Lobby \u670d\u52a1](#3-aznb-lobby-\u670d\u52a1)\n- [\u5de5\u4f5c\u539f\u7406](#\u5de5\u4f5c\u539f\u7406)\n- [\u5f71\u54cd\u5206\u6790](#\u5f71\u54cd\u5206\u6790)\n- [\u98ce\u9669\u4e0e\u517c\u5bb9\u6027\u5173\u6ce8](#\u98ce\u9669\u4e0e\u517c\u5bb9\u6027\u5173\u6ce8)\n- [\u6d4b\u8bd5\u4e0e\u9a8c\u8bc1\u60c5\u51b5](#\u6d4b\u8bd5\u4e0e\u9a8c\u8bc1\u60c5\u51b5)\n- [\u5dee\u5f02\u8986\u76d6\u4e0e\u5206\u6790\u8fb9\u754c](#\u5dee\u5f02\u8986\u76d6\u4e0e\u5206\u6790\u8fb9\u754c)\n\n## \u53d8\u66f4\u6982\u89c8\n\n\u8be5 PR \u7684\u76ee\u6807\u4e0d\u662f\u4fee\u6539\u4e1a\u52a1\u903b\u8f91\uff0c\u800c\u662f\u7edf\u4e00\u7ea6\u675f npm \u7684\u4f9d\u8d56\u89e3\u6790\u7ed3\u679c\u3002CVE-2025-27789 \u51fa\u73b0\u5728 `@babel/runtime` 7.24.0\uff1b\u5373\u4f7f\u5404\u9879\u76ee\u6ca1\u6709\u76f4\u63a5\u58f0\u660e\u8be5\u7248\u672c\uff0c\u5b83\u4ecd\u53ef\u80fd\u7531\u5176\u4ed6\u4f9d\u8d56\u95f4\u63a5\u5f15\u5165\u3002\u56e0\u6b64\uff0cPR \u5728\u6bcf\u4e2a\u76f8\u5173 `package.json` \u7684\u6839\u7ea7\u52a0\u5165\uff1a\n\n`\"@babel/runtime\": \">=7.24.1\"`\n\n\u8fd9\u9879\u7ea6\u675f\u4f7f npm \u5728\u5b89\u88c5\u8fd9\u4e9b\u5305\u7684\u4f9d\u8d56\u6811\u65f6\uff0c\u4e0d\u518d\u9009\u62e9 7.24.0\uff0c\u800c\u662f\u9009\u62e9\u6ee1\u8db3\u4e0b\u9650\u8981\u6c42\u7684\u7248\u672c\u3002\u73b0\u6709\u76f4\u63a5\u4f9d\u8d56\u3001\u811a\u672c\u548c\u8fd0\u884c\u65f6\u4ee3\u7801\u5747\u672a\u5728\u6570\u636e\u5305\u6240\u793a\u5dee\u5f02\u4e2d\u6539\u53d8\u3002\n\n## \u6309\u529f\u80fd\u6a21\u5757\u8bf4\u660e\n\n### 1. \u901a\u7528\u793a\u4f8b\u6269\u5c55\n\n\u4ee5\u4e0b 5 \u4e2a\u901a\u7528\u6269\u5c55\u5206\u522b\u62e5\u6709\u81ea\u5df1\u7684\u5305\u6e05\u5355\uff0c\u56e0\u6b64\u9700\u8981\u9010\u5305\u8bbe\u7f6e\u8986\u76d6\u89c4\u5219\uff1a\n\n| \u6587\u4ef6 | \u53d8\u66f4\u53ca\u4f5c\u7528 |\n|---|---|\n| [NotebookGrader/package.json](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/648523?path=/sample/extensions/common-extensions/NotebookGrader/package.json&_a=files) | \u65b0\u589e\u6839\u7ea7 `overrides`\uff0c\u7ea6\u675f\u8bc4\u5206\u6269\u5c55\u4f9d\u8d56\u6811\u4e2d\u7684 `@babel/runtime`\u3002 |\n| [PowerQueryCellTest/package.json](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/648523?path=/sample/extensions/common-extensions/PowerQueryCellTest/package.json&_a=files) | \u65b0\u589e\u76f8\u540c\u8986\u76d6\u89c4\u5219\uff0c\u907f\u514d\u6d4b\u8bd5\u6269\u5c55\u7684\u4f20\u9012\u4f9d\u8d56\u89e3\u6790\u5230\u6f0f\u6d1e\u7248\u672c\u3002 |\n| [ReactViewTest/package.json](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/648523?path=/sample/extensions/common-extensions/ReactViewTest/package.json&_a=files) | \u5728\u5df2\u6709\u7684 `postcss` \u8986\u76d6\u9879\u65c1\u8ffd\u52a0 `@babel/runtime` \u89c4\u5219\uff1b\u539f\u6709 `postcss` \u56fa\u5b9a\u7248\u672c\u4fdd\u6301\u4e0d\u53d8\u3002 |\n| [ReverseSelectionStateful/package.json](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/648523?path=/sample/extensions/common-extensions/ReverseSelectionStateful/package.json&_a=files) | \u65b0\u589e\u8986\u76d6\u89c4\u5219\uff0c\u7ea6\u675f\u8be5\u6709\u72b6\u6001\u9009\u62e9\u793a\u4f8b\u7684\u4f9d\u8d56\u6811\u3002 |\n| [SystemMonitor/package.json](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/648523?path=/sample/extensions/common-extensions/SystemMonitor/package.json&_a=files) | \u65b0\u589e\u8986\u76d6\u89c4\u5219\uff0c\u7ea6\u675f\u7cfb\u7edf\u76d1\u63a7\u6269\u5c55\u7684\u4f9d\u8d56\u6811\u3002 |\n\n\u8fd9\u4e9b\u4fee\u6539\u91c7\u7528\u76f8\u540c\u7b56\u7565\uff0c\u8bf4\u660e\u76f8\u5173\u6269\u5c55\u53ef\u80fd\u4f5c\u4e3a\u72ec\u7acb npm \u5b89\u88c5\u5355\u5143\u5904\u7406\uff1b\u4ec5\u5728\u67d0\u4e2a\u4e0a\u5c42\u76ee\u5f55\u8bbe\u7f6e\u89c4\u5219\u672a\u5fc5\u4f1a\u8986\u76d6\u6240\u6709\u72ec\u7acb\u5b89\u88c5\u573a\u666f\uff0c\u56e0\u6b64\u9010\u4e2a\u5305\u58f0\u660e\u53ef\u4f7f\u7ea6\u675f\u5728\u5404\u5305\u5b89\u88c5\u5165\u53e3\u751f\u6548\u3002\n\n### 2. Terminal \u670d\u52a1\u7aef\u6269\u5c55\n\n[Terminal/package.json](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/648523?path=/sample/extensions/server-extensions/Terminal/package.json&_a=files) \u65b0\u589e\u540c\u4e00\u6839\u7ea7\u8986\u76d6\u89c4\u5219\u3002Terminal \u7684\u73b0\u6709\u4f9d\u8d56\uff08\u5305\u62ec React\u3001xterm \u548c xterm-addon-fit\uff09\u6ca1\u6709\u5728\u6240\u63d0\u4f9b\u5dee\u5f02\u4e2d\u8c03\u6574\uff1b\u53d8\u66f4\u53ea\u5f71\u54cd\u5b89\u88c5\u65f6\u5bf9\u5176\u5b8c\u6574\u4f20\u9012\u4f9d\u8d56\u6811\u7684\u89e3\u6790\u3002\n\n### 3. AzNB Lobby \u670d\u52a1\n\n[AzNB.Lobby/package.json](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/648523?path=/src/service/aznb/AzNB.Collab/AzNB.Lobby/package.json&_a=files) \u5728\u73b0\u6709\u914d\u7f6e\u6570\u7ec4\u4e4b\u540e\u65b0\u589e\u6839\u7ea7 `overrides`\u3002\u8be5\u4fee\u6539\u4fdd\u6301\u539f\u6570\u7ec4\u5185\u5bb9\u4e0d\u53d8\uff0c\u4ec5\u8c03\u6574 JSON \u7ed3\u6784\u4ee5\u5bb9\u7eb3\u65b0\u7684\u9876\u5c42\u5b57\u6bb5\uff0c\u5e76\u628a Lobby \u670d\u52a1\u7684\u4f20\u9012\u4f9d\u8d56\u7eb3\u5165\u540c\u6837\u7684\u5b89\u5168\u7248\u672c\u4e0b\u9650\u3002\n\n## \u5de5\u4f5c\u539f\u7406\n\n1. npm \u8bfb\u53d6\u6bcf\u4e2a\u5305\u6839\u76ee\u5f55\u7684 `package.json`\u3002\n2. `overrides` \u6307\u793a npm \u5728\u6784\u5efa\u4f9d\u8d56\u6811\u65f6\u66ff\u6362\u6216\u7ea6\u675f\u5339\u914d\u7684\u4f20\u9012\u4f9d\u8d56\u3002\n3. \u5bf9 `@babel/runtime` \u4f7f\u7528 `>=7.24.1` \u540e\uff0c7.24.0 \u4e0d\u6ee1\u8db3\u7ea6\u675f\uff0c\u4e0d\u80fd\u6210\u4e3a\u6700\u7ec8\u89e3\u6790\u7248\u672c\u3002\n4. \u4f9d\u8d56\u65b9\u4ecd\u4ee5\u539f\u65b9\u5f0f\u5f15\u7528 Babel runtime\uff1b\u6539\u53d8\u7684\u662f\u5b89\u88c5\u4ea7\u7269\u4e2d\u7684\u7248\u672c\u9009\u62e9\uff0c\u800c\u4e0d\u662f\u5e94\u7528\u4ee3\u7801\u7684\u8c03\u7528\u8def\u5f84\u3002\n\n\u8fd9\u79cd\u65b9\u5f0f\u9002\u5408\u5904\u7406\u4f20\u9012\u4f9d\u8d56\u6f0f\u6d1e\uff0c\u56e0\u4e3a\u65e0\u9700\u7b49\u5f85\u6bcf\u4e00\u4e2a\u4e0a\u6e38\u5305\u66f4\u65b0\u81ea\u5df1\u7684\u4f9d\u8d56\u58f0\u660e\u3002\u4e0d\u8fc7\uff0c\u771f\u6b63\u5b89\u88c5\u5230\u7684\u5177\u4f53\u7248\u672c\u4ecd\u7531 npm\u3001\u6ce8\u518c\u8868\u53ef\u7528\u7248\u672c\u3001\u5176\u4ed6\u7248\u672c\u7ea6\u675f\u4ee5\u53ca\u9501\u6587\u4ef6\u5171\u540c\u51b3\u5b9a\u3002\n\n## \u5f71\u54cd\u5206\u6790\n\n**\u5b89\u5168\u5f71\u54cd\uff1a** \u9884\u671f\u6d88\u9664\u8fd9 7 \u4e2a npm \u5b89\u88c5\u5165\u53e3\u89e3\u6790\u5230 `@babel/runtime` 7.24.0 \u7684\u60c5\u51b5\uff0c\u4ece\u4f9d\u8d56\u5c42\u9762\u7f13\u89e3 CVE-2025-27789\u3002\n\n**\u6784\u5efa\u4e0e\u5b89\u88c5\u5f71\u54cd\uff1a** \u540e\u7eed\u6267\u884c npm \u5b89\u88c5\u65f6\uff0c\u4f9d\u8d56\u6811\u53ef\u80fd\u53d1\u751f\u53d8\u5316\uff0c\u5e76\u4e0b\u8f7d 7.24.1 \u6216\u66f4\u9ad8\u7248\u672c\u3002\u82e5\u7f13\u5b58\u6216\u65e2\u6709 `node_modules` \u672a\u91cd\u65b0\u5b89\u88c5\uff0c\u8986\u76d6\u89c4\u5219\u4e0d\u4f1a\u81ea\u52a8\u6539\u5199\u5df2\u7ecf\u843d\u76d8\u7684\u65e7\u4f9d\u8d56\u3002\n\n**\u8fd0\u884c\u65f6\u5f71\u54cd\uff1a** \u6570\u636e\u5305\u4e2d\u7684\u5dee\u5f02\u6ca1\u6709\u4fee\u6539\u6e90\u4ee3\u7801\u3001\u8c03\u7528\u63a5\u53e3\u6216\u914d\u7f6e\u884c\u4e3a\uff0c\u56e0\u6b64\u6ca1\u6709\u76f4\u63a5\u7684\u4e1a\u52a1\u903b\u8f91\u53d8\u5316\u3002PR \u63cf\u8ff0\u79f0\u201c\u4e0d\u5f71\u54cd\u8fd0\u884c\u65f6\u884c\u4e3a\u201d\uff0c\u4f46\u6570\u636e\u5305\u672a\u5305\u542b\u6784\u5efa\u4ea7\u7269\u6216\u8fd0\u884c\u6d4b\u8bd5\u7ed3\u679c\u6765\u72ec\u7acb\u8bc1\u660e\u8fd9\u4e00\u70b9\u3002\n\n**\u7ef4\u62a4\u5f71\u54cd\uff1a** \u89c4\u5219\u88ab\u590d\u5236\u5230 7 \u4e2a\u5305\u4e2d\u3002\u8fd9\u6837\u53ef\u8986\u76d6\u72ec\u7acb\u5b89\u88c5\u5165\u53e3\uff0c\u4f46\u672a\u6765\u8c03\u6574\u5b89\u5168\u4e0b\u9650\u65f6\u9700\u8981\u540c\u6b65\u7ef4\u62a4\u6240\u6709\u4f4d\u7f6e\u3002\n\n## \u98ce\u9669\u4e0e\u517c\u5bb9\u6027\u5173\u6ce8\n\n| \u98ce\u9669/\u5173\u6ce8\u70b9 | \u5177\u4f53\u8bf4\u660e |\n|---|---|\n| npm \u7248\u672c\u517c\u5bb9\u6027 | `overrides` \u4f9d\u8d56 npm \u5ba2\u6237\u7aef\u652f\u6301\u3002\u4f7f\u7528\u4e0d\u652f\u6301\u8be5\u5b57\u6bb5\u7684\u65e7\u7248 npm \u65f6\uff0c\u89c4\u5219\u53ef\u80fd\u65e0\u6cd5\u751f\u6548\u6216\u5b89\u88c5\u884c\u4e3a\u53ef\u80fd\u4e0d\u7b26\u5408\u9884\u671f\uff1b\u6570\u636e\u5305\u672a\u63d0\u4f9b CI/\u5f00\u53d1\u73af\u5883\u7684 npm \u7248\u672c\u3002 |\n| \u5f00\u653e\u5f0f\u7248\u672c\u4e0a\u9650 | `>=7.24.1` \u6ca1\u6709\u4e0a\u9650\uff0c\u4f1a\u5141\u8bb8\u5c06\u6765\u7684\u66f4\u9ad8\u7248\u672c\u3002\u867d\u7136 `@babel/runtime` \u901a\u5e38\u9075\u5faa\u8bed\u4e49\u5316\u7248\u672c\uff0c\u4f46\u672a\u6765\u5927\u7248\u672c\u4ecd\u53ef\u80fd\u5e26\u6765\u517c\u5bb9\u6027\u53d8\u5316\uff1b\u56fa\u5b9a\u7248\u672c\u6216\u9650\u5b9a\u4e3b\u7248\u672c\u53ef\u964d\u4f4e\u6f02\u79fb\uff0c\u4f46\u4f1a\u589e\u52a0\u7ef4\u62a4\u6210\u672c\u3002 |\n| \u9501\u6587\u4ef6\u672a\u968f PR \u66f4\u65b0 | 7 \u4e2a\u5dee\u5f02\u5747\u4e3a `package.json`\uff0c\u6570\u636e\u5305\u4e2d\u6ca1\u6709\u5bf9\u5e94\u9501\u6587\u4ef6\u53d8\u66f4\u3002\u56e0\u6b64\u65e0\u6cd5\u4ece\u672c\u6b21\u5dee\u5f02\u786e\u8ba4\u6700\u7ec8\u89e3\u6790\u51fa\u7684\u786e\u5207\u7248\u672c\uff0c\u4e5f\u65e0\u6cd5\u786e\u8ba4\u73b0\u6709\u9501\u5b9a\u7ed3\u679c\u662f\u5426\u5df2\u5237\u65b0\u3002 |\n| \u591a\u5305\u8986\u76d6\u9057\u6f0f | PR \u8986\u76d6\u4e86\u6570\u636e\u5305\u5217\u51fa\u7684 7 \u4e2a\u76f8\u5173\u5305\uff0c\u4f46\u6570\u636e\u5305\u6ca1\u6709\u63d0\u4f9b\u4ed3\u5e93\u5168\u91cf\u4f9d\u8d56\u626b\u63cf\u7ed3\u679c\uff0c\u4e0d\u80fd\u636e\u6b64\u65ad\u8a00\u4ed3\u5e93\u4e2d\u4e0d\u5b58\u5728\u5176\u4ed6\u4f1a\u5f15\u5165 7.24.0 \u7684 npm \u5305\u3002 |\n| \u4e0a\u6e38\u4f9d\u8d56\u517c\u5bb9\u6027 | \u5f3a\u5236\u63d0\u5347\u4f20\u9012\u4f9d\u8d56\u53ef\u80fd\u4e0e\u67d0\u4e2a\u4e0a\u6e38\u5305\u7684\u9690\u542b\u5047\u8bbe\u4e0d\u4e00\u81f4\u3002\u9700\u8981\u901a\u8fc7\u5b89\u88c5\u3001\u6784\u5efa\u53ca\u76f8\u5173\u6269\u5c55\u6d4b\u8bd5\u786e\u8ba4\uff0c\u800c\u4e0d\u80fd\u53ea\u4f9d\u8d56 JSON \u8bed\u6cd5\u6b63\u786e\u6027\u3002 |\n| \u73af\u5883\u4e0e\u7f13\u5b58 | \u4f7f\u7528\u65e7 lockfile\u3001\u79bb\u7ebf\u7f13\u5b58\u6216\u672a\u6e05\u7406\u7684 `node_modules` \u65f6\uff0c\u5b89\u5168\u626b\u63cf\u7ed3\u679c\u53ef\u80fd\u4e0d\u4f1a\u7acb\u5373\u53cd\u6620\u65b0\u89c4\u5219\uff0c\u9700\u8981\u786e\u4fdd\u5b9e\u9645\u5b89\u88c5\u6d41\u7a0b\u91cd\u65b0\u89e3\u6790\u4f9d\u8d56\u3002 |\n\n## \u6d4b\u8bd5\u4e0e\u9a8c\u8bc1\u60c5\u51b5\n\nPR \u63cf\u8ff0\u4ec5\u8bf4\u660e\u8be5\u53d8\u66f4\u201c\u53ea\u5f71\u54cd npm install \u65f6\u7684\u5305\u89e3\u6790\u201d\u4e14\u201c\u65e0\u8fd0\u884c\u65f6\u884c\u4e3a\u5f71\u54cd\u201d\u3002\u6570\u636e\u5305\u6ca1\u6709\u63d0\u4f9b\u5b9e\u9645\u6267\u884c\u8fc7\u7684\u547d\u4ee4\u3001CI \u6784\u5efa\u7ed3\u679c\u3001\u5355\u5143\u6d4b\u8bd5\u7ed3\u679c\u3001\u5b89\u88c5\u65e5\u5fd7\u6216\u7ec4\u4ef6\u6cbb\u7406\u590d\u626b\u7ed3\u679c\uff0c\u56e0\u6b64\u4e0d\u80fd\u58f0\u79f0\u8fd9\u4e9b\u9a8c\u8bc1\u5df2\u7ecf\u5b8c\u6210\u3002\n\n\u5efa\u8bae\u81f3\u5c11\u9a8c\u8bc1\uff1a\n\n1. \u5728\u4ed3\u5e93\u89c4\u5b9a\u7684 npm \u7248\u672c\u4e0b\uff0c\u5bf9 7 \u4e2a\u5305\u6267\u884c\u5bf9\u5e94\u7684\u5e72\u51c0\u4f9d\u8d56\u5b89\u88c5\uff0c\u786e\u8ba4 `overrides` \u88ab\u8bc6\u522b\u4e14\u5b89\u88c5\u6210\u529f\u3002\n2. \u4f7f\u7528 `npm ls @babel/runtime` \u6216\u7b49\u6548\u7684\u9501\u6587\u4ef6/\u4f9d\u8d56\u6811\u68c0\u67e5\uff0c\u786e\u8ba4\u4e0d\u5b58\u5728 7.24.0\uff0c\u4e14\u6240\u6709\u89e3\u6790\u7248\u672c\u5747\u6ee1\u8db3 `>=7.24.1`\u3002\n3. \u8fd0\u884c\u8fd9\u4e9b\u6269\u5c55\u548c Lobby \u670d\u52a1\u5df2\u6709\u7684\u6700\u5c0f\u6784\u5efa\u53ca\u6d4b\u8bd5\u96c6\u5408\uff0c\u91cd\u70b9\u6392\u67e5 Babel helper\u3001\u6253\u5305\u548c\u542f\u52a8\u9636\u6bb5\u7684\u517c\u5bb9\u6027\u95ee\u9898\u3002\n4. \u91cd\u65b0\u8fd0\u884c\u89e6\u53d1\u8be5 PR \u7684\u7ec4\u4ef6\u6cbb\u7406\u6216\u6f0f\u6d1e\u626b\u63cf\uff0c\u786e\u8ba4 CVE-2025-27789 \u544a\u8b66\u5173\u95ed\u3002\n\n## \u5dee\u5f02\u8986\u76d6\u4e0e\u5206\u6790\u8fb9\u754c\n\n\u6570\u636e\u5305\u58f0\u660e `diffMethod` \u4e3a `git-local`\uff0c\u603b\u5dee\u5f02\u5927\u5c0f\u4e3a 3,411 \u5b57\u8282\uff1bPR \u7684 7 \u4e2a\u53d8\u66f4\u6587\u4ef6\u5747\u5305\u542b\u5dee\u5f02\u5185\u5bb9\uff0c\u6240\u6709\u6587\u4ef6\u7684 `truncated` \u5747\u4e3a `false`\uff0c\u6574\u4f53 `diffTruncated` \u4e5f\u4e3a `false`\uff0c\u4e14\u6ca1\u6709\u5bfc\u51fa\u9519\u8bef\u6216\u8b66\u544a\u3002\u56e0\u6b64\uff0c\u672c\u8bf4\u660e\u8986\u76d6\u4e86\u6570\u636e\u5305\u4e2d\u63d0\u4f9b\u7684\u5168\u90e8 7 \u4e2a\u6587\u4ef6\u5dee\u5f02\u3002\n\n\u4f46\u201c\u5dee\u5f02\u672a\u622a\u65ad\u201d\u53ea\u8868\u793a\u5bfc\u51fa\u7684 PR \u5dee\u5f02\u5b8c\u6574\uff0c\u4e0d\u4ee3\u8868\u6570\u636e\u5305\u5305\u542b\u4ed3\u5e93\u5176\u4ed6\u6587\u4ef6\u7684\u5b8c\u6574\u5185\u5bb9\u3001\u5b89\u88c5\u540e\u7684\u4f9d\u8d56\u6811\u3001\u9501\u6587\u4ef6\u72b6\u6001\u3001CI \u65e5\u5fd7\u6216\u5b89\u5168\u626b\u63cf\u7ed3\u679c\u3002\u4e0a\u8ff0\u7f3a\u5931\u5185\u5bb9\u672a\u88ab\u5f53\u4f5c\u5df2\u5206\u6790\u6216\u5df2\u9a8c\u8bc1\u7684\u4e8b\u5b9e\u3002\n", "creation_timestamp": "2026-09-01T20:22:11.628623Z"}, {"uuid": "610267a8-d65a-4079-8b27-4488a225f80b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-01)", "content": "", "creation_timestamp": "2026-09-02T10:00:30.379134Z"}, {"uuid": "b82d2c36-ef7a-45e4-82a6-ed11917a3540", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27591", "type": "published-proof-of-concept", "source": "Telegram/zbOkxYY_zAluor3Y7uOLusXS9OsJZvZ7mv8JI_Sd5cs7MNw", "content": "", "creation_timestamp": "2026-09-03T00:00:58.919976Z"}, {"uuid": "bee05fe7-315e-40f0-b968-4e266619a359", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-02)", "content": "", "creation_timestamp": "2026-09-03T10:00:04.567376Z"}, {"uuid": "f493ecf9-b984-402c-8def-f3af83a9e13e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-04)", "content": "", "creation_timestamp": "2026-09-05T10:00:04.791285Z"}, {"uuid": "f20c3c0b-7ba4-4321-8438-c811377607ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27520", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/bentoml_rce_cve_2025_27520.rb", "content": "{\"aliases\": [], \"arch\": \"python, cmd\", \"author\": [\"c2an1\", \"Takahiro Yokoyama\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"A Remote Code Execution (RCE) vulnerability caused by insecure deserialization has been identified in v1.4.2 of BentoML.\\n          It allows any unauthenticated user to execute arbitrary code on the server.\", \"disclosure_date\": \"2025-04-04\", \"fullname\": \"exploit/linux/http/bentoml_rce_cve_2025_27520\", \"is_install_path\": true, \"mod_time\": \"2026-02-09 15:17:23 +0000\", \"name\": \"BentoML RCE\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/bentoml_rce_cve_2025_27520.rb\", \"platform\": \"Linux,Python,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/bentoml_rce_cve_2025_27520\", \"references\": [\"CVE-2025-27520\", \"GHSA-33xw-247w-6hmc\"], \"rport\": 3000, \"session_types\": false, \"targets\": [\"Python payload\", \"Linux Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:24.317540Z"}, {"uuid": "fca6f009-f68d-47a9-a195-c9fcf2932bc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_suretriggers_auth_bypass.rb", "content": "{\"actions\": [{\"description\": \"SureTriggers <= 1.0.82 auth bypass, reset & RCE\", \"name\": \"CVE-2025-27007\"}, {\"description\": \"SureTriggers <= 1.0.78 auth bypass & RCE\", \"name\": \"CVE-2025-3102\"}], \"aliases\": [], \"arch\": \"php, cmd\", \"author\": [\"Michael Mazzolini (mikemyers)\", \"Denver Jackson\", \"Khaled Alenazi (Nxploited)\", \"Valentin Lobstein\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"Exploits two distinct authorization bypasses in SureTriggers/OttoKit plugin:\\n          - CVE-2025-3102: admin creation via St-Authorization Bearer (empty)\\n          - CVE-2025-27007: reset access key via connection endpoint & admin creation with Bearer header\", \"disclosure_date\": \"2025-03-13\", \"fullname\": \"exploit/multi/http/wp_suretriggers_auth_bypass\", \"is_install_path\": true, \"mod_time\": \"2026-06-02 10:32:30 +0000\", \"name\": \"WordPress SureTriggers (aka OttoKit) Combined Auth Bypass (CVE-2025-3102, CVE-2025-27007)\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/wp_suretriggers_auth_bypass.rb\", \"platform\": \"Linux,PHP,Unix,Windows\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"multi/http/wp_suretriggers_auth_bypass\", \"references\": [\"CVE-2025-3102\", \"CVE-2025-27007\", \"EDB-52286\", \"URL-https://github.com/Nxploited/CVE-2025-3102\", \"URL-https://www.wordfence.com/blog/2025/04/100000-wordpress-sites-affected-by-administrative-user-creation-vulnerability-in-suretriggers-wordpress-plugin/\", \"URL-https://patchstack.com/articles/additional-critical-ottokit-formerly-suretriggers-vulnerability-patched?_s_id=cve\", \"URL-https://cloud.projectdiscovery.io/library/CVE-2025-27007\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"PHP In-Memory\", \"Unix In-Memory\", \"Windows In-Memory\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:23.120766Z"}, {"uuid": "eef09222-0d97-439e-822e-7379d2714483", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27218", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/sitecore_xp_cve_2025_27218.rb", "content": "{\"aliases\": [], \"arch\": \"cmd, x86, x64\", \"author\": [\"Dylan Pindur\", \"machang-r7\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a .NET deserialization vulnerability in Sitecore Experience Manager (XM) and Experience\\n          Platform (XP) 10.4 by injecting a malicious Base64-encoded BinaryFormatter payload into an HTTP header.\", \"disclosure_date\": \"2025-01-06\", \"fullname\": \"exploit/windows/http/sitecore_xp_cve_2025_27218\", \"is_install_path\": true, \"mod_time\": \"2026-06-02 10:32:30 +0000\", \"name\": \"Sitecore CVE-2025-27218 BinaryFormatter Deserialization Exploit\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/windows/http/sitecore_xp_cve_2025_27218.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"windows/http/sitecore_xp_cve_2025_27218\", \"references\": [\"CVE-2025-27218\", \"EDB-52344\", \"URL-https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1003535\", \"URL-https://attackerkb.com/topics/Dyo4zUm2tv/cve-2025-27218\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"Windows Command\", \"PowerShell Stager\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:59.513252Z"}, {"uuid": "1172af11-6b3e-4e0d-9c67-2029b340ea5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "seen", "source": "Telegram/xQFR_qt6BA8ddiYwnHLYRjbLf-LtA7Usx0gtunhf8o4pxrA", "content": "", "creation_timestamp": "2026-09-10T11:00:03.416389Z"}, {"uuid": "63e26df0-5c18-4d16-b106-884ce73783a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101876", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2025-27636-RCE\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a AC8999\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-09 23:33:38\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPOC written in python for CVE-2025-27636\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-10T04:00:05.225766Z"}, {"uuid": "17b59d65-39c2-4d72-825a-aea68d04bd46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101875", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2025-27636-RCE-in-Apache-Camel\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a AC8999\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-10 00:00:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2025-27636 PoC written in Python\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-10T04:00:05.282772Z"}, {"uuid": "3e8d32ec-d642-4312-8bcf-28465d093a8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101876", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2025-27636-RCE\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a AC8999\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-09 23:33:38\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPOC written in python for CVE-2025-27636\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-11T00:00:53.265824Z"}, {"uuid": "fddc63f3-56f8-4ca6-8e8a-a1b25a9a91ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "published-proof-of-concept", "source": "Telegram/xQFR_qt6BA8ddiYwnHLYRjbLf-LtA7Usx0gtunhf8o4pxrA", "content": "", "creation_timestamp": "2026-09-11T00:00:41.422561Z"}, {"uuid": "bedb5f9e-7d06-43e6-a73b-c0848d2a5f9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101875", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2025-27636-RCE-in-Apache-Camel\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a AC8999\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-10 00:00:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2025-27636 PoC written in Python\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-11T00:00:53.308609Z"}, {"uuid": "264a9f84-e723-4bce-8451-63ff2fe3cc51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-11)", "content": "", "creation_timestamp": "2026-09-12T10:00:04.703220Z"}, {"uuid": "74229fa8-a58d-41f1-bec8-be4d49e2bd20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27219", "type": "published-proof-of-concept", "source": "https://t.me/hackeronereports/216", "content": "\ud83c\udfaf New Report #3013913: [CVE-2025-27219 Denial of Service in CGI::Cookie.parse](https://hackerone.com/reports/3013913)\n\ud83d\udd3aSeverity: Medium\n\ud83d\udc7d Reporter: lio346\n\ud83d\udcbc Team: Internet Bug Bounty\n\ud83d\udcb5 Bounty: null\n\ud83d\udd50 Submitted: 2025-02-26\n\u23f0 Disclosed: 2025-04-27 14:27:52\n\ud83d\udcdd Summary: A denial-of-service vulnerability was discovered in the CGI::Cookie.parse method of the Ruby cgi gem. The vulnerability was caused by the method taking super-linear time to parse a maliciously crafted cookie string. This could have led to service disruptions. The vulnerability was assigned the CVE identifier CVE-2025-27219.\n  @hackeronereports", "creation_timestamp": "2026-09-14T06:00:04.590734Z"}, {"uuid": "88752d32-b3e2-413f-be5c-6ec2e498b08c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27218", "type": "seen", "source": "https://t.me/hackeronereports/244", "content": "\ud83c\udfaf New Report #3090123: insecure deserilize object leads to RCE On Sitecore (CVE-\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588-27218)\n\ud83d\udd3aSeverity: Critical\n\ud83d\udc7d Reporter: reinhardtthe\n\ud83d\udcbc Team: Mars\n\ud83d\udcb5 Bounty: null\n\ud83d\udd50 Submitted: 2025-04-12\n\u23f0 Disclosed: 2025-05-12 16:04:46\n\ud83d\udcdd Summary: This critical vulnerability involved an insecure deserialization issue in Sitecore implementation, which was assigned CVE-2025-27218. The vulnerability allowed remote code execution through unsanitized user input in the ThumbnailsAccessToken header. The vulnerability was remediated by removing public access to the affected site, which was then protected behind Cloudflare WAF.\n  @hackeronereports", "creation_timestamp": "2026-09-14T06:00:04.871227Z"}, {"uuid": "c4950275-fccd-44de-a16c-07a0b22dfa3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27210", "type": "seen", "source": "https://t.me/hackeronereports/405", "content": "\ud83c\udfaf New Report #3255707: Windows Device Names Still Allow Path Traversal in UNC Paths After CVE-2025-27210 Fix\n\ud83d\udd3aSeverity: High\n\ud83d\udc7d Reporter: oblivionsage\n\u2b50\ufe0f Reputation: 248\n\ud83d\udee0 State: informative\n\ud83d\udcbc Team: Node.js\n\ud83d\udcb5 Bounty: null\n\ud83d\udd50 Submitted: 2025-07-16\n\u23f0 Disclosed: 2025-07-28 18:56:39\n\ud83d\udcdd Summary: null\n\ud83d\udcc2 Report JSON File: 3255707\n  @hackeronereports", "creation_timestamp": "2026-09-14T06:00:05.173512Z"}, {"uuid": "9a7ac58f-ceeb-47a7-89c3-2f327bd25ee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-13)", "content": "", "creation_timestamp": "2026-09-14T10:00:03.205168Z"}, {"uuid": "e6b47f6b-efb5-48c9-861c-8d5d43bf3caa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27218", "type": "seen", "source": "https://t.me/hackeronereports/244", "content": "\ud83c\udfaf New Report #3090123: insecure deserilize object leads to RCE On Sitecore (CVE-\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588-27218)\n\ud83d\udd3aSeverity: Critical\n\ud83d\udc7d Reporter: reinhardtthe\n\ud83d\udcbc Team: Mars\n\ud83d\udcb5 Bounty: null\n\ud83d\udd50 Submitted: 2025-04-12\n\u23f0 Disclosed: 2025-05-12 16:04:46\n\ud83d\udcdd Summary: This critical vulnerability involved an insecure deserialization issue in Sitecore implementation, which was assigned CVE-2025-27218. The vulnerability allowed remote code execution through unsanitized user input in the ThumbnailsAccessToken header. The vulnerability was remediated by removing public access to the affected site, which was then protected behind Cloudflare WAF.\n  @hackeronereports", "creation_timestamp": "2026-09-15T00:00:28.206400Z"}, {"uuid": "19a888f2-ae4d-414d-937a-5c6ff25f91b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27219", "type": "published-proof-of-concept", "source": "https://t.me/hackeronereports/216", "content": "\ud83c\udfaf New Report #3013913: [CVE-2025-27219 Denial of Service in CGI::Cookie.parse](https://hackerone.com/reports/3013913)\n\ud83d\udd3aSeverity: Medium\n\ud83d\udc7d Reporter: lio346\n\ud83d\udcbc Team: Internet Bug Bounty\n\ud83d\udcb5 Bounty: null\n\ud83d\udd50 Submitted: 2025-02-26\n\u23f0 Disclosed: 2025-04-27 14:27:52\n\ud83d\udcdd Summary: A denial-of-service vulnerability was discovered in the CGI::Cookie.parse method of the Ruby cgi gem. The vulnerability was caused by the method taking super-linear time to parse a maliciously crafted cookie string. This could have led to service disruptions. The vulnerability was assigned the CVE identifier CVE-2025-27219.\n  @hackeronereports", "creation_timestamp": "2026-09-15T00:00:27.982065Z"}, {"uuid": "32aa0953-3504-4b85-a3f9-619264061b05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27210", "type": "seen", "source": "https://t.me/hackeronereports/405", "content": "\ud83c\udfaf New Report #3255707: Windows Device Names Still Allow Path Traversal in UNC Paths After CVE-2025-27210 Fix\n\ud83d\udd3aSeverity: High\n\ud83d\udc7d Reporter: oblivionsage\n\u2b50\ufe0f Reputation: 248\n\ud83d\udee0 State: informative\n\ud83d\udcbc Team: Node.js\n\ud83d\udcb5 Bounty: null\n\ud83d\udd50 Submitted: 2025-07-16\n\u23f0 Disclosed: 2025-07-28 18:56:39\n\ud83d\udcdd Summary: null\n\ud83d\udcc2 Report JSON File: 3255707\n  @hackeronereports", "creation_timestamp": "2026-09-15T00:00:28.499136Z"}]}